Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft
File:                     Eeb3cZPydkuolChd0vZPEib9kSY.mft (raw, json)
Hash identifier:          fxt5+qGCZenTMD9O794i1teqHQKuZdmchKryaAqIz4c=
Subject key identifier:   5E:FC:CC:74:E7:16:0B:B3:6F:79:F8:BF:36:A1:BA:E1:ED:A8:F5:A0
Authority key identifier: 11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26
Certificate issuer:       /CN=11e6f77193f2764ba894285dd2f64f1226fd9126
Certificate serial:       019510C7C4D9C978A9B1DA90EA5C6910C26F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft
Manifest number:          1458
Signing time:             Sun 16 Feb 2025 22:01:22 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:22 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:22 +0000
Files and hashes:         1: Eeb3cZPydkuolChd0vZPEib9kSY.crl (hash: ASlIHy0Dg27CdIrpb8NJt5khKAOva2UocK/UAm3VJUY=)
                          2: XFg9UB4gTIL8wJ9DUJTpOfsymeY.roa (hash: xjEc3UgcuslMKxGxfh1ksiSKMzapldmW9N+WDd88oT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:c4:d9:c9:78:a9:b1:da:90:ea:5c:69:10:c2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e6f77193f2764ba894285dd2f64f1226fd9126
        Validity
            Not Before: Feb 16 22:01:22 2025 GMT
            Not After : Feb 17 22:01:22 2025 GMT
        Subject: CN=5efccc74e7160bb36f79f8bf36a1bae1eda8f5a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:6f:f6:33:83:dc:49:4a:ca:e5:17:79:3f:
                    75:8a:98:fd:4f:f3:73:c7:0c:60:0c:79:37:7b:98:
                    15:00:42:06:5e:67:50:f9:f7:a5:cc:63:24:3a:93:
                    42:a2:63:39:67:cc:69:0f:ab:91:86:6f:db:21:23:
                    fc:ee:f2:0f:4f:44:d4:82:2a:08:2e:03:cb:d8:4c:
                    4a:1e:e7:60:d1:8d:fc:f0:ef:e8:10:44:ff:1f:7e:
                    6d:28:4c:28:eb:57:ea:8d:92:ac:7e:32:6c:0c:29:
                    13:60:f6:6a:13:4e:d6:71:f1:4b:17:2b:eb:1b:63:
                    5c:3f:6b:73:aa:a1:c8:9b:7f:04:33:c3:cb:bb:c4:
                    f0:2d:c9:dd:4a:72:9b:3a:a4:89:fd:b5:8d:8b:a5:
                    54:2f:98:ae:2d:b0:c2:02:5c:fd:6f:e2:8a:b2:82:
                    75:d0:83:56:2b:e5:93:23:76:c8:31:42:9a:57:79:
                    e0:3c:eb:9e:b1:90:cc:96:b6:6b:69:7d:79:f3:3a:
                    84:22:d7:1d:7c:2e:32:d2:55:c7:27:40:61:74:bd:
                    5b:57:46:a3:be:3f:c1:e7:f1:ec:6b:fc:ad:3b:b2:
                    53:c3:02:91:ef:ad:5d:c6:62:02:88:1c:39:19:ec:
                    ab:1d:c2:33:50:be:fa:41:12:4a:e7:9a:3f:d6:21:
                    fe:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FC:CC:74:E7:16:0B:B3:6F:79:F8:BF:36:A1:BA:E1:ED:A8:F5:A0
            X509v3 Authority Key Identifier:
                keyid:11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:56:bf:d2:19:a0:8e:16:75:ca:3c:fb:b8:fe:ae:56:ac:9f:
         22:5d:5f:a9:a6:6b:b7:59:18:59:09:ce:b5:e1:fd:27:e0:4a:
         1e:ea:91:92:28:d0:cf:67:d1:91:ca:32:1d:cb:76:c7:c5:d7:
         b1:72:9b:31:a7:79:a9:41:99:d5:9b:dd:50:26:93:53:bb:25:
         af:8e:61:6b:06:f8:6b:04:d2:65:59:3a:75:cc:cf:a3:7e:5b:
         87:8f:50:ea:3a:35:95:8c:65:66:16:c9:d3:5d:56:46:98:9a:
         a8:6e:ae:e8:86:a5:28:49:0e:84:05:c4:1e:f2:44:f2:99:ed:
         29:b4:da:eb:55:2b:b1:c7:ab:a8:f2:29:73:ec:e0:96:10:c5:
         fa:4c:86:97:50:c3:91:99:70:96:56:b0:a6:61:5f:d6:32:84:
         70:6f:24:02:95:e0:c0:cf:5f:4a:e4:8d:c1:2a:ca:7b:df:8c:
         28:d9:48:58:77:9c:83:0d:04:54:39:e1:f0:a6:14:d8:a3:30:
         12:73:e0:03:0a:fc:9d:8e:60:08:48:bb:62:34:d7:3b:bb:68:
         bc:30:80:8c:c0:26:a1:8f:56:82:37:fd:d2:76:e6:88:9d:15:
         15:47:03:3b:a0:08:47:16:6a:f0:b8:83:5a:32:3c:cb:c2:72:
         16:11:96:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:52 2025 by rpki-client