Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
File:                     z8fvK3ZllIkteJKMvngXef3OZ9A.mft (raw, json)
Hash identifier:          WbA6khJv6y8LwXN9p2vXvoHJ5ZAZB3O9g1oT0HZXRC0=
Subject key identifier:   66:77:8B:0E:B7:43:1A:5F:76:78:26:58:35:29:35:92:3F:B6:FC:CC
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Certificate issuer:       /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial:       01951210992C9D598A5FEA58D3399FE82470
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
Manifest number:          1457
Signing time:             Mon 17 Feb 2025 04:00:32 +0000
Manifest this update:     Mon 17 Feb 2025 04:00:32 +0000
Manifest next update:     Tue 18 Feb 2025 04:00:32 +0000
Files and hashes:         1: 29zMSF3w66sUntVbm7zafoqxL7A.roa (hash: S+iEX8T3rvEJsvoQGdlPU+P3oIHIy1nvdiiFmyyofVw=)
                          2: 3QUDeKE7yNgQmHJNVO-g-9mVj4o.roa (hash: pVQz96Zg1UqB0ZGK2z8e6eGc6vTCat1YgW+D9RqJ9KA=)
                          3: PpdtSf-eqwERrg8wgynYdTmmTLE.roa (hash: ify0C44M1xKOyDvtxqel7hVqVdfYpMaLpzM5ZRBsfs8=)
                          4: vA4rANUmY77ajy3yEyLDZ1K3vnA.roa (hash: v5PKNuGl4AALPFrvuOw4WSf5gwfiM8g/rIh066tDvuI=)
                          5: z8fvK3ZllIkteJKMvngXef3OZ9A.crl (hash: Fn2K2YgxGAb7ZivXh446VtqiGP5nvIVS2X1/AFh2E0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:10:99:2c:9d:59:8a:5f:ea:58:d3:39:9f:e8:24:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
        Validity
            Not Before: Feb 17 04:00:32 2025 GMT
            Not After : Feb 18 04:00:32 2025 GMT
        Subject: CN=66778b0eb7431a5f76782658352935923fb6fccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ed:26:75:c2:22:fe:07:3d:f4:99:bd:8d:14:
                    f0:fa:fa:3f:a8:42:31:72:ad:93:b1:ef:88:69:a5:
                    e6:bc:bf:3f:e9:20:c0:fb:af:46:0d:5e:93:4a:27:
                    fc:0b:19:3a:55:1e:17:68:1f:ad:cc:57:a8:6a:66:
                    7b:a1:41:fd:a5:58:f8:a9:c3:42:da:91:df:fc:be:
                    15:f9:b9:f1:2b:f6:12:46:80:bb:f8:0f:b3:71:6a:
                    c3:e5:fa:ae:f9:71:49:cb:46:b7:b5:68:9a:8f:44:
                    2c:77:04:b5:ce:06:e7:08:5c:8e:5d:9a:78:35:99:
                    e1:0b:04:d3:12:fe:de:d9:c6:df:af:44:93:68:2b:
                    a0:cf:3b:27:09:b0:dc:eb:07:00:f1:ef:cb:7c:99:
                    a3:87:7d:fe:0d:d7:0b:ed:51:2a:93:c3:8f:90:6f:
                    5a:06:0a:43:4f:8e:d3:08:86:27:9b:d1:44:a2:13:
                    24:30:d1:a2:87:5d:5f:2c:16:ca:e5:b8:84:ff:62:
                    68:c1:d6:47:34:aa:f9:48:3b:08:aa:0e:fe:12:1e:
                    57:cc:ad:e4:c7:20:32:af:ed:f3:3a:39:82:0e:58:
                    2a:d4:eb:e3:c6:4f:6b:ed:e3:0c:f8:5b:4c:39:ec:
                    a5:f7:62:33:db:46:98:98:3f:a9:f8:6d:3b:50:97:
                    ad:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:77:8B:0E:B7:43:1A:5F:76:78:26:58:35:29:35:92:3F:B6:FC:CC
            X509v3 Authority Key Identifier:
                keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ba:cc:e3:91:80:72:48:fb:56:1d:b1:83:e4:21:fc:97:6e:
         dc:66:5f:79:d1:0d:d5:75:3e:02:98:7c:ad:eb:03:07:8f:b3:
         10:2c:ad:ff:0b:4c:02:cc:72:14:0e:a0:1d:15:e7:73:d8:b0:
         51:f1:77:5b:f6:29:3f:9c:0f:4c:49:4a:72:c3:f0:d4:47:62:
         11:07:23:2b:fa:bd:d4:7f:51:f0:cc:c1:82:3f:1c:7e:01:eb:
         67:2e:fc:e3:1f:56:18:4f:1e:55:1a:fa:f9:e8:9f:9d:10:35:
         d7:18:34:1a:2c:e1:ce:6f:0f:9a:25:b7:65:03:65:f3:19:d8:
         63:f7:cc:cd:03:bc:99:78:42:4f:9f:2d:f1:36:52:9a:6f:9f:
         cd:8f:7b:f1:9f:65:8a:f0:6d:07:cf:cc:39:7f:66:d0:3e:21:
         9c:17:b0:76:d6:18:ce:fa:68:32:49:09:1e:9f:87:c6:9a:c7:
         46:7a:4f:6a:01:56:ba:e5:97:4e:4a:7f:65:de:d0:42:6e:a8:
         a2:9c:ae:dc:1c:00:45:09:15:b3:f6:98:c7:28:7c:cf:84:a7:
         cb:83:28:9e:4e:1a:61:41:33:47:f5:0f:4d:4d:0e:a5:16:a9:
         36:50:b2:95:44:ec:64:fc:10:ee:8f:99:0d:12:7a:41:3d:f2:
         e4:7a:49:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:50 2025 by rpki-client