Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
File:                     sQvyxqnxpCuKzuASWfkfUUSrivU.mft (raw, json)
Hash identifier:          5Y1+aHP0bVnphy/a9RbHRT6FGWdZh6UFi6pnYnkJg7o=
Subject key identifier:   DC:8E:D9:F3:71:93:F3:0C:2F:0F:A4:4D:EF:82:69:F1:51:0C:09:11
Authority key identifier: B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5
Certificate issuer:       /CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
Certificate serial:       0195116BB3C74657125208E0081E097E7B9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
Manifest number:          03EE
Signing time:             Mon 17 Feb 2025 01:00:25 +0000
Manifest this update:     Mon 17 Feb 2025 01:00:25 +0000
Manifest next update:     Tue 18 Feb 2025 01:00:25 +0000
Files and hashes:         1: RagZVp33x_ZhRPfhRcY-ePMpfNA.roa (hash: gMsYucRSntBj1BaVj8EkbP09b3qQ09XAtS6QWD6kZsw=)
                          2: sQvyxqnxpCuKzuASWfkfUUSrivU.crl (hash: x9MY0ftvXJWFXFmFXBM8qO0kE8adJ552l5Em44YrHvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:6b:b3:c7:46:57:12:52:08:e0:08:1e:09:7e:7b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
        Validity
            Not Before: Feb 17 01:00:25 2025 GMT
            Not After : Feb 18 01:00:25 2025 GMT
        Subject: CN=dc8ed9f37193f30c2f0fa44def8269f1510c0911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:28:25:67:00:54:bd:00:6f:74:bf:4f:3b:e1:
                    24:8b:2a:9f:75:7f:ba:b5:6e:c8:58:a5:53:71:5c:
                    c4:e1:45:6c:61:31:85:bd:9b:c5:e1:71:2b:68:e4:
                    c2:39:30:1f:f4:50:6e:33:98:cb:3c:5c:e8:46:9d:
                    db:18:85:03:22:68:1e:dd:dd:a1:63:61:88:55:b3:
                    2b:63:f3:fe:6a:1d:1b:da:75:a6:e4:f9:01:13:15:
                    29:88:5d:07:65:bf:28:e5:f2:b9:a2:97:35:49:0b:
                    a4:0b:52:e5:0b:21:54:c2:0d:cd:60:b6:27:de:92:
                    b2:ea:0a:26:50:fb:46:f2:ad:68:26:b4:30:8b:f1:
                    cd:d0:12:65:aa:bb:2d:69:78:3a:b4:97:57:0d:b7:
                    fb:10:05:13:af:1b:31:98:f9:a8:d1:cc:20:20:dd:
                    41:8d:40:e4:32:48:bb:ac:cb:a2:df:99:69:dc:9a:
                    d6:35:17:64:dd:d7:2f:17:2a:45:01:0e:4a:d2:99:
                    5b:94:bb:e6:d9:77:a9:46:86:7a:dd:59:a9:16:24:
                    93:14:15:a8:6b:ee:c6:3b:90:ec:10:c0:65:5c:bd:
                    2b:7a:dd:9e:3c:05:fd:14:90:de:89:e7:d6:32:77:
                    78:b1:cf:25:48:4b:b7:b9:aa:7c:8d:53:9a:e8:3c:
                    e8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8E:D9:F3:71:93:F3:0C:2F:0F:A4:4D:EF:82:69:F1:51:0C:09:11
            X509v3 Authority Key Identifier:
                keyid:B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f1:52:1c:43:e5:88:e0:b9:66:ed:b9:e3:88:af:9c:67:4a:
         58:00:40:9d:f8:1d:8f:f5:53:db:de:4b:13:ba:10:a9:3a:b6:
         2a:4d:a1:23:af:70:4f:3d:b1:2c:e2:c6:d8:72:a6:fe:47:20:
         ae:e5:33:03:f4:0a:60:53:89:2a:bb:70:9e:bc:4c:4e:e6:c8:
         7b:fd:77:18:17:ce:8c:b8:2c:21:3f:38:90:7e:74:4f:19:5c:
         57:66:61:be:b1:50:02:f9:fe:2a:fe:ed:d3:5b:84:cb:2c:9a:
         dc:7f:62:51:01:3b:66:c0:7c:c3:38:5e:a9:ce:5d:3e:9d:3e:
         08:7f:13:e3:4e:bb:e6:35:72:5d:bc:e3:e5:93:c4:c1:2d:ba:
         29:9d:7b:cc:7c:9c:13:a9:b5:b7:28:51:27:f3:8c:00:97:00:
         36:84:32:1b:11:59:d3:21:c9:c2:02:8b:06:06:2a:62:84:35:
         93:1b:40:13:99:52:17:4c:e4:ce:f7:f4:b4:3a:7a:75:f6:4d:
         82:da:7f:17:ba:c8:31:79:3b:9d:2b:fa:04:71:17:67:07:87:
         5d:93:01:e6:c8:5b:7e:d3:2e:67:6a:d2:ea:12:44:4b:b0:08:
         97:fb:67:62:89:8b:98:29:5a:95:e3:0b:b4:e8:b9:c1:a9:28:
         b1:bc:11:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:41 2025 by rpki-client