Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
File:                     EU05B6zlGbJF_rzuMsO3rUk7KGw.mft (raw, json)
Hash identifier:          HH0mHACL5BiV88dXCNQ1QeOcHepedlbAIKBQc1O+dps=
Subject key identifier:   67:02:FB:05:16:D2:1F:1A:C3:89:2F:08:11:C1:18:B4:52:46:C2:70
Authority key identifier: 11:4D:39:07:AC:E5:19:B2:45:FE:BC:EE:32:C3:B7:AD:49:3B:28:6C
Certificate issuer:       /CN=114d3907ace519b245febcee32c3b7ad493b286c
Certificate serial:       01951210D452A761048A7D7A104FDC2C8F0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
Manifest number:          0298
Signing time:             Mon 17 Feb 2025 04:00:47 +0000
Manifest this update:     Mon 17 Feb 2025 04:00:47 +0000
Manifest next update:     Tue 18 Feb 2025 04:00:47 +0000
Files and hashes:         1: EU05B6zlGbJF_rzuMsO3rUk7KGw.crl (hash: bmyO1eidSpliuDEbDyswxbGFDLymbXb7NR0V4zU1HCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:10:d4:52:a7:61:04:8a:7d:7a:10:4f:dc:2c:8f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114d3907ace519b245febcee32c3b7ad493b286c
        Validity
            Not Before: Feb 17 04:00:47 2025 GMT
            Not After : Feb 18 04:00:47 2025 GMT
        Subject: CN=6702fb0516d21f1ac3892f0811c118b45246c270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:30:a6:71:ef:ac:4d:f4:41:93:11:4f:fe:a2:
                    98:7a:69:f9:6f:de:4c:e0:93:68:49:6c:3a:ae:54:
                    7e:5b:a8:3f:17:89:1e:58:48:08:85:7f:fd:7a:71:
                    75:91:1a:32:93:c7:f0:f9:67:ed:9f:46:05:e6:22:
                    e0:18:c0:67:36:0d:e0:b0:41:e9:1e:30:cd:1c:87:
                    88:85:3b:53:a6:b2:29:c6:59:55:fd:15:af:ea:cf:
                    d8:79:57:36:bd:d3:2b:d5:5a:05:35:a8:1a:76:af:
                    fb:27:b7:80:bb:98:3c:8b:32:1d:26:ea:5d:74:2c:
                    78:8f:1c:96:e9:f9:c2:ba:a6:30:9c:e0:7b:f3:da:
                    eb:3a:97:76:00:81:db:e4:ab:ad:4d:45:76:4c:29:
                    59:7b:b6:c8:d5:7d:f7:2c:93:ac:f9:d4:08:25:86:
                    8b:73:ff:ff:15:76:0f:c9:bf:e5:11:e6:83:88:69:
                    ac:be:48:74:44:ba:45:56:36:ac:bb:1c:ca:cd:d9:
                    d7:6b:04:b5:85:35:86:c6:ff:2a:71:06:7f:cb:ab:
                    01:5e:63:c2:47:46:64:8b:ae:cc:25:a4:fe:dc:e9:
                    8e:04:84:ea:66:b8:48:36:d6:bd:6a:5e:99:7e:da:
                    69:c9:e0:80:74:b8:a3:05:2c:ce:48:d3:f4:d1:b8:
                    18:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:02:FB:05:16:D2:1F:1A:C3:89:2F:08:11:C1:18:B4:52:46:C2:70
            X509v3 Authority Key Identifier:
                keyid:11:4D:39:07:AC:E5:19:B2:45:FE:BC:EE:32:C3:B7:AD:49:3B:28:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:5a:e7:39:c2:d1:28:67:a5:1f:f6:b0:53:80:ec:79:be:89:
         3e:e4:0f:9a:61:61:8a:6d:ba:5d:8a:4f:c3:10:98:18:0f:1b:
         74:cd:d7:af:76:ff:b7:27:ac:04:f1:2b:5c:c3:09:f3:3f:6d:
         e1:24:0e:35:fa:c5:67:27:74:7e:11:32:b8:d6:b1:e0:9f:2b:
         0b:90:0d:aa:7b:23:a5:7c:99:c1:93:ae:0a:3d:32:4e:53:fc:
         76:2f:d5:0e:26:fe:ac:79:2c:bb:9d:31:18:f0:f5:21:92:eb:
         fa:df:e9:7a:32:5a:ed:cf:17:5e:21:40:5b:08:66:12:73:8c:
         4f:e0:4b:8b:a6:0d:e8:38:76:f2:50:cd:30:fa:72:89:e1:c8:
         aa:1b:3f:76:84:36:62:c1:07:c6:d9:49:0f:93:82:dd:13:db:
         f8:4c:e9:d9:dc:37:84:8b:68:9a:ff:4f:49:22:10:c5:e1:96:
         71:9e:43:65:d4:08:cc:bd:a0:ba:15:ce:19:d7:67:d6:ff:34:
         5d:79:0f:62:58:56:09:f7:36:63:7f:87:76:c8:9c:a6:43:61:
         88:70:c5:c2:dd:89:9f:fc:4a:c4:77:86:b8:2b:6c:92:38:48:
         bc:3b:ac:8b:e0:eb:8f:d9:cc:37:2a:36:4e:35:97:6e:86:55:
         20:b5:07:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:17 2025 by rpki-client