Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
File:                     e6Ix0pxKI7PpixSBPawJg-OjQFk.mft (raw, json)
Hash identifier:          daDU4KVtNuuhDwd5NBLr6rAip9xY+R7PjPpBA6rzUS0=
Subject key identifier:   12:B0:BC:FB:C7:6A:82:B3:8B:E4:5B:CA:D1:62:8C:ED:61:FD:BE:8F
Authority key identifier: 7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59
Certificate issuer:       /CN=7ba231d29c4a23b3e98b14813dac0983e3a34059
Certificate serial:       019511D93AFBCC1050213312329DB2C52399
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
Manifest number:          042E
Signing time:             Mon 17 Feb 2025 03:00:03 +0000
Manifest this update:     Mon 17 Feb 2025 03:00:03 +0000
Manifest next update:     Tue 18 Feb 2025 03:00:03 +0000
Files and hashes:         1: e6Ix0pxKI7PpixSBPawJg-OjQFk.crl (hash: 82FowYxCiRavEV2x6FpAJH2DzdWNxTE7e3TxvOML6H4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:d9:3a:fb:cc:10:50:21:33:12:32:9d:b2:c5:23:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba231d29c4a23b3e98b14813dac0983e3a34059
        Validity
            Not Before: Feb 17 03:00:03 2025 GMT
            Not After : Feb 18 03:00:03 2025 GMT
        Subject: CN=12b0bcfbc76a82b38be45bcad1628ced61fdbe8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8b:a4:e8:c1:f1:05:b8:e1:62:98:07:13:29:
                    25:45:aa:5e:8b:ef:cb:99:24:6a:12:f1:2c:f3:18:
                    ad:41:a4:15:91:c0:1f:0f:24:2c:5a:f8:c7:15:0a:
                    4d:7f:ec:75:1e:cc:6c:83:92:ff:2f:9d:70:03:52:
                    7f:14:f0:d8:bf:99:2e:8c:1a:66:53:4e:4d:17:3e:
                    1c:10:7a:4c:c1:43:18:ec:4a:4b:7f:cd:3d:65:91:
                    5b:9c:53:6f:c2:c2:97:c9:c8:17:22:c2:3f:e0:46:
                    b0:19:cc:2c:6c:8f:d2:b9:3c:07:b3:27:fc:b2:c0:
                    29:d5:f1:a1:9e:7f:3d:df:25:d5:3c:49:f2:5b:dd:
                    c8:24:d3:99:fb:d1:f3:5f:57:9c:1b:09:5c:32:38:
                    8b:0b:74:7f:94:47:13:58:51:49:45:36:74:b6:48:
                    d3:63:30:a2:90:a3:f1:d9:bb:ca:66:39:ee:2a:e2:
                    1b:7a:98:9a:01:7f:e2:b3:2d:0c:71:90:6b:ae:9a:
                    5e:59:26:c4:76:fb:51:fc:d2:18:fc:ff:00:72:16:
                    fc:44:73:f6:41:03:e4:25:1e:33:d7:ec:a6:50:83:
                    95:ea:d2:e2:85:97:2f:b6:35:93:c7:a5:26:3a:ee:
                    d7:32:a0:34:02:c4:6a:b9:b0:c4:a7:cf:52:08:00:
                    51:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B0:BC:FB:C7:6A:82:B3:8B:E4:5B:CA:D1:62:8C:ED:61:FD:BE:8F
            X509v3 Authority Key Identifier:
                keyid:7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:cb:e3:f3:9f:58:1f:8f:ec:46:0e:73:96:92:f0:57:6d:df:
         5b:9e:6f:f3:8b:1d:b7:52:33:e4:be:61:c8:a3:cc:ad:39:c0:
         b1:ee:75:05:f2:0f:71:b8:01:66:51:6f:92:90:63:57:c0:99:
         c4:86:cc:96:46:1a:5a:4d:76:54:75:eb:80:d3:03:56:ed:43:
         e9:53:26:05:d7:dd:73:41:6a:08:21:2d:7e:c1:b1:ca:2f:9e:
         61:63:e1:ff:91:a9:e3:81:ec:31:c4:7c:0d:11:85:bc:e8:26:
         f8:1f:73:d3:29:17:97:73:dc:32:ad:e4:95:e1:7d:3e:05:ad:
         5c:7e:08:1f:be:50:b4:2f:00:14:ca:48:b1:5a:02:f0:78:b8:
         65:3c:9e:57:d8:1a:81:be:90:cd:71:bd:22:85:7e:d0:35:e3:
         ef:d6:0e:68:d5:7a:59:da:af:5c:82:8c:a4:06:1f:64:ae:6f:
         7d:c8:6a:b8:40:91:2e:f1:59:3b:41:c5:ef:38:92:cd:55:53:
         98:58:a5:3f:26:4d:e4:d2:8d:fb:11:c4:ae:cc:ff:ec:53:7f:
         b8:5e:06:fc:98:fc:1b:a5:2d:d8:9f:17:6f:f2:29:38:98:b2:
         4a:a1:e9:17:88:32:f6:04:77:b5:22:86:ff:34:f4:97:d3:eb:
         80:9d:be:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:59 2025 by rpki-client