Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
File:                     HDotyHGc8y1ZegUekO2VAmg15Pg.mft (raw, json)
Hash identifier:          N571Q+OrKcZI21MOtmOFe6JXerN3xFaHULT+PcIWmVg=
Subject key identifier:   2F:CF:41:35:02:13:71:E5:06:07:1C:C5:CE:E9:2D:76:F4:0C:E1:27
Authority key identifier: 1C:3A:2D:C8:71:9C:F3:2D:59:7A:05:1E:90:ED:95:02:68:35:E4:F8
Certificate issuer:       /CN=1c3a2dc8719cf32d597a051e90ed95026835e4f8
Certificate serial:       019510FDED53C6174503B14585F4AAAC5DBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HDotyHGc8y1ZegUekO2VAmg15Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
Manifest number:          056D
Signing time:             Sun 16 Feb 2025 23:00:31 +0000
Manifest this update:     Sun 16 Feb 2025 23:00:31 +0000
Manifest next update:     Mon 17 Feb 2025 23:00:31 +0000
Files and hashes:         1: HDotyHGc8y1ZegUekO2VAmg15Pg.crl (hash: vrvd3en5wsU/hXX2X59mlOaIlybV007l103pWciME3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HDotyHGc8y1ZegUekO2VAmg15Pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:fd:ed:53:c6:17:45:03:b1:45:85:f4:aa:ac:5d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c3a2dc8719cf32d597a051e90ed95026835e4f8
        Validity
            Not Before: Feb 16 23:00:31 2025 GMT
            Not After : Feb 17 23:00:31 2025 GMT
        Subject: CN=2fcf4135021371e506071cc5cee92d76f40ce127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8f:08:5a:54:78:04:4c:74:e0:2e:a1:d0:9f:
                    3e:ec:1a:47:05:52:ec:d7:59:8d:b0:31:7f:8c:65:
                    c2:66:f9:28:64:35:e3:47:46:32:9c:bd:b8:24:a7:
                    58:cf:60:ad:06:0b:10:ec:e2:92:83:7e:2f:56:c9:
                    6a:7d:06:d7:a0:17:75:ca:01:6b:be:23:6d:f4:8f:
                    78:da:a1:89:07:f4:5f:d3:a7:61:c8:3f:3d:11:11:
                    40:a5:1f:16:8f:af:95:ac:b2:f5:c8:00:74:3a:7a:
                    a3:2a:d8:17:5c:60:f3:0b:3c:e5:24:54:3e:dc:2a:
                    b4:28:04:50:e7:64:6f:4b:53:7b:02:db:fe:c5:c5:
                    7a:9f:18:2d:35:55:83:79:cc:cc:19:e8:42:4d:d3:
                    91:f1:22:58:59:33:ff:7a:df:75:15:7c:b2:15:a9:
                    c4:d2:45:55:fa:63:b7:a4:7d:aa:6f:43:af:d6:57:
                    bd:ab:b7:8e:9e:02:9e:f7:8d:7c:32:9d:ef:ec:d7:
                    01:b0:2c:dc:02:86:75:f3:ff:32:d0:88:55:99:0f:
                    0a:52:b2:71:19:6f:67:ee:2d:c5:07:f9:b5:2a:4e:
                    b3:11:54:c1:60:15:b1:55:01:29:49:e6:09:8f:1d:
                    74:0d:71:17:66:63:0f:b5:22:2a:d3:da:0e:58:c4:
                    b5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CF:41:35:02:13:71:E5:06:07:1C:C5:CE:E9:2D:76:F4:0C:E1:27
            X509v3 Authority Key Identifier:
                keyid:1C:3A:2D:C8:71:9C:F3:2D:59:7A:05:1E:90:ED:95:02:68:35:E4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDotyHGc8y1ZegUekO2VAmg15Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:44:d0:c6:95:59:8c:50:1d:62:2a:b5:0f:62:04:49:0d:6e:
         56:b4:59:27:d1:ee:ad:dc:1c:06:f9:d3:29:ed:f4:f9:4c:48:
         f9:aa:25:a4:14:d8:83:97:6a:28:f9:18:82:45:00:54:b4:89:
         63:cf:c4:f7:9d:57:8b:78:b4:6a:b1:b7:b7:3d:28:4b:69:a8:
         b6:9a:e3:4b:6b:df:ca:24:5f:54:61:d2:2a:23:fb:f8:1d:32:
         f2:49:af:44:78:c4:20:45:5d:bc:8f:7d:2d:80:aa:71:dc:64:
         a3:97:8a:a4:b0:6e:0a:7a:10:8e:55:1d:d6:79:ea:d7:90:ea:
         8e:cb:a7:b7:ff:20:d0:f2:f1:cb:18:bf:56:ee:19:8b:30:bd:
         cc:2a:75:c3:04:57:50:5b:5b:c4:4d:2c:46:34:e7:45:2c:ed:
         1c:05:c8:9e:9f:44:05:25:be:68:28:a9:18:8a:b7:65:3e:e7:
         37:a1:9d:94:f1:2b:05:d6:2c:64:ca:99:f5:ad:09:4e:0d:99:
         67:c5:77:f9:be:ce:d1:69:c1:67:61:35:05:18:7c:26:8a:33:
         7e:64:f0:8b:5d:bc:1d:f2:1d:89:ca:66:71:ac:e3:f9:20:94:
         e4:3f:c2:77:01:22:ef:f7:de:86:6b:31:bd:a4:c1:20:14:27:
         fd:ef:d2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:02 2025 by rpki-client