Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
File:                     ilX0iZwkbRdUoWiC0OdoB-uOK14.mft (raw, json)
Hash identifier:          mflxVE2iyEhHADP2EZedXXpmmMDoc36ZbdU4JoVtl6s=
Subject key identifier:   E8:30:BF:91:0C:8E:22:D2:0C:F5:A4:5D:AC:9B:30:0C:23:A5:D2:86
Authority key identifier: 8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
Certificate issuer:       /CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Certificate serial:       01958C60B537939072189C428CBF305A07DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
Manifest number:          0E90
Signing time:             Wed 12 Mar 2025 22:01:42 +0000
Manifest this update:     Wed 12 Mar 2025 22:01:42 +0000
Manifest next update:     Thu 13 Mar 2025 22:01:42 +0000
Files and hashes:         1: ilX0iZwkbRdUoWiC0OdoB-uOK14.crl (hash: 9eoNNLrbSG1O0qC3XkvzPuD6YltmVIdcFr9P1hCyPJs=)
                          2: yZL-h7CMMZ_jCkqOUWXzTNR83Ls.roa (hash: 6I7n0xCvQ3FC2MV2Pqk6KjdQE1M7SQrxGUU9YrmgwbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:60:b5:37:93:90:72:18:9c:42:8c:bf:30:5a:07:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
        Validity
            Not Before: Mar 12 22:01:42 2025 GMT
            Not After : Mar 13 22:01:42 2025 GMT
        Subject: CN=e830bf910c8e22d20cf5a45dac9b300c23a5d286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5f:43:f7:50:c0:23:fe:57:33:b0:67:fa:d6:
                    0a:a6:27:09:0c:f1:9d:50:dd:e7:bd:c9:6e:77:29:
                    5a:de:40:c7:b7:09:14:cf:7f:68:d3:9e:65:23:19:
                    85:a8:3b:7c:51:f2:ff:ea:21:a8:8b:07:27:62:94:
                    1b:d6:cb:e7:2b:e5:4f:41:b9:06:e7:eb:c1:9a:60:
                    2c:5c:70:d6:61:3f:a5:2d:1e:be:12:49:47:81:6b:
                    9c:0d:9c:22:d4:15:2c:4e:9a:7f:aa:4b:8e:18:48:
                    5e:a7:69:ee:8a:48:be:a6:d4:8c:9e:7f:0f:3a:d0:
                    47:b6:e8:c8:83:4a:6e:79:76:52:4b:5d:5b:33:fa:
                    10:4f:6a:e7:35:93:f0:27:8c:19:cd:17:34:08:5a:
                    dc:b0:6a:a1:87:69:4c:a5:d2:a9:bf:44:32:16:ef:
                    47:f3:cf:15:c3:49:ea:2a:77:95:7d:ae:6f:75:61:
                    5c:43:d0:f5:7c:61:99:24:ed:a2:ca:14:bf:8f:84:
                    2a:f3:cd:27:0d:59:79:11:58:dd:2f:5e:f3:3f:c7:
                    ad:30:d4:eb:8a:d1:61:bf:1c:f7:19:36:a2:d1:af:
                    5e:89:54:15:4e:4f:be:32:5d:df:58:78:56:fd:1c:
                    13:52:4b:59:df:16:1c:71:f7:a7:aa:f1:5b:68:9c:
                    41:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:30:BF:91:0C:8E:22:D2:0C:F5:A4:5D:AC:9B:30:0C:23:A5:D2:86
            X509v3 Authority Key Identifier:
                keyid:8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:8a:67:21:1c:7f:6c:a3:44:f1:f2:b3:91:9d:65:9e:12:f5:
         66:ba:bd:20:20:d0:d0:77:0b:3c:ec:45:9a:97:1a:27:b5:bb:
         e5:4f:11:74:a7:cd:7f:08:9a:90:21:ad:49:43:36:e3:17:51:
         77:37:8a:42:d1:8a:6d:58:25:e7:e6:cd:37:fc:2d:fa:68:89:
         e6:a1:a9:59:a9:3f:ba:23:7b:35:eb:e9:e1:4f:92:42:bf:4d:
         b8:ed:e1:d1:55:99:05:9c:73:92:12:2c:08:42:7d:b5:63:77:
         d4:a8:99:94:55:87:16:38:07:08:98:a3:ac:5a:9a:a8:61:eb:
         46:44:fd:d6:8d:a0:e7:0f:25:d8:30:38:91:42:96:80:f2:c0:
         89:f8:f9:3b:57:1e:dc:22:ec:ec:97:c5:00:59:d6:63:5e:5e:
         cb:7c:b0:63:f8:96:97:a5:6d:20:55:47:18:1b:8d:7d:50:e3:
         99:38:df:d1:89:8d:2d:26:1e:8c:28:3b:b5:c0:de:c8:26:64:
         df:77:5e:df:bc:e0:53:f6:3c:60:cb:e9:87:05:53:bc:ee:0c:
         e9:b2:4a:b8:f6:9e:b7:07:00:a0:79:3e:f8:d1:8f:bc:4b:c8:
         9d:1c:75:62:ae:67:53:b7:98:fb:0b:62:38:0c:5a:ff:e4:c7:
         8f:c1:b2:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYLU3k5ByGJxCjL8wWgfcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNTVmNDg5OWMyNDZkMTc1NGExNjg4MmQwZTc2ODA3ZWI4
ZTJiNWUwHhcNMjUwMzEyMjIwMTQyWhcNMjUwMzEzMjIwMTQyWjAzMTEwLwYDVQQD
EyhlODMwYmY5MTBjOGUyMmQyMGNmNWE0NWRhYzliMzAwYzIzYTVkMjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl9D91DAI/5XM7Bn+tYKpicJDPGd
UN3nvcludyla3kDHtwkUz39o055lIxmFqDt8UfL/6iGoiwcnYpQb1svnK+VPQbkG
5+vBmmAsXHDWYT+lLR6+EklHgWucDZwi1BUsTpp/qkuOGEhep2nuiki+ptSMnn8P
OtBHtujIg0pueXZSS11bM/oQT2rnNZPwJ4wZzRc0CFrcsGqhh2lMpdKpv0QyFu9H
888Vw0nqKneVfa5vdWFcQ9D1fGGZJO2iyhS/j4Qq880nDVl5EVjdL17zP8etMNTr
itFhvxz3GTai0a9eiVQVTk++Ml3fWHhW/RwTUktZ3xYccfenqvFbaJxBnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgwv5EMjiLSDPWkXaybMAwjpdKGMB8GA1UdIwQY
MBaAFIpV9ImcJG0XVKFogtDnaAfrjiteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxYMGlad2tiUmRVb1dpQzBPZG9CLXVPSzE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi84NjRmZTItMDQ3OC00MzgxLTgzMjAt
YmVkYWZiMDkyMmRkLzEvaWxYMGlad2tiUmRVb1dpQzBPZG9CLXVPSzE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi84NjRmZTItMDQ3OC00MzgxLTgzMjAtYmVkYWZiMDkyMmRk
LzEvaWxYMGlad2tiUmRVb1dpQzBPZG9CLXVPSzE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYopnIRx/
bKNE8fKzkZ1lnhL1Zrq9ICDQ0HcLPOxFmpcaJ7W75U8RdKfNfwiakCGtSUM24xdR
dzeKQtGKbVgl5+bNN/wt+miJ5qGpWak/uiN7Nevp4U+SQr9NuO3h0VWZBZxzkhIs
CEJ9tWN31KiZlFWHFjgHCJijrFqaqGHrRkT91o2g5w8l2DA4kUKWgPLAifj5O1ce
3CLs7JfFAFnWY15ey3ywY/iWl6VtIFVHGBuNfVDjmTjf0YmNLSYejCg7tcDeyCZk
33de37zgU/Y8YMvphwVTvO4M6bJKuPaetwcAoHk++NGPvEvInRx1Yq5nU7eY+wti
OAxa/+THj8Gy+g==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:14:38 2025 by rpki-client