Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
File:                     dM1ajbKkgrSTFrdXO4pPh09uuxU.mft (raw, json)
Hash identifier:          C+GS9BfzpIUvev47h7YxVcMQTPR22OJxjNMtPkE29LQ=
Subject key identifier:   09:01:35:4B:A2:80:75:3A:7D:0C:41:5E:E6:17:A8:0E:1B:B5:2F:9C
Authority key identifier: 74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
Certificate issuer:       /CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Certificate serial:       019510C7F28D707D556B7A61210D6705A0C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
Manifest number:          1454
Signing time:             Sun 16 Feb 2025 22:01:33 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:33 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:33 +0000
Files and hashes:         1: dM1ajbKkgrSTFrdXO4pPh09uuxU.crl (hash: MiOIxcIhq+sChODYhJW9ZfxhNisS6GjV9DvgdvekOz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:f2:8d:70:7d:55:6b:7a:61:21:0d:67:05:a0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
        Validity
            Not Before: Feb 16 22:01:33 2025 GMT
            Not After : Feb 17 22:01:33 2025 GMT
        Subject: CN=0901354ba280753a7d0c415ee617a80e1bb52f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:d2:24:6d:ed:e3:35:82:9d:44:24:bb:80:
                    ec:2c:08:39:df:f0:1a:60:01:90:af:b5:57:64:ff:
                    c7:43:99:b6:b1:7f:3c:dd:53:19:de:b5:06:9a:9b:
                    9f:c1:12:9f:15:9a:a0:b4:8e:de:05:51:2b:ab:6f:
                    ae:ef:95:aa:ac:8c:cc:b5:18:9c:61:b9:a1:85:ce:
                    cf:32:6a:10:30:5e:71:67:71:44:1a:2e:0f:a1:3a:
                    33:36:a2:7c:f2:65:f3:ff:e7:c8:3a:68:32:f6:d9:
                    fd:59:72:3c:48:3f:06:0d:00:e8:1b:ea:64:f4:93:
                    e8:07:b3:13:82:df:89:37:f6:1e:de:1f:3c:c2:ee:
                    d9:8c:2f:0a:92:c4:a9:17:e8:51:92:22:93:50:2d:
                    32:59:fa:27:35:bc:59:24:fe:6d:14:00:80:c0:2e:
                    f6:92:55:1c:bb:9a:23:01:82:e4:88:0e:10:e9:7e:
                    d6:11:b8:36:86:86:de:9d:97:16:6b:98:03:17:d9:
                    12:b3:f8:42:2a:fb:cb:0b:4e:e1:75:af:76:79:0c:
                    02:79:06:fd:b0:b6:d7:9d:f1:43:81:b5:e4:7b:3b:
                    d5:05:8b:fc:8c:79:56:fa:e7:f6:c9:4f:99:fc:33:
                    e5:53:a5:61:41:e9:a8:95:4c:25:92:51:07:ca:80:
                    a6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:01:35:4B:A2:80:75:3A:7D:0C:41:5E:E6:17:A8:0E:1B:B5:2F:9C
            X509v3 Authority Key Identifier:
                keyid:74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:6f:f4:d2:05:1a:3b:49:48:11:86:8a:aa:b2:34:43:fe:e2:
         b4:be:31:bd:b5:86:63:46:14:29:84:1d:00:72:43:2d:28:cb:
         8e:e2:30:aa:8f:2e:28:b1:b9:b6:4b:cd:a7:6d:50:d1:84:1d:
         57:e8:2e:0b:c5:af:1c:42:d1:e3:87:8c:48:62:f2:a3:92:57:
         25:61:56:5d:47:a9:da:41:f3:27:a3:a8:1b:4e:10:19:e0:30:
         b8:3d:61:fa:19:24:85:56:8f:79:6c:70:23:64:2c:19:5f:f4:
         a3:c5:68:e9:fd:10:67:0c:c4:c0:fe:49:02:ea:0b:22:ae:f7:
         4b:e4:02:1b:42:ea:4f:94:e7:62:66:46:89:dc:85:23:27:25:
         7b:80:e0:ae:5c:40:6e:65:65:f8:85:24:10:8a:4e:68:c4:66:
         fe:b4:df:b6:1f:73:37:ac:c8:aa:9a:80:3a:ff:dd:44:d6:00:
         6d:0a:a7:20:ff:53:d1:f0:51:17:ac:c1:67:0d:48:33:3b:1d:
         89:40:d0:9d:24:9d:d8:12:3b:9b:6c:f3:57:3f:2a:49:bf:91:
         d4:7e:a9:5c:25:5e:f8:2b:8a:7c:c7:72:d2:8a:44:ed:34:e0:
         d2:bf:3a:30:32:aa:98:00:08:ca:a2:a5:25:77:7b:42:05:63:
         17:bc:29:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:47 2025 by rpki-client