Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
File:                     p6TiNIImhHXBuTVjfQACwv0pk7g.mft (raw, json)
Hash identifier:          gwZtqk69+tigi+mDurPOLh3TZBq+IiQ2P45hC3ySbI0=
Subject key identifier:   65:C6:07:92:F1:B7:5D:D7:1A:8A:83:B2:39:9A:8F:62:65:83:5D:0C
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Certificate issuer:       /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial:       0194C350DA7E345DBEAB1E9BB38F264DE020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
Manifest number:          21
Signing time:             Sat 01 Feb 2025 21:00:43 +0000
Manifest this update:     Sat 01 Feb 2025 21:00:43 +0000
Manifest next update:     Sun 02 Feb 2025 21:00:43 +0000
Files and hashes:         1: p6TiNIImhHXBuTVjfQACwv0pk7g.crl (hash: TrXIfCVfPbkguJ7K5WZc6Vm/k4BJi2QB931tN/puJR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 21:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:50:da:7e:34:5d:be:ab:1e:9b:b3:8f:26:4d:e0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
        Validity
            Not Before: Feb  1 21:00:43 2025 GMT
            Not After : Feb  2 21:00:43 2025 GMT
        Subject: CN=65c60792f1b75dd71a8a83b2399a8f6265835d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:77:c5:67:f6:aa:9e:f2:a1:12:fe:d0:f6:1e:
                    7d:0c:3e:06:9f:5a:f0:03:2c:0f:24:5a:a4:4c:b1:
                    a6:b0:b4:d8:e9:b2:96:a9:2c:34:26:99:aa:fa:4f:
                    ce:f8:33:c1:94:21:a9:9b:04:85:e9:c5:8a:97:63:
                    86:84:4d:5e:f7:38:a7:73:61:16:54:0b:09:ba:59:
                    74:3c:e4:1c:92:84:61:7b:fd:be:ac:13:ba:20:ac:
                    1e:94:d2:43:e7:c1:68:c6:ea:3d:ec:10:9f:ab:4c:
                    cf:96:74:39:4a:d8:3a:57:6c:bb:1e:c9:1e:4d:fb:
                    c7:ef:a8:54:32:ae:bf:89:e0:d4:64:fc:50:07:83:
                    b6:e8:cc:82:88:f9:23:1d:c2:41:1e:9b:d5:0a:9c:
                    3e:cd:57:cf:22:30:23:80:48:09:a8:4e:4f:81:21:
                    c6:56:01:ca:52:be:5b:7f:12:8f:80:63:de:10:67:
                    2e:bb:bf:0a:21:cb:1d:65:93:46:f5:c2:33:08:62:
                    d1:cb:3c:f0:c2:e0:a2:38:bc:d7:c8:33:c3:d3:11:
                    a4:17:2f:c8:c2:c9:77:e3:c6:83:3d:28:29:27:74:
                    81:a6:b7:db:ed:12:87:0e:b4:bc:ed:3c:bd:06:b3:
                    ac:92:91:d3:74:45:94:0b:50:a9:93:b4:22:27:0a:
                    8c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C6:07:92:F1:B7:5D:D7:1A:8A:83:B2:39:9A:8F:62:65:83:5D:0C
            X509v3 Authority Key Identifier:
                keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:07:b0:93:b2:f6:1e:52:1e:fd:fb:8b:b7:b0:f4:43:82:68:
         ed:e1:89:ae:bd:70:d6:ca:18:04:19:9f:ca:56:3f:5e:b6:d2:
         35:08:c2:61:cc:f5:84:0b:1f:98:7b:b5:0b:8a:ba:c6:63:fe:
         3d:db:7d:81:d6:9c:16:93:71:11:d7:ba:92:37:1b:ce:0b:c2:
         5d:c4:5a:0c:f3:a0:64:b8:8d:d9:f4:40:9f:17:5b:27:41:86:
         5d:e4:a4:68:7f:f5:09:0e:76:1c:f8:36:d2:53:dd:d6:fd:6a:
         54:e0:7b:a7:8e:42:ba:05:80:a2:6d:44:d4:5f:be:d2:67:db:
         7a:8d:3f:c1:a0:f7:25:b4:db:6e:36:f4:85:78:57:64:2a:20:
         0e:d8:5b:1d:56:06:0f:9f:fc:9c:fb:88:94:0b:64:b7:e3:e3:
         1f:8a:8d:97:19:a7:d8:d8:91:e3:55:e3:1e:0b:67:77:7c:e7:
         07:a6:1e:45:95:c2:5d:63:be:73:45:2e:d2:0c:9e:88:cb:b3:
         d3:b6:65:87:18:6a:2d:df:73:6e:7d:72:68:dd:fb:d7:0d:2d:
         87:ef:4a:e4:b5:98:34:ce:5c:1e:84:f3:32:b9:c8:1b:bb:9d:
         12:d2:aa:57:3e:48:9d:b6:7e:ed:9d:2b:0f:ac:e7:cf:7b:67:
         60:6d:64:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:04 2025 by rpki-client