Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
File:                     iJiSZOUPOa6IiuMnYQm7qALkWAE.mft (raw, json)
Hash identifier:          pBT167MF7eajXvTNyShWGGOsS28Zdpi1DUNh8oUh/BU=
Subject key identifier:   C5:94:F8:F6:11:F6:E8:9C:F0:E4:28:0A:7E:F2:26:2A:AC:35:CD:27
Authority key identifier: 88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01
Certificate issuer:       /CN=88989264e50f39ae888ae3276109bba802e45801
Certificate serial:       019512108516CA0857B8D40C4F5B77ACA22E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
Manifest number:          EE
Signing time:             Mon 17 Feb 2025 04:00:27 +0000
Manifest this update:     Mon 17 Feb 2025 04:00:27 +0000
Manifest next update:     Tue 18 Feb 2025 04:00:27 +0000
Files and hashes:         1: e7H9B5-pB3ikZ5-oh15fm0ggCqI.roa (hash: We6P0vvIkU060wWseVebnunaD4trxKPA+u+6dudIhmU=)
                          2: iJiSZOUPOa6IiuMnYQm7qALkWAE.crl (hash: SDavn1mTyCjObqpWHeROpzU22dzTMw8FJCQcZOjin04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:10:85:16:ca:08:57:b8:d4:0c:4f:5b:77:ac:a2:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88989264e50f39ae888ae3276109bba802e45801
        Validity
            Not Before: Feb 17 04:00:27 2025 GMT
            Not After : Feb 18 04:00:27 2025 GMT
        Subject: CN=c594f8f611f6e89cf0e4280a7ef2262aac35cd27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:54:ba:af:58:00:f4:17:64:73:68:fb:3d:d1:
                    92:b5:2a:bb:6a:87:05:ac:90:05:d3:cb:98:69:96:
                    e5:86:82:e3:4d:37:db:f9:be:a8:7b:6f:2d:71:fa:
                    5b:c7:ab:2d:22:9e:90:dc:8a:ff:36:33:bd:d0:89:
                    aa:2a:cf:c8:71:ae:9c:7d:eb:34:5c:1f:fc:a8:8c:
                    6c:f9:b7:76:1c:b5:c6:69:89:20:9f:8b:e0:3d:36:
                    8d:c7:a8:e1:7f:c2:e6:d8:81:67:2b:16:d2:6a:47:
                    81:35:f1:a6:98:01:cb:bb:50:4d:57:96:32:8c:f5:
                    49:2d:c0:c0:4e:53:86:96:3f:35:76:59:af:da:40:
                    c1:0d:ab:09:f4:66:05:80:f6:da:13:68:14:dd:8b:
                    b6:49:5b:87:4b:d8:12:ec:61:10:28:5d:07:dd:68:
                    08:3f:55:4e:db:89:31:b3:f3:c4:67:87:19:15:8a:
                    b5:c8:89:d9:07:60:7a:45:26:40:51:9b:b6:28:f3:
                    08:33:2f:0f:1b:7f:4a:50:13:c6:76:eb:8e:ec:e5:
                    0c:d9:1d:de:4d:0e:af:21:31:e2:c2:84:65:d7:cf:
                    ff:e2:32:29:3b:d3:4d:c5:ce:6d:4b:ea:3b:39:01:
                    16:6b:c5:ef:be:2c:b5:53:64:a2:20:a2:4a:28:fa:
                    7d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:94:F8:F6:11:F6:E8:9C:F0:E4:28:0A:7E:F2:26:2A:AC:35:CD:27
            X509v3 Authority Key Identifier:
                keyid:88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:66:15:f0:fd:cd:20:36:37:d3:fb:5b:4d:81:cc:ec:c2:dc:
         3e:0c:6b:e6:d5:39:b2:26:7a:9c:8a:69:c2:91:c7:25:32:dc:
         7e:28:59:ea:78:37:94:d8:9c:fb:17:ca:72:c0:19:e8:4c:80:
         82:87:71:65:89:86:26:3f:92:19:d2:36:61:b0:c6:4d:cf:b5:
         32:9a:cd:c5:3d:7c:cd:94:84:e6:cc:16:73:fa:24:fa:cb:1c:
         14:ac:6b:99:02:c3:02:b5:ab:68:12:52:ac:d9:bc:22:00:c0:
         89:59:44:4c:4f:17:7a:8f:96:98:cf:56:31:67:94:35:af:34:
         c5:b2:0e:d6:ef:ce:c2:b2:0e:cc:6b:73:7b:0a:c2:0d:83:87:
         9f:77:a4:7b:f7:3e:45:8c:54:e8:27:45:a2:b8:70:15:b3:5f:
         08:df:c0:20:4a:50:25:98:ee:d7:54:e3:02:63:72:ee:be:b0:
         c9:91:50:f4:67:e9:c1:10:b6:73:ed:6d:59:db:8e:6f:d1:b1:
         cd:b1:4d:5a:11:23:89:82:2f:82:96:84:6e:ee:a7:0f:c0:92:
         9a:19:e5:69:40:d9:7f:7c:2d:01:d5:2a:ad:e3:3b:c7:ca:c8:
         d0:17:90:17:78:e1:e4:7c:45:98:44:4c:85:0d:10:af:93:e5:
         ec:54:2f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:42 2025 by rpki-client