Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File:                     dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier:          jmnXIwLHoMhRq/m8/IOYgYNcXQbDHU9l8tc8yUMxHlU=
Subject key identifier:   C3:39:07:35:14:F4:94:4B:3F:2A:43:DC:5E:63:C7:18:FF:C3:A2:E9
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer:       /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial:       019510C7E468CD76894A1264CF9E0F5215AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number:          0F30
Signing time:             Sun 16 Feb 2025 22:01:30 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:30 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:30 +0000
Files and hashes:         1: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: lGDYLRxwAKqaNlkQKvzIWxDV8qo1kwYD8Fk6NKLUz5U=)
                          2: kyN0WWkyKmvqixy5lWeDm8cyXsk.roa (hash: PvvB6yKuDqOU2looXNznQebEk8ZA6ldARR0PgTYG5Pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:e4:68:cd:76:89:4a:12:64:cf:9e:0f:52:15:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
        Validity
            Not Before: Feb 16 22:01:30 2025 GMT
            Not After : Feb 17 22:01:30 2025 GMT
        Subject: CN=c339073514f4944b3f2a43dc5e63c718ffc3a2e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:05:ac:0e:db:29:34:8d:c1:be:a4:69:b8:d2:
                    d5:89:45:ed:fd:02:e0:6b:ed:86:71:e9:1e:05:74:
                    3b:15:66:e0:1d:04:4f:89:46:77:c4:85:61:1e:4a:
                    6b:ef:23:fe:d3:00:d8:28:67:02:55:34:29:77:6c:
                    97:7b:3d:ad:07:d4:df:21:6f:36:90:0f:b8:05:15:
                    55:ac:66:5b:db:7f:6b:12:b2:9b:29:31:8b:a1:67:
                    41:1f:42:d7:d6:d4:f8:98:66:4b:2f:a4:e1:df:60:
                    de:80:3b:41:78:a9:4d:13:1f:50:6f:94:ca:ca:f0:
                    00:98:62:ad:d9:5d:60:d3:c6:19:b5:78:37:20:82:
                    63:ba:24:6f:3b:d6:6d:b2:9a:36:16:c6:58:dc:ed:
                    ef:b8:df:c9:2f:85:b3:46:19:80:97:0c:4b:50:b8:
                    41:8e:9b:4a:e0:cd:6a:34:52:ce:34:e8:62:c7:e5:
                    65:74:be:34:b6:bd:97:9d:d0:f6:ba:25:d9:88:eb:
                    41:aa:0a:34:6d:a6:46:ab:25:c0:0b:ce:c5:ae:56:
                    b1:fe:65:d1:13:a1:72:16:ea:9b:01:74:0c:d6:8d:
                    21:de:af:29:30:e1:bf:00:d3:15:c2:7f:ea:a1:be:
                    46:55:1b:d3:7f:42:ae:2c:49:32:e9:44:73:ae:13:
                    1f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:39:07:35:14:F4:94:4B:3F:2A:43:DC:5E:63:C7:18:FF:C3:A2:E9
            X509v3 Authority Key Identifier:
                keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:61:cf:ed:42:84:8d:55:b9:80:ec:96:bd:69:e5:1b:47:9a:
         f6:19:eb:a4:43:4b:a2:c9:9c:84:56:cb:63:b1:2a:35:82:b6:
         49:dd:cf:13:f1:21:a2:43:85:fa:41:84:e0:7d:8e:1c:52:d2:
         c1:fc:09:35:c8:2d:c1:c6:39:32:07:d9:47:34:22:94:f0:b6:
         7b:06:94:3d:0a:31:4b:57:77:6b:17:a8:2c:66:b8:82:3d:70:
         28:6f:f7:03:b1:a2:93:33:e4:73:96:97:f4:b1:c0:52:23:ec:
         5f:85:b0:bf:d8:17:53:c7:0c:6f:ad:c2:92:13:a7:3b:01:04:
         3f:f6:f3:1d:4f:f0:06:6c:7b:fa:20:dd:8f:da:fb:7a:08:39:
         3a:cd:65:b8:1d:50:b2:32:24:5d:34:6f:a3:d5:41:ca:ec:2a:
         cd:9b:b8:7b:37:29:ec:10:54:1b:85:ae:e1:e0:0f:08:c1:c8:
         ce:40:42:d4:66:07:cc:39:ef:c2:58:2d:fc:1c:ef:54:38:af:
         79:4f:a6:3f:b3:5b:52:d7:c4:00:1e:21:7e:38:09:dc:e1:f0:
         61:4f:0c:76:fa:dc:95:3e:f4:cf:04:f3:e5:4b:42:6d:a4:d4:
         94:b5:70:d7:40:9e:19:f9:2e:88:ee:cf:70:d3:4d:8d:f2:14:
         eb:87:c4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:37 2025 by rpki-client