Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
File:                     SqaReHb9eJJsGSe5_ceWWNdGyEw.mft (raw, json)
Hash identifier:          12gQf33odQSpGtB8+w3GmOOATTExMvrrCZ5+cp6u1RY=
Subject key identifier:   69:B3:29:2A:26:AE:B5:E0:E1:E2:74:48:4F:CF:04:1A:74:17:04:F9
Authority key identifier: 4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C
Certificate issuer:       /CN=4aa6917876fd78926c1927b9fdc79658d746c84c
Certificate serial:       019511A25E3639204140C04A39BD82884CD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
Manifest number:          11B8
Signing time:             Mon 17 Feb 2025 02:00:08 +0000
Manifest this update:     Mon 17 Feb 2025 02:00:08 +0000
Manifest next update:     Tue 18 Feb 2025 02:00:08 +0000
Files and hashes:         1: IbpEEeU88LFNxh5nL5cwRSdFORY.roa (hash: 4vG5HojNCWpZzK5uMY8x1XnpP7QHbyElnVInTc+EUlM=)
                          2: SqaReHb9eJJsGSe5_ceWWNdGyEw.crl (hash: 3KUHGGyYfpZdrYj/x5ObB9ORYne61dP6BDAGN5cqpuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:a2:5e:36:39:20:41:40:c0:4a:39:bd:82:88:4c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa6917876fd78926c1927b9fdc79658d746c84c
        Validity
            Not Before: Feb 17 02:00:08 2025 GMT
            Not After : Feb 18 02:00:08 2025 GMT
        Subject: CN=69b3292a26aeb5e0e1e274484fcf041a741704f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:96:72:ab:33:9b:e8:d2:1b:20:c5:4e:86:
                    44:c3:3e:f7:22:fd:b9:ea:34:4b:e7:6f:b8:f6:c3:
                    d9:ac:ea:1b:7e:59:87:32:d7:c9:67:08:95:21:ac:
                    ed:c7:3f:90:a1:73:e4:6d:54:0b:ab:bd:c7:1f:b5:
                    f3:05:c8:3f:0f:5b:3b:71:83:9c:52:90:23:9f:ce:
                    76:7f:46:bf:a9:3d:48:21:f9:e1:7c:99:fd:5d:b5:
                    45:c5:de:be:02:0a:cf:c7:53:00:4d:e9:14:e7:19:
                    73:bd:7e:b1:a9:ba:66:2a:44:79:e9:dc:6e:9d:d7:
                    14:df:c2:de:06:e1:5c:46:9e:9f:dd:87:a2:52:b5:
                    19:38:e4:76:a9:cf:2a:ce:dd:58:ac:85:a8:b9:92:
                    9a:d3:3e:1f:5b:c5:c3:d5:cf:cc:2d:3a:45:9e:98:
                    f9:3d:35:1d:01:dc:d4:72:08:14:b7:f1:d2:46:0c:
                    bf:e4:7e:96:44:59:c9:8a:96:21:06:63:e1:82:b0:
                    96:1e:c1:72:c2:e0:c5:bf:09:9a:3a:da:27:69:11:
                    e1:eb:7f:1a:0b:2a:e5:31:9a:4e:12:dc:a8:90:08:
                    5b:b0:a0:0a:a8:e2:8a:24:7d:56:a8:29:4f:1a:b9:
                    87:e1:36:24:16:37:76:13:3d:80:d2:ec:5a:fc:04:
                    0e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B3:29:2A:26:AE:B5:E0:E1:E2:74:48:4F:CF:04:1A:74:17:04:F9
            X509v3 Authority Key Identifier:
                keyid:4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9d:0b:a3:3e:02:92:f5:76:e8:cc:51:e6:7a:ed:0d:29:a0:
         60:52:ec:9d:b0:15:7d:8b:36:f7:79:e6:41:43:90:7b:6c:b1:
         aa:7d:64:c8:9b:f5:73:50:3f:8f:55:79:c5:6e:95:b2:3f:c8:
         28:5d:6a:dd:aa:e8:03:98:55:37:3e:21:c4:71:a7:47:10:7b:
         34:60:9a:51:ad:eb:b9:8a:67:b3:30:2e:b7:bc:ef:79:70:c7:
         f7:ea:3b:a5:d7:cc:85:d6:41:93:15:c9:99:c1:17:20:7e:47:
         9a:aa:63:bb:ca:fb:ff:4b:d1:29:2f:39:07:f8:40:c3:08:a6:
         d3:7a:9b:c6:35:c6:30:a7:2c:c9:5e:68:52:8d:53:7f:fe:47:
         0a:ba:1f:ba:e8:67:ac:79:7b:9b:6a:06:49:66:a1:3a:28:26:
         b0:35:32:a9:e9:44:c3:d6:1d:e3:8a:52:dd:ff:95:f1:c3:f3:
         ed:7d:58:64:62:d8:44:d0:fb:be:d3:ac:04:b2:b3:24:36:03:
         bf:57:94:dd:30:8e:2a:3a:9d:74:e2:0a:02:9e:65:9d:4b:99:
         30:9b:2f:91:c8:84:3a:b8:35:22:e0:60:8d:61:56:ef:d1:17:
         b4:77:cb:03:5f:61:63:79:7d:2f:1e:08:13:98:21:d9:91:65:
         e8:40:98:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:11 2025 by rpki-client