Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
File:                     SdhmPTuWngJTom1UJb7hxdRDs2E.mft (raw, json)
Hash identifier:          FdqQtlJ26rVzgUcMhmDWlBhUINiWZXBdp9NAJZgHNsg=
Subject key identifier:   BC:59:D9:23:8E:F2:2A:3B:AF:DF:09:1B:8F:1F:69:5F:C1:3F:85:10
Authority key identifier: 49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61
Certificate issuer:       /CN=49d8663d3b969e0253a26d5425bee1c5d443b361
Certificate serial:       019510902125B5D6D8BE9FCBC38B7695B707
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
Manifest number:          05B4
Signing time:             Sun 16 Feb 2025 21:00:35 +0000
Manifest this update:     Sun 16 Feb 2025 21:00:35 +0000
Manifest next update:     Mon 17 Feb 2025 21:00:35 +0000
Files and hashes:         1: 1-Sq9N9tDpqPpCxfnJu3FOlWH6ZA.roa (hash: Tpyvvdu3VZJ5oo8JL4qWFUonGAY9eL3r/UHvnFRq5cY=)
                          2: SdhmPTuWngJTom1UJb7hxdRDs2E.crl (hash: FFfHjNIjT9qP96a1Y+vyJquCwe9RRPHdJuuHePTAqz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:90:21:25:b5:d6:d8:be:9f:cb:c3:8b:76:95:b7:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d8663d3b969e0253a26d5425bee1c5d443b361
        Validity
            Not Before: Feb 16 21:00:35 2025 GMT
            Not After : Feb 17 21:00:35 2025 GMT
        Subject: CN=bc59d9238ef22a3bafdf091b8f1f695fc13f8510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:6f:70:60:65:82:5e:03:b1:53:08:75:ca:
                    03:e3:21:02:e8:d0:64:39:71:b5:51:da:c6:ee:22:
                    06:46:aa:96:06:36:e2:c3:3a:f9:ff:c7:49:25:bc:
                    00:5d:c8:62:88:77:19:b9:80:6d:60:35:b0:ed:4d:
                    0d:14:f0:a6:28:d9:76:97:58:81:b7:dd:3a:91:97:
                    42:72:1d:24:3e:ba:44:2e:78:8c:2d:af:15:8d:db:
                    ae:d1:37:53:4b:70:f8:0d:5a:f7:da:be:a1:24:0e:
                    a5:4c:9f:31:ec:2f:b7:58:d8:56:a6:58:6b:e3:f7:
                    9e:f0:41:75:25:04:b0:1b:01:29:54:7c:11:10:3e:
                    e6:2d:76:1d:af:ea:9f:71:86:bf:f4:e5:ff:f8:b4:
                    34:20:e8:8a:0b:b1:48:c5:6d:05:f8:53:62:c8:d1:
                    89:eb:af:77:eb:73:85:6e:33:0b:2e:6c:83:fe:8d:
                    ef:1a:6b:a1:2b:07:e7:7e:61:c6:4a:cb:f4:f1:25:
                    7e:8e:dd:f9:46:fe:af:f3:39:92:07:46:45:c6:d6:
                    88:03:5b:df:57:4b:91:46:81:59:c0:56:e0:bc:ce:
                    f7:a3:e4:4c:07:f6:5a:f9:12:00:80:14:aa:35:90:
                    67:ee:ff:16:c4:a1:b7:76:37:91:0a:58:7c:88:e2:
                    e1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:59:D9:23:8E:F2:2A:3B:AF:DF:09:1B:8F:1F:69:5F:C1:3F:85:10
            X509v3 Authority Key Identifier:
                keyid:49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:30:91:8d:3f:54:59:9f:83:8c:26:fc:b7:ca:9d:a6:93:bf:
         5a:ec:9f:6a:34:45:bf:8b:af:f0:b8:fd:32:71:26:c4:ed:73:
         59:d8:de:57:86:d5:1b:e6:19:84:0c:15:51:05:34:60:34:fe:
         92:cd:57:12:91:f5:c7:19:03:22:30:9e:ce:cc:43:92:f6:bf:
         2d:17:70:9e:86:3b:e2:21:14:f8:fb:6a:e4:39:92:83:ac:bd:
         5d:86:96:64:a3:24:c6:31:df:c5:36:f3:53:c3:f9:b0:72:7a:
         c6:90:1e:12:d9:b5:57:a3:f2:5f:d3:54:86:f5:ec:56:9b:57:
         4e:56:cd:14:95:62:54:62:f4:6e:79:06:10:7e:e9:72:12:f7:
         3d:88:ea:0e:22:85:e8:8f:6f:aa:73:f3:1b:a2:e1:10:96:e3:
         33:bd:de:5b:7d:9a:e7:92:1d:32:65:7f:0d:bf:02:8b:6b:38:
         b3:11:b0:75:74:25:dd:d9:3d:88:39:38:e1:e4:0c:32:7c:f0:
         a9:1d:34:60:b1:77:5a:6b:88:80:de:04:b9:3e:17:f2:72:7a:
         01:bd:0d:5a:e8:f9:d6:c9:20:f9:9a:00:b2:39:5d:93:62:fb:
         19:5a:8a:40:86:33:f9:5a:7b:01:ff:e9:cf:29:0d:52:03:fc:
         74:46:7a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:17 2025 by rpki-client