Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
File:                     vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft (raw, json)
Hash identifier:          5jxBloXLu5nBlUXNkZi6lMfcQNqPX3avMQq8DbwVlpw=
Subject key identifier:   50:0D:18:8B:0A:72:B1:D6:67:C1:12:D2:76:39:7B:00:5B:8A:1F:8E
Authority key identifier: BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6
Certificate issuer:       /CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6
Certificate serial:       0194C3889B966D3DA6E571353ADD39357466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
Manifest number:          142A
Signing time:             Sat 01 Feb 2025 22:01:37 +0000
Manifest this update:     Sat 01 Feb 2025 22:01:37 +0000
Manifest next update:     Sun 02 Feb 2025 22:01:37 +0000
Files and hashes:         1: vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl (hash: PjEOaDOF1QiIS9buorxQ2H2NXoz+HyWJYrTrhIIfSy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:88:9b:96:6d:3d:a6:e5:71:35:3a:dd:39:35:74:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6
        Validity
            Not Before: Feb  1 22:01:37 2025 GMT
            Not After : Feb  2 22:01:37 2025 GMT
        Subject: CN=500d188b0a72b1d667c112d276397b005b8a1f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:90:db:e1:35:8a:f5:ec:37:7d:e6:00:7c:36:
                    03:7b:f3:c1:01:85:ec:e0:36:38:0a:21:33:50:99:
                    e4:92:6e:3e:b5:e8:02:a1:64:00:4c:ae:2d:61:b2:
                    9b:27:5b:85:0c:20:aa:0b:29:69:8b:98:34:4d:3d:
                    c2:4d:64:f1:7a:e1:23:2c:c6:41:c9:86:a1:9b:6f:
                    51:0b:a8:90:ea:b6:6f:82:6d:df:02:c6:83:e2:50:
                    08:63:af:e9:04:e7:3c:2a:80:f8:92:39:61:2e:ce:
                    03:73:c3:cf:e3:d9:95:a6:35:00:6a:d5:1d:e5:95:
                    f9:f6:36:a2:5d:49:92:26:ed:a3:98:af:67:bc:31:
                    2e:69:57:93:0c:32:dd:85:14:de:c3:9f:de:3e:c2:
                    8f:b5:50:c7:dd:17:0d:b4:ee:39:c0:7c:31:20:c5:
                    36:fe:c0:f0:0d:87:df:46:40:aa:51:2c:c4:73:47:
                    8c:31:88:e6:6d:63:33:50:c3:b9:59:0e:37:52:28:
                    09:1b:d4:f7:4a:7d:68:88:ae:67:35:79:fa:14:d6:
                    c0:0f:e0:a6:51:7b:22:5d:ee:31:73:d0:cc:03:73:
                    e1:b9:d0:26:74:38:5f:e0:70:dd:6c:f5:22:7a:9d:
                    d1:6d:e3:46:f2:90:d6:ed:54:82:a4:dd:cc:cf:c4:
                    15:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0D:18:8B:0A:72:B1:D6:67:C1:12:D2:76:39:7B:00:5B:8A:1F:8E
            X509v3 Authority Key Identifier:
                keyid:BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:55:47:3e:97:13:e1:56:62:8d:c9:3c:95:0d:6c:f3:f0:d8:
         bb:88:99:10:76:e6:44:5d:cc:b6:53:5b:e2:88:36:04:08:a2:
         2e:c1:1a:2b:17:26:2f:c8:c4:ad:5a:1f:40:5e:68:8a:db:e3:
         bb:c7:7c:e7:e5:13:2c:50:1a:83:14:78:31:a0:e5:cf:83:64:
         09:b5:d6:00:5f:c5:51:e3:cb:d5:8d:bb:5f:08:56:24:f1:66:
         2d:5e:19:c2:ce:db:54:1e:78:2b:4f:8f:ab:88:71:e7:4c:22:
         58:00:2f:ae:53:9f:67:a4:6c:02:d9:60:5a:02:b2:ac:59:ab:
         87:3b:ae:84:3d:73:e4:9a:2f:94:14:1c:8b:88:32:9b:b1:5c:
         52:41:34:9a:46:ec:1e:13:cd:c1:1d:45:69:2c:6d:a3:86:c2:
         89:ae:4d:3b:6b:85:35:5b:ab:6b:f5:26:0a:2e:cc:34:33:9b:
         69:78:a3:f0:83:4a:f7:7b:35:d5:49:7d:0a:74:c6:c7:0b:e0:
         32:b2:c0:b8:2f:b8:b5:80:9f:44:9b:30:1a:ee:45:4b:33:de:
         a3:ca:71:8d:fe:17:b0:cc:61:9d:97:ec:5c:49:18:0d:5c:db:
         a2:42:7d:2f:db:b6:68:ec:b7:4e:03:81:ed:fc:f0:90:0b:3f:
         3f:2b:7d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:41 2025 by rpki-client