Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/493a6d-bd94-4af6-b562-e174aeb1dfad/1/7DY9SPPeihkcuHZyYDLyWF-gZw8.mft
File:                     7DY9SPPeihkcuHZyYDLyWF-gZw8.mft (raw, json)
Hash identifier:          a8egx6A/o0NgMX2tZ2+Qdmc0HjrJWvWF1Lu0hFGlZfQ=
Subject key identifier:   F0:B6:CE:88:FA:DE:A2:F5:07:5A:94:FB:59:28:8F:F0:3C:13:4C:8A
Authority key identifier: EC:36:3D:48:F3:DE:8A:19:1C:B8:76:72:60:32:F2:58:5F:A0:67:0F
Certificate issuer:       /CN=ec363d48f3de8a191cb876726032f2585fa0670f
Certificate serial:       019510C76E4AAEA45540689C135DB317C2A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DY9SPPeihkcuHZyYDLyWF-gZw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/493a6d-bd94-4af6-b562-e174aeb1dfad/1/7DY9SPPeihkcuHZyYDLyWF-gZw8.mft
Manifest number:          0A12
Signing time:             Sun 16 Feb 2025 22:00:59 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:59 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:59 +0000
Files and hashes:         1: 7DY9SPPeihkcuHZyYDLyWF-gZw8.crl (hash: Q2UaZucqcoGIRIgWFhVTdPsnRQfpnD12Iy4/RFV2WG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/493a6d-bd94-4af6-b562-e174aeb1dfad/1/7DY9SPPeihkcuHZyYDLyWF-gZw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/493a6d-bd94-4af6-b562-e174aeb1dfad/1/7DY9SPPeihkcuHZyYDLyWF-gZw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7DY9SPPeihkcuHZyYDLyWF-gZw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:6e:4a:ae:a4:55:40:68:9c:13:5d:b3:17:c2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec363d48f3de8a191cb876726032f2585fa0670f
        Validity
            Not Before: Feb 16 22:00:59 2025 GMT
            Not After : Feb 17 22:00:59 2025 GMT
        Subject: CN=f0b6ce88fadea2f5075a94fb59288ff03c134c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:54:b4:da:4f:6e:f2:0d:fc:b0:74:be:5c:01:
                    d4:3e:39:0b:f6:7e:5c:53:36:2f:c3:45:e0:49:9e:
                    3a:e5:8c:1e:45:78:e2:51:9a:04:c5:62:3e:2d:09:
                    ae:74:c1:a0:6b:20:8f:c6:a6:4a:b5:a2:c6:ea:a2:
                    3b:68:f6:56:33:40:c4:07:df:23:b8:fb:4f:2b:18:
                    17:40:6f:3b:4b:4b:b9:82:0b:08:10:f8:c5:00:6d:
                    a2:21:84:67:e9:79:61:e5:cf:2b:15:ea:ee:50:ad:
                    25:e0:7a:9c:1d:d2:13:f6:1a:41:fe:6f:bc:77:93:
                    03:b2:60:a5:86:1c:e0:3c:dc:21:d6:23:aa:16:80:
                    fa:71:25:a6:5c:f6:a0:08:33:12:3f:2f:79:41:68:
                    9b:fc:f5:0f:ba:55:aa:c3:0f:9d:0b:01:02:e2:8c:
                    76:48:c3:af:75:23:0f:3a:af:4a:2f:5a:d2:76:a6:
                    cb:6a:ea:81:cb:c3:66:11:f4:b0:0e:70:1b:77:26:
                    d7:b2:fe:55:15:ec:f0:f4:81:f7:fa:e9:4b:e4:62:
                    ff:02:10:1f:bb:45:19:62:df:ff:68:e7:a2:78:11:
                    4f:df:d0:87:e1:3c:ef:66:21:4c:1d:bc:b1:ed:ef:
                    94:2f:75:a7:cf:8c:5e:d5:94:27:40:ed:09:4d:4b:
                    c9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B6:CE:88:FA:DE:A2:F5:07:5A:94:FB:59:28:8F:F0:3C:13:4C:8A
            X509v3 Authority Key Identifier:
                keyid:EC:36:3D:48:F3:DE:8A:19:1C:B8:76:72:60:32:F2:58:5F:A0:67:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DY9SPPeihkcuHZyYDLyWF-gZw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/493a6d-bd94-4af6-b562-e174aeb1dfad/1/7DY9SPPeihkcuHZyYDLyWF-gZw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/493a6d-bd94-4af6-b562-e174aeb1dfad/1/7DY9SPPeihkcuHZyYDLyWF-gZw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:6d:91:29:3e:05:94:74:49:f6:c9:04:58:92:e0:62:86:5b:
         8e:eb:4c:ba:dc:d8:8c:74:a7:ce:ea:1a:93:69:5e:15:ea:d1:
         60:0d:0b:75:49:6e:30:4b:2d:ff:b6:26:f0:80:61:e7:d7:43:
         ac:c3:d4:39:5d:8c:66:ae:a9:c2:7d:26:e7:ba:b6:72:86:95:
         cb:9b:48:38:3c:0e:00:90:16:bd:e6:5a:2c:2b:f8:36:f5:9a:
         30:ad:f4:48:ba:9d:8e:78:0b:c4:bf:24:a6:87:ff:7a:4c:f8:
         82:79:2e:33:8b:08:9e:d5:dd:ca:ee:e8:a0:0b:de:18:d4:79:
         5c:50:40:d9:9c:fa:34:1a:0e:a1:27:d4:8f:67:30:69:64:9e:
         6e:88:f5:59:24:9f:1e:a5:db:07:d5:36:63:9b:e0:ad:4f:fd:
         8e:d4:e9:8a:16:f8:85:ee:4e:a1:c1:c8:5e:35:c2:ab:13:56:
         b5:e4:b1:db:12:6e:30:ce:05:94:02:57:d6:c9:f9:4c:a6:3d:
         da:08:28:32:f6:f1:fd:d0:df:e5:2a:08:72:85:43:ed:e7:ba:
         f5:4b:93:15:80:a6:41:97:b8:a8:2c:c6:03:e6:18:f5:05:da:
         11:db:32:b4:90:1a:3e:21:52:b8:cc:db:cc:f0:b6:e3:ef:88:
         38:5c:01:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:59 2025 by rpki-client