Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
File:                     5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft (raw, json)
Hash identifier:          HLJ1i+R0LZVvpXARe6EyD8MAnyPgoZoNFLtiG6IikvI=
Subject key identifier:   0E:79:67:F0:47:1B:07:97:D9:51:94:6F:DB:4D:67:3E:5C:31:06:B2
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Certificate issuer:       /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial:       01946109E423725614B01AD9E4F4BC55EFC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
Manifest number:          C9
Signing time:             Mon 13 Jan 2025 19:00:25 +0000
Manifest this update:     Mon 13 Jan 2025 19:00:25 +0000
Manifest next update:     Tue 14 Jan 2025 19:00:25 +0000
Files and hashes:         1: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl (hash: 43Hkbx6WITHerIbdtwrNx5TGEo6UURiV3+HMHYCsguc=)
                          2: LyUeFaQumjkEXGwuTN3adk_CmUQ.roa (hash: 1oee/niCKCFU/8iZhol3JSIxvOFh3whzL0NQ6+tUdxg=)
                          3: ldrAy5A_M0tg2d0BXg7t_q2mTmY.roa (hash: PzgoMs0khlbRVil+vbEFVoeQZaszoG+3sW3UoJkJrfY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 Jan 2025 19:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:61:09:e4:23:72:56:14:b0:1a:d9:e4:f4:bc:55:ef:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
        Validity
            Not Before: Jan 13 19:00:25 2025 GMT
            Not After : Jan 14 19:00:25 2025 GMT
        Subject: CN=0e7967f0471b0797d951946fdb4d673e5c3106b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6e:54:6f:ba:c9:5a:5f:7c:dc:ef:34:2f:66:
                    37:2e:a1:9f:f1:33:c2:b0:df:df:15:43:2c:bc:e4:
                    cf:f3:35:a8:e7:d0:f5:ec:e9:95:74:78:af:b8:cd:
                    c1:a1:1a:77:cf:3b:b8:01:84:6c:a2:30:80:01:3b:
                    fe:19:07:ea:3d:7b:ba:1e:cc:2f:ef:e9:2c:53:3f:
                    cb:5f:df:b4:6b:05:79:1f:1f:17:48:fc:d5:29:6f:
                    33:a0:01:2e:c1:a8:e8:dd:9f:ab:bb:1c:49:00:3a:
                    d8:d0:84:3e:16:d4:6d:cc:c6:c4:ba:16:8f:6e:62:
                    ff:bc:ee:d8:e2:f8:3e:9e:aa:09:0b:4f:7b:81:8d:
                    f0:9b:e7:e0:d2:fa:c2:65:f3:05:9b:59:ab:81:ab:
                    e1:8e:70:87:65:98:5e:ce:c5:fb:68:13:f0:58:4d:
                    a5:9e:a9:0a:f0:d3:b5:c2:01:40:80:d9:c8:ec:79:
                    6a:44:fe:da:4c:b3:ab:fa:05:5e:ad:66:1b:cd:ea:
                    ef:0d:e4:f1:12:d0:73:fa:fc:1b:f1:9c:e0:bb:83:
                    22:1c:7a:1e:6d:0c:89:ee:52:89:95:56:17:7f:b2:
                    12:69:39:95:c4:6e:2b:1f:e8:22:52:ec:91:a1:ec:
                    29:9a:46:be:f1:1b:29:c1:a6:ae:62:51:d3:85:cd:
                    c2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:79:67:F0:47:1B:07:97:D9:51:94:6F:DB:4D:67:3E:5C:31:06:B2
            X509v3 Authority Key Identifier:
                keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:48:d0:72:9f:57:57:2a:59:de:ea:43:ba:44:30:ca:18:3c:
         04:0c:16:8e:2c:0f:a9:c3:2a:46:31:fa:fa:33:c6:67:0a:09:
         bb:91:a3:a2:c3:4b:1d:52:e0:b6:43:bf:c6:d1:b5:3a:11:e0:
         9e:9e:46:6e:b4:f7:a7:2a:f9:70:87:43:25:dd:21:aa:29:40:
         bc:26:bc:8d:c5:f4:ad:98:6e:c0:3a:63:29:64:38:52:88:b2:
         be:b9:ac:8d:ec:70:3a:51:09:d1:72:5f:f4:a1:87:67:32:ed:
         69:85:26:1c:6f:e6:3d:50:6f:83:70:19:a9:93:00:5b:11:cf:
         83:93:34:15:6a:3a:14:e5:2a:58:2c:06:35:b8:cb:d5:52:c5:
         f5:38:eb:32:8c:ee:c6:30:32:cc:b6:c7:9c:f7:2a:68:c6:7f:
         02:b3:e7:2e:94:e1:b8:0b:7a:be:18:2b:85:7f:55:4d:ff:ba:
         38:af:0b:2d:46:5f:92:c6:78:06:21:b9:ef:98:17:d5:2f:29:
         8e:bb:e9:db:b9:92:fe:94:e2:ca:28:34:1a:9a:bd:74:e9:9a:
         03:f1:17:26:76:41:c9:06:c2:74:45:16:4c:68:34:c4:16:d3:
         c6:f5:b5:08:b3:5c:b0:80:a1:5e:9e:12:a7:96:4b:a8:c6:e1:
         b0:b3:5e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----