Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
File:                     1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft (raw, json)
Hash identifier:          pPuKxngG8+76zrANHqjOP3m9YwuqQTflwIYynvxNpH4=
Subject key identifier:   24:EA:05:C8:73:7D:B6:B1:6C:DA:78:C5:3D:EF:5E:C5:99:18:21:F7
Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
Certificate issuer:       /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Certificate serial:       019650B64241CFFF489EA5F0996C8F51EC3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
Manifest number:          0D8D
Signing time:             Sun 20 Apr 2025 01:00:43 +0000
Manifest this update:     Sun 20 Apr 2025 01:00:43 +0000
Manifest next update:     Mon 21 Apr 2025 01:00:43 +0000
Files and hashes:         1: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl (hash: Co/4Gd9Vt23BPAZv+GpDp1qBIy6Cj9mqn+xxTdjMsxo=)
                          2: cOp1cqfBELUzDJ5OCVCcFEeZSnw.roa (hash: TeUirEuTA43EYVzOUWEt62Nw9bA/6GjvRc1N3Wwsl64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:b6:42:41:cf:ff:48:9e:a5:f0:99:6c:8f:51:ec:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
        Validity
            Not Before: Apr 20 01:00:43 2025 GMT
            Not After : Apr 21 01:00:43 2025 GMT
        Subject: CN=24ea05c8737db6b16cda78c53def5ec5991821f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:87:d1:0c:83:73:e2:35:92:33:82:be:56:48:
                    f8:dd:92:e9:4e:19:33:27:12:9f:0c:0e:9d:c1:42:
                    bd:a1:58:99:fe:3e:23:b4:cc:09:af:64:ab:09:28:
                    06:f0:cf:f3:e4:33:6d:d9:63:3b:df:56:89:58:d4:
                    7e:76:f4:fa:6c:90:3b:88:eb:43:17:4e:cf:e2:0c:
                    e5:84:47:b1:5e:b6:43:d6:1a:db:53:33:5f:9e:e3:
                    9b:e4:e8:c6:b0:a7:9a:a1:81:fc:ed:b2:27:7d:d3:
                    33:d9:86:aa:db:e9:91:ec:b0:91:d9:6d:4e:7d:1b:
                    06:e4:3e:76:1e:56:b9:82:4b:d0:d8:b6:d0:01:62:
                    38:4d:6b:d7:b6:45:4b:6f:c7:f4:90:33:6d:0c:ec:
                    f8:4a:95:34:f3:43:55:c3:2e:0e:61:76:56:1b:98:
                    20:57:50:84:af:2e:38:52:ba:3b:a1:fb:ff:15:07:
                    a6:02:40:70:1b:2d:f5:87:1d:69:52:19:03:ef:df:
                    db:5d:14:0c:94:c8:3a:44:f0:0a:e8:a9:34:57:cc:
                    dd:61:ff:47:1d:0a:4d:52:6c:61:5f:67:95:04:30:
                    67:f4:c9:35:29:32:b3:ad:2d:55:08:14:84:a7:54:
                    23:e2:69:62:49:be:1d:3e:e6:08:3a:01:d8:be:bb:
                    12:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EA:05:C8:73:7D:B6:B1:6C:DA:78:C5:3D:EF:5E:C5:99:18:21:F7
            X509v3 Authority Key Identifier:
                keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:8a:9b:99:fe:e3:27:d1:52:db:90:e0:b5:c1:b2:7d:b6:b4:
         77:9e:b8:21:47:d0:18:5c:5c:8a:d1:c8:9f:aa:76:4e:80:9d:
         49:9e:48:37:a6:7d:b1:e6:40:5c:20:6e:f3:70:ac:12:94:2a:
         d6:17:95:ec:3f:ae:57:37:18:c5:6e:6a:33:76:3e:89:45:2f:
         bc:bb:16:a7:84:f6:56:89:bf:19:1c:72:04:82:4e:ba:39:ff:
         22:c1:95:14:83:d2:c1:61:dd:ec:3c:3e:83:17:29:f4:8c:33:
         9b:5c:2b:0c:ba:3a:2e:06:a9:1b:77:dc:9f:0a:48:b4:9e:5f:
         47:05:16:30:fd:d9:cb:93:20:5f:f5:1f:3c:22:b6:c2:3b:55:
         35:41:68:57:4d:ef:39:a4:f3:26:5f:3b:b3:32:41:d2:01:39:
         fd:4a:4c:0d:fe:3e:51:e8:0c:9b:ca:93:60:76:1e:a1:db:f9:
         26:c8:9c:22:0f:f9:a9:4e:b2:fc:fe:30:46:cd:6d:5a:95:c3:
         07:bc:98:c9:a1:62:69:91:c2:18:ce:d0:bf:8c:c8:3e:da:0f:
         7b:81:6d:65:1e:80:7b:63:ca:03:3e:b4:54:73:63:aa:74:fc:
         60:3d:48:c6:25:2b:45:50:e9:7d:56:ef:b9:27:62:a8:56:06:
         0d:93:99:c1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZQtkJBz/9InqXwmWyPUew9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNmRmNTNjOWZkMmM1ZmM3NGYxZGI3MTgzNGQ3ZTQ2YTc2
ZTkxZDcwHhcNMjUwNDIwMDEwMDQzWhcNMjUwNDIxMDEwMDQzWjAzMTEwLwYDVQQD
EygyNGVhMDVjODczN2RiNmIxNmNkYTc4YzUzZGVmNWVjNTk5MTgyMWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIfRDINz4jWSM4K+Vkj43ZLpThkz
JxKfDA6dwUK9oViZ/j4jtMwJr2SrCSgG8M/z5DNt2WM731aJWNR+dvT6bJA7iOtD
F07P4gzlhEexXrZD1hrbUzNfnuOb5OjGsKeaoYH87bInfdMz2Yaq2+mR7LCR2W1O
fRsG5D52Hla5gkvQ2LbQAWI4TWvXtkVLb8f0kDNtDOz4SpU080NVwy4OYXZWG5gg
V1CEry44Uro7ofv/FQemAkBwGy31hx1pUhkD79/bXRQMlMg6RPAK6Kk0V8zdYf9H
HQpNUmxhX2eVBDBn9Mk1KTKzrS1VCBSEp1Qj4mliSb4dPuYIOgHYvrsSXwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCTqBchzfbaxbNp4xT3vXsWZGCH3MB8GA1UdIwQY
MBaAFPpt9Tyf0sX8dPHbcYNNfkanbpHXMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tMzFQSl9TeGZ4MDhkdHhnMDEtUnFkdWtkYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvYTk0NzgwLTFiZjMtNDY3YS05MzY5
LWU5OGZmMzNmNjk3Yy8xLzEtbTMxUEpfU3hmeDA4ZHR4ZzAxLVJxZHVrZGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2UzL2E5NDc4MC0xYmYzLTQ2N2EtOTM2OS1lOThmZjMzZjY5
N2MvMS8xLW0zMVBKX1N4ZngwOGR0eGcwMS1ScWR1a2RjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYqb
mf7jJ9FS25DgtcGyfba0d564IUfQGFxcitHIn6p2ToCdSZ5IN6Z9seZAXCBu83Cs
EpQq1heV7D+uVzcYxW5qM3Y+iUUvvLsWp4T2Vom/GRxyBIJOujn/IsGVFIPSwWHd
7Dw+gxcp9Iwzm1wrDLo6LgapG3fcnwpItJ5fRwUWMP3Zy5MgX/UfPCK2wjtVNUFo
V03vOaTzJl87szJB0gE5/UpMDf4+UegMm8qTYHYeodv5JsicIg/5qU6y/P4wRs1t
WpXDB7yYyaFiaZHCGM7Qv4zIPtoPe4FtZR6Ae2PKAz60VHNjqnT8YD1IxiUrRVDp
fVbvuSdiqFYGDZOZwQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:26:57 2025 by rpki-client