Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
File:                     C0ojfRF9934LiqUS9vJfsgf5orE.mft (raw, json)
Hash identifier:          B1e3b3oqeJWcCAdr0sQuYCcxMdO+E+t6uOFgCV0igrA=
Subject key identifier:   BE:40:61:28:DB:C5:79:B1:05:B5:2E:D3:48:8F:CE:1D:E1:70:DE:E0
Authority key identifier: 0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
Certificate issuer:       /CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Certificate serial:       01958CCE84A64A9F83452320D7900C8579F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
Manifest number:          1031
Signing time:             Thu 13 Mar 2025 00:01:39 +0000
Manifest this update:     Thu 13 Mar 2025 00:01:39 +0000
Manifest next update:     Fri 14 Mar 2025 00:01:39 +0000
Files and hashes:         1: C0ojfRF9934LiqUS9vJfsgf5orE.crl (hash: YoyMEwWwB1OmsuW7lZPywbg47/M1aDsnGMAnuKX5Ke4=)
                          2: ubaYGhsK3un9FzpeOuJImEsVY0k.roa (hash: GKSurghCGTsvWWfo6kF8DtoCXANGJM6Q52lyK44WE3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:ce:84:a6:4a:9f:83:45:23:20:d7:90:0c:85:79:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
        Validity
            Not Before: Mar 13 00:01:39 2025 GMT
            Not After : Mar 14 00:01:39 2025 GMT
        Subject: CN=be406128dbc579b105b52ed3488fce1de170dee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:83:a2:ba:b7:38:b3:70:67:88:10:af:1e:61:
                    4a:f9:67:ca:89:53:7f:c7:e7:2c:33:8e:1f:d6:c0:
                    c1:78:54:77:de:eb:fe:25:90:e2:c0:57:57:be:6c:
                    8c:5f:48:5b:09:f2:57:c9:f0:2f:5e:41:81:8f:ed:
                    c7:84:40:3d:33:a1:84:ca:ad:33:d1:77:84:54:9f:
                    6f:40:39:ce:25:1f:59:8d:27:bd:ce:c0:1f:0a:ff:
                    7c:e9:81:14:ff:2f:8b:c0:c7:7e:2f:65:ca:84:ca:
                    b8:22:78:7b:dc:7c:79:30:1a:a9:c0:72:2c:7d:01:
                    15:8c:53:9c:06:a7:09:8e:d6:35:ac:0b:f5:7f:36:
                    41:a4:ba:7e:87:ce:ae:a6:88:dc:34:05:a8:67:38:
                    22:65:69:35:18:3f:46:01:46:cb:46:a9:f4:5c:e0:
                    86:58:5d:37:73:f1:19:39:dc:ac:19:7e:d9:67:3b:
                    4e:5d:5f:f1:9d:52:b4:5d:b9:14:a3:26:13:01:94:
                    db:d9:bf:86:df:5c:df:8c:a5:13:e3:53:01:cf:b9:
                    b0:d9:a6:65:05:30:4e:13:73:44:81:7d:83:04:b1:
                    91:e1:1b:f0:a1:31:09:73:b7:66:21:ec:6f:4e:cd:
                    ac:2c:b2:85:27:c9:a8:00:98:ea:74:14:7a:d5:07:
                    5b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:40:61:28:DB:C5:79:B1:05:B5:2E:D3:48:8F:CE:1D:E1:70:DE:E0
            X509v3 Authority Key Identifier:
                keyid:0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:cf:44:33:62:97:68:9b:3b:28:f9:b7:c9:b1:23:2e:4b:de:
         eb:80:ca:d4:07:50:39:38:b3:35:b9:da:a2:29:f6:af:08:cb:
         b0:95:4c:a3:87:ae:bb:7f:b4:76:d0:04:0b:d0:07:27:bb:48:
         3d:77:ec:76:41:22:87:21:04:e7:2e:35:59:9e:e3:38:3e:45:
         77:c7:83:fb:af:26:38:b0:bb:d2:87:26:73:59:5f:3c:8a:95:
         d5:f7:65:5a:75:ee:3c:45:ec:b2:ec:20:6e:4c:5a:0b:a0:6d:
         ba:93:5f:e1:3c:cc:5c:f4:df:83:e2:55:73:37:1c:d4:38:67:
         23:84:02:1b:35:ed:2f:d9:63:fd:4a:90:eb:15:6a:90:d7:ae:
         0a:04:2b:97:91:2c:63:ea:3a:3d:57:4a:32:af:f1:6f:a3:78:
         e6:20:1c:42:0c:29:e3:53:25:23:1a:01:81:08:c2:f1:06:50:
         40:39:54:6d:0c:6a:db:37:d7:e3:eb:e6:0c:1d:80:f0:58:b6:
         c3:dd:45:5b:5d:77:db:aa:51:30:d9:22:96:24:29:d0:0a:93:
         b7:20:de:5b:1d:83:20:3a:48:75:05:0a:83:9d:cf:1c:0c:73:
         9d:78:fd:6e:b2:5f:f3:df:ce:c0:29:49:6c:21:eb:df:f8:a2:
         ff:cf:34:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:52 2025 by rpki-client