Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/309a19-c129-4d0f-8f19-ab109324fdd3/1/yEx3OCCqpPrR9BHJWRmTxGwY_Cc.mft
File:                     yEx3OCCqpPrR9BHJWRmTxGwY_Cc.mft (raw, json)
Hash identifier:          YmPpGd6UP9YdAWXT8EPMiuhp30/eebDdT/Bdre1D/y4=
Subject key identifier:   B6:46:6A:22:C5:36:29:88:11:A1:BE:79:A8:D5:2E:00:52:71:54:C2
Authority key identifier: C8:4C:77:38:20:AA:A4:FA:D1:F4:11:C9:59:19:93:C4:6C:18:FC:27
Certificate issuer:       /CN=c84c773820aaa4fad1f411c9591993c46c18fc27
Certificate serial:       0194C388347BB3F767C5811D953183295E92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yEx3OCCqpPrR9BHJWRmTxGwY_Cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/309a19-c129-4d0f-8f19-ab109324fdd3/1/yEx3OCCqpPrR9BHJWRmTxGwY_Cc.mft
Manifest number:          0411
Signing time:             Sat 01 Feb 2025 22:01:10 +0000
Manifest this update:     Sat 01 Feb 2025 22:01:10 +0000
Manifest next update:     Sun 02 Feb 2025 22:01:10 +0000
Files and hashes:         1: yEx3OCCqpPrR9BHJWRmTxGwY_Cc.crl (hash: aUch4EjlY07pQ6FlaKAaKrJAeLOjfGSovW6Xmf5WnDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/309a19-c129-4d0f-8f19-ab109324fdd3/1/yEx3OCCqpPrR9BHJWRmTxGwY_Cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/309a19-c129-4d0f-8f19-ab109324fdd3/1/yEx3OCCqpPrR9BHJWRmTxGwY_Cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yEx3OCCqpPrR9BHJWRmTxGwY_Cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:88:34:7b:b3:f7:67:c5:81:1d:95:31:83:29:5e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84c773820aaa4fad1f411c9591993c46c18fc27
        Validity
            Not Before: Feb  1 22:01:10 2025 GMT
            Not After : Feb  2 22:01:10 2025 GMT
        Subject: CN=b6466a22c536298811a1be79a8d52e00527154c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f2:d0:10:1d:24:a0:53:86:56:5e:95:0e:cb:
                    60:98:0f:5c:64:d9:3f:cb:6c:ed:77:e5:5b:8a:8e:
                    41:89:1a:3c:8c:e6:ed:81:79:13:96:9f:43:f2:a0:
                    4e:df:3b:70:3c:bc:cb:c6:4b:b9:ac:74:cd:fa:8b:
                    2b:6f:90:af:92:7f:4f:93:c7:30:8e:ef:e0:c5:dd:
                    cc:b1:7f:cd:e8:01:be:cd:77:f5:61:e5:cc:bb:83:
                    34:15:94:52:5b:eb:7d:fa:c6:90:1e:95:ad:e0:26:
                    87:8c:cd:dd:31:d1:df:b1:90:75:20:0d:cf:d7:87:
                    c8:fb:6f:b8:f3:66:e0:9c:f1:c7:12:56:9e:5e:15:
                    45:cd:7f:37:db:49:26:29:e3:1a:dd:16:80:f2:ae:
                    8a:e3:1f:8a:46:27:61:82:14:0f:ad:97:ec:4d:d3:
                    6e:15:a7:f4:f0:a4:11:90:c6:4e:06:32:7b:5e:aa:
                    96:cf:3e:69:04:13:95:18:72:78:00:64:af:b1:0f:
                    66:7d:54:b6:ef:38:5f:e2:08:e2:09:fb:83:dc:0c:
                    37:4b:e7:6b:c5:af:1a:18:64:79:47:e5:69:2d:2c:
                    9a:78:ff:23:71:2f:4c:1b:0b:6d:6c:a6:4b:cf:fb:
                    fc:d4:de:9d:5d:2b:64:34:68:e6:66:57:1e:bf:a6:
                    cb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:46:6A:22:C5:36:29:88:11:A1:BE:79:A8:D5:2E:00:52:71:54:C2
            X509v3 Authority Key Identifier:
                keyid:C8:4C:77:38:20:AA:A4:FA:D1:F4:11:C9:59:19:93:C4:6C:18:FC:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEx3OCCqpPrR9BHJWRmTxGwY_Cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/309a19-c129-4d0f-8f19-ab109324fdd3/1/yEx3OCCqpPrR9BHJWRmTxGwY_Cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/309a19-c129-4d0f-8f19-ab109324fdd3/1/yEx3OCCqpPrR9BHJWRmTxGwY_Cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:90:0e:ec:90:ca:55:82:44:a5:0b:8f:97:f2:be:81:84:f6:
         dd:1f:31:9a:12:c0:ec:8f:ac:7b:fc:99:81:4d:7d:2c:ea:14:
         e6:79:71:4c:6a:ce:b6:18:f4:6c:e7:52:0e:f9:48:72:92:94:
         7b:71:dc:01:e9:30:f4:46:d4:e9:23:19:32:c3:39:11:0f:db:
         8c:f9:2f:7e:50:5d:65:9b:c9:03:c5:f8:8e:8a:69:55:6c:a9:
         38:d7:f9:86:15:9a:a2:60:59:6c:f2:f5:38:e8:6b:5d:67:af:
         60:e8:66:11:68:ad:1c:a4:3d:76:9c:ff:e2:c6:d0:8c:e9:1d:
         0d:d8:10:29:bd:90:ab:42:a9:59:af:28:f8:fd:17:a8:38:4b:
         f6:47:5c:04:1f:f7:3a:f1:44:4c:aa:7e:d3:84:73:8c:c8:82:
         09:54:94:21:7f:2f:44:1a:10:89:da:3e:47:79:29:79:c0:fe:
         c8:b8:11:f0:80:98:73:9b:82:6c:da:6d:fd:40:ee:cc:45:e0:
         1b:09:b6:43:5a:69:cf:59:c8:fd:62:6d:3a:30:c3:34:60:98:
         82:7d:ea:74:c2:7e:30:05:3d:34:c6:59:0d:0f:c6:91:ca:b2:
         d1:28:50:8a:8f:61:cd:e9:a5:51:da:c0:41:64:19:91:40:f5:
         9c:7b:5b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:27 2025 by rpki-client