Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
File:                     SJwmPoGEhs_YMcJF3frMqR-9gcA.mft (raw, json)
Hash identifier:          uyvgZQftTLBRAkTIk7JGUXRk/PDQ/bXk3FyrOpsLk5Q=
Subject key identifier:   79:9C:BB:75:FF:8D:19:18:34:92:55:C3:CF:EB:EC:B0:34:7A:DE:6E
Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Certificate issuer:       /CN=489c263e818486cfd831c245ddfacca91fbd81c0
Certificate serial:       0194C49A2B0445C4DB018EFD95C6CC89BB7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
Manifest number:          B2
Signing time:             Sun 02 Feb 2025 03:00:25 +0000
Manifest this update:     Sun 02 Feb 2025 03:00:25 +0000
Manifest next update:     Mon 03 Feb 2025 03:00:25 +0000
Files and hashes:         1: 5cgOzSdi7uU8K175If3cpMpwKRM.roa (hash: C/i5uJSjAgqLYfWFS7wVgO1ATrqTFXCd5z/TUE/tvF4=)
                          2: SJwmPoGEhs_YMcJF3frMqR-9gcA.crl (hash: REebSYqAg9BUIc2YT/efwdNP40yWi5JtG3VWkIE4jcU=)
                          3: sh9Rh_XHxgs73xUgLaXpfEWoL2M.roa (hash: u3ZNcYvwXVoq0LzAan53+HMQH1md2pw7AMcoma6/Peg=)
                          4: uFwm3LO6GthW3CaP1u11g2Pmnbs.roa (hash: P/XCOSSZFXhzFRU3N+DJNZYyvprMkXA10JImXpYTCCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:9a:2b:04:45:c4:db:01:8e:fd:95:c6:cc:89:bb:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0
        Validity
            Not Before: Feb  2 03:00:25 2025 GMT
            Not After : Feb  3 03:00:25 2025 GMT
        Subject: CN=799cbb75ff8d1918349255c3cfebecb0347ade6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:fd:ae:c2:a4:af:b6:9c:51:9b:8d:99:40:
                    c6:57:8b:c7:39:bb:cc:d4:c4:3f:06:4a:09:f8:e3:
                    5e:4c:a6:d5:a1:74:47:62:6d:fe:51:50:11:fa:da:
                    f8:b5:f7:3b:e5:d6:1f:93:e6:c0:8b:86:1c:15:ee:
                    7e:f7:1f:77:47:92:ae:f3:fb:da:77:30:4d:3e:0a:
                    5d:5b:b8:db:a1:c8:33:70:18:2a:17:50:ae:cb:09:
                    e6:90:19:8a:64:00:52:5d:0b:f8:ee:8f:10:eb:94:
                    4b:72:b9:b6:ea:67:9f:f8:14:23:de:2c:38:b5:0b:
                    04:87:4e:c3:c2:77:41:bb:35:a7:4f:ec:de:67:f0:
                    38:ea:0c:6b:ed:02:0c:46:fa:98:d2:00:60:1a:21:
                    d5:29:5c:74:8c:9c:72:3e:52:04:09:e3:3e:4e:fe:
                    f0:49:f0:67:43:89:de:ab:b2:f2:2c:21:b4:e6:b3:
                    67:dd:44:66:32:f3:71:f8:10:dc:32:00:2f:89:4b:
                    49:a9:71:f1:5c:96:46:23:58:a8:31:ed:f5:b9:47:
                    6b:cb:0c:25:72:f4:1c:41:3a:73:98:53:2b:54:11:
                    fa:5a:4a:4c:b0:ec:14:2e:0c:33:06:72:1a:0c:ee:
                    ac:f1:92:c3:ae:23:31:5f:8c:86:2f:99:ff:cf:84:
                    0e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9C:BB:75:FF:8D:19:18:34:92:55:C3:CF:EB:EC:B0:34:7A:DE:6E
            X509v3 Authority Key Identifier:
                keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:67:03:52:0c:99:5b:c7:bc:c5:d8:9a:8f:8d:8e:a1:18:30:
         79:f1:65:01:f3:ab:fb:35:b2:97:16:e5:0e:df:3c:0a:b6:2b:
         76:0b:cd:4a:66:15:7d:43:53:4b:e0:a5:bd:22:bf:de:5a:e0:
         8f:48:34:ac:6f:78:ed:50:b6:61:2d:4e:3c:ef:1c:c3:34:69:
         40:f8:8b:67:bc:2f:0a:63:d5:58:89:95:7a:b2:c8:fe:32:7c:
         79:e9:5d:72:ff:df:38:b9:96:d1:34:19:be:86:cd:fe:1d:56:
         6e:41:2e:aa:c5:15:50:af:fe:97:51:c2:1c:25:d1:8d:f8:87:
         27:7e:4f:5d:6c:9d:7c:de:b1:e8:fd:5a:db:e9:57:b1:05:15:
         a0:6a:f2:64:73:56:c7:d1:98:74:81:e1:e7:6c:4f:81:61:92:
         38:5f:d8:3a:b5:79:c6:fa:a7:0a:63:9f:2b:35:82:71:08:00:
         b8:32:d5:29:b9:ac:d0:5d:d8:47:35:60:37:23:f0:bc:fb:62:
         fb:cf:7d:d9:4d:9e:6a:cd:b4:20:20:10:aa:a4:e0:10:52:a5:
         c7:8b:29:5b:c4:43:eb:16:f0:06:0b:9e:d9:0b:b2:49:c0:a2:
         27:d3:9e:5b:3d:09:af:6b:e6:d7:d6:83:e7:52:94:ad:56:c5:
         47:32:2b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:45:30 2025 by rpki-client