Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
File:                     6xUL-GuHz4n8RJBgZfaXKwawnqg.mft (raw, json)
Hash identifier:          3wsc9BFO0IXZLLpa/O6gu8PNY7z+TWdp0IF8Vb2yaUU=
Subject key identifier:   C7:64:D2:8A:D5:C9:DC:6F:8B:8D:EB:76:6E:E0:B3:0A:0B:07:2E:E0
Authority key identifier: EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8
Certificate issuer:       /CN=eb150bf86b87cf89fc44906065f6972b06b09ea8
Certificate serial:       019510C7F09A68669B8C48C746F0D80BE54D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
Manifest number:          1453
Signing time:             Sun 16 Feb 2025 22:01:33 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:33 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:33 +0000
Files and hashes:         1: 6xUL-GuHz4n8RJBgZfaXKwawnqg.crl (hash: tvVznDxsciqBvOpKWiWY94s+NXVtHKW9fLpJeGP/6Ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:f0:9a:68:66:9b:8c:48:c7:46:f0:d8:0b:e5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb150bf86b87cf89fc44906065f6972b06b09ea8
        Validity
            Not Before: Feb 16 22:01:33 2025 GMT
            Not After : Feb 17 22:01:33 2025 GMT
        Subject: CN=c764d28ad5c9dc6f8b8deb766ee0b30a0b072ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:78:47:4e:c0:d9:7f:69:b3:b8:83:6f:35:29:
                    12:ae:41:25:04:5b:ea:4a:a8:5d:6b:15:24:bd:27:
                    55:5a:d2:2a:fb:1e:b0:cb:22:6b:79:3a:79:ed:25:
                    cb:ea:09:56:92:0f:c1:72:cd:36:55:72:75:87:9d:
                    f7:00:68:3c:c7:89:69:23:16:60:52:c2:83:8b:ec:
                    bf:0e:ca:8f:3a:4f:21:8c:2e:7a:e7:94:00:77:cd:
                    8b:55:0e:92:57:4a:eb:0b:7e:99:a8:e0:82:39:b8:
                    ee:40:19:91:e0:8c:b6:5a:c9:58:d3:42:05:f5:07:
                    85:01:83:30:07:5b:f4:b8:69:4b:75:59:bb:54:35:
                    30:b8:4a:fb:95:49:17:1c:0b:8f:7b:7f:ae:ea:cf:
                    85:39:61:2f:77:84:33:f2:5a:55:c9:6c:62:20:75:
                    88:c5:7f:c2:cf:1c:6a:b7:56:d3:8e:d2:85:10:64:
                    ac:ee:22:72:d9:be:67:cd:12:d2:25:fd:84:12:99:
                    ce:5d:e3:97:ec:9b:4f:5b:3b:82:b9:ac:07:50:51:
                    af:97:0e:28:c2:c3:0f:bb:e1:c9:b0:54:02:8a:3f:
                    5f:4f:7b:34:e1:0f:e0:b6:5d:41:c8:a4:19:77:87:
                    b6:3d:4a:0c:b9:61:b3:37:5a:59:53:7a:cd:e9:34:
                    1c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:64:D2:8A:D5:C9:DC:6F:8B:8D:EB:76:6E:E0:B3:0A:0B:07:2E:E0
            X509v3 Authority Key Identifier:
                keyid:EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c6:7f:9d:99:c5:a4:26:95:4f:9b:3f:b7:da:ac:7a:3d:38:
         5c:22:5d:e0:a5:b9:f3:e7:f1:1e:85:84:32:4f:72:79:7f:ad:
         c7:a8:c4:cf:ee:aa:52:06:25:ce:36:61:e4:4c:f8:21:67:49:
         af:52:05:6c:f6:87:ae:f1:38:04:6a:15:e1:ca:d8:a7:df:13:
         26:f8:0f:72:27:37:92:22:3f:21:a4:05:9a:23:02:40:96:63:
         33:d7:48:1c:ba:7b:5d:26:ba:6d:34:65:d7:f4:b5:ba:4d:0b:
         cd:82:9b:af:cd:81:a0:f6:22:90:8e:98:d0:d0:dd:36:f5:18:
         02:03:24:e6:35:ca:6a:5b:62:8a:06:e1:b7:14:b1:83:94:e8:
         28:af:e5:f0:0e:bc:90:70:27:a4:7f:ea:2a:8a:23:7e:9c:1c:
         a3:88:c5:28:9c:3e:54:28:2e:e9:ff:3f:c7:3a:b1:72:22:43:
         be:91:e6:ad:0e:0e:8a:22:c4:5e:2d:0c:63:3a:e3:03:35:b5:
         7c:4a:5b:91:de:0d:cf:5c:62:36:d5:67:8b:ad:98:6a:12:cb:
         bc:9f:f1:1d:9c:74:7e:0a:a3:4e:76:a4:60:67:83:bb:af:f5:
         7a:f7:ba:63:da:9e:e8:98:14:25:4b:fe:a4:5b:cc:1f:62:67:
         64:d1:0f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:42 2025 by rpki-client