Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
File:                     4bUJZyudmYtGScw3aoKYeeb-rKc.mft (raw, json)
Hash identifier:          2vlPWemN0dX9Np0w+QRlqUWbpnBjKWZW3OWvT6Ur6jo=
Subject key identifier:   06:13:B1:54:01:A0:36:35:4D:E3:C9:F4:DD:2B:FB:28:CF:52:9E:22
Authority key identifier: E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
Certificate issuer:       /CN=e1b509672b9d998b4649cc376a829879e6feaca7
Certificate serial:       0195127E17D7E33A27AEC3D52FE33B012300
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
Manifest number:          0353
Signing time:             Mon 17 Feb 2025 06:00:08 +0000
Manifest this update:     Mon 17 Feb 2025 06:00:08 +0000
Manifest next update:     Tue 18 Feb 2025 06:00:08 +0000
Files and hashes:         1: 4bUJZyudmYtGScw3aoKYeeb-rKc.crl (hash: PjM7Y4ynT22X5UntppC8PTRx0gd6JGGgKJFXnIu/HD4=)
                          2: OQo7GpnulSOExhIEm_K7r3ad-fY.roa (hash: Ps91P3w11BS7K9Fm7RIorSRMZXeRo1jCwYGqQnSXpfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:7e:17:d7:e3:3a:27:ae:c3:d5:2f:e3:3b:01:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1b509672b9d998b4649cc376a829879e6feaca7
        Validity
            Not Before: Feb 17 06:00:08 2025 GMT
            Not After : Feb 18 06:00:08 2025 GMT
        Subject: CN=0613b15401a036354de3c9f4dd2bfb28cf529e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:ac:49:4e:0f:f9:ba:1d:ef:43:9d:a2:46:
                    1b:ac:e3:9e:ba:bc:44:71:be:7a:31:93:d5:13:31:
                    ed:e1:8a:09:cc:bb:10:60:0e:17:1e:22:27:0d:4f:
                    96:ef:80:79:e9:37:32:6d:5b:fc:48:d8:6c:af:b5:
                    55:0d:7c:ae:b0:d6:f8:b8:29:1d:5b:30:eb:20:b6:
                    92:df:69:25:b0:4b:56:61:38:a1:9e:fa:c9:25:8a:
                    6b:5d:9e:f9:20:5b:98:8b:fb:3b:6a:d9:dd:5a:07:
                    b3:cd:9c:73:c4:d7:99:f8:09:ca:ad:f8:84:d6:6d:
                    42:41:19:4a:7c:d3:18:5e:f2:c8:9c:48:dd:68:30:
                    53:58:ed:be:f5:ad:9c:fa:8d:17:80:60:a2:52:56:
                    f7:5f:7a:9a:0d:6b:e8:3c:82:f2:52:77:e7:cc:be:
                    a6:58:6d:75:aa:e0:02:fc:10:6f:76:4b:f2:d0:1a:
                    af:16:18:cd:45:7d:d1:91:8d:73:7a:ae:ad:89:18:
                    e5:c1:74:89:31:3f:2e:0c:7c:19:36:bd:37:2d:ad:
                    1f:ad:b9:ef:a8:d2:da:3d:de:52:71:17:f9:bd:e7:
                    6c:99:4b:62:63:4e:14:2f:ed:57:79:0e:15:05:5e:
                    55:ae:f8:11:5b:74:4a:f1:bc:a3:6a:59:6c:9c:36:
                    70:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:13:B1:54:01:A0:36:35:4D:E3:C9:F4:DD:2B:FB:28:CF:52:9E:22
            X509v3 Authority Key Identifier:
                keyid:E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:0a:f5:c5:21:2d:6a:53:81:ec:40:dc:62:5d:4d:89:79:06:
         13:d6:83:97:72:89:fb:ec:c0:70:5e:43:f2:92:be:00:26:2e:
         9f:af:82:34:ba:6c:97:5d:fd:c6:a7:20:2d:d7:2b:b1:5a:46:
         d5:46:94:8b:1d:64:55:7f:6e:e2:29:1e:c2:f3:db:19:0f:8d:
         e6:9b:90:f8:10:b5:ba:7d:5f:d0:49:51:e0:47:97:5a:8e:36:
         bd:f3:6e:b8:fe:ca:52:c1:cf:f9:74:42:cb:16:19:17:03:f7:
         19:52:16:3c:6a:63:b4:78:7b:35:5c:10:56:07:10:10:86:42:
         c7:68:a2:66:85:b7:ed:35:d0:c6:b6:6b:a7:ba:f1:48:0d:e1:
         6a:d7:9b:7b:04:73:64:6f:d1:51:29:8d:d6:73:88:fd:13:1d:
         e6:40:00:04:cf:90:a9:e6:67:d4:ca:f9:d0:f8:05:0a:19:9c:
         a7:73:da:0d:38:ab:71:d2:e1:95:a6:3e:ab:60:db:b1:2f:71:
         24:28:83:f5:02:e7:26:33:a1:74:11:66:3f:96:e6:94:cb:37:
         fe:cc:3f:54:c2:a9:92:10:b7:d8:2a:9a:9a:f8:4d:d6:33:25:
         59:5a:16:ef:35:7a:d9:42:6d:f0:42:74:16:09:9a:37:30:c6:
         d5:bb:45:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:54 2025 by rpki-client