Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft
File:                     X6FRijy1wnSeMNn_Icg3iJHOgSU.mft (raw, json)
Hash identifier:          p71Wrt3yMv8aH+mM8lu3jc0KLs4AgoGb4YbpH9ejhrs=
Subject key identifier:   C1:FD:EC:46:89:3B:D4:EA:AD:90:09:27:C7:00:C6:A8:3E:CA:C8:B5
Authority key identifier: 5F:A1:51:8A:3C:B5:C2:74:9E:30:D9:FF:21:C8:37:88:91:CE:81:25
Certificate issuer:       /CN=5fa1518a3cb5c2749e30d9ff21c8378891ce8125
Certificate serial:       0194C388204A4239319A401A996FD76A88D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft
Manifest number:          069E
Signing time:             Sat 01 Feb 2025 22:01:05 +0000
Manifest this update:     Sat 01 Feb 2025 22:01:05 +0000
Manifest next update:     Sun 02 Feb 2025 22:01:05 +0000
Files and hashes:         1: X6FRijy1wnSeMNn_Icg3iJHOgSU.crl (hash: j1LIiBxa++CmZIr8TmIK9/q9ZQEyHaEgU15BNBjK8hE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:88:20:4a:42:39:31:9a:40:1a:99:6f:d7:6a:88:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fa1518a3cb5c2749e30d9ff21c8378891ce8125
        Validity
            Not Before: Feb  1 22:01:05 2025 GMT
            Not After : Feb  2 22:01:05 2025 GMT
        Subject: CN=c1fdec46893bd4eaad900927c700c6a83ecac8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b1:aa:99:91:4f:a3:d1:d3:fb:91:b4:2a:54:
                    c5:b0:f9:b5:39:a4:95:2e:33:56:ca:6f:6b:04:36:
                    1e:12:e0:f8:04:5d:aa:14:8e:73:01:3e:ae:67:9b:
                    99:d2:49:16:18:e5:68:1c:98:4a:b0:48:c1:23:69:
                    fb:b9:60:80:34:99:17:ca:8b:63:6c:98:4f:e2:3c:
                    da:f3:7d:d4:b6:95:e4:7b:0c:3f:ee:0e:c9:48:99:
                    85:2c:66:9e:2e:45:a4:92:4e:3f:f4:08:9e:89:f8:
                    c1:1f:0d:fb:29:1f:3b:e8:0f:23:e6:55:9b:5a:56:
                    d2:a4:00:ee:6d:cc:c8:6a:e0:bb:32:b7:21:ce:c6:
                    12:9f:07:3d:d0:e9:e2:1a:20:9e:cf:8e:2d:6f:68:
                    dd:0a:fb:c7:43:37:5d:fe:2c:4b:e6:3d:ea:2b:c1:
                    88:9a:90:1e:1f:98:4f:1f:b4:3a:3c:b2:ca:58:ae:
                    16:59:b7:bb:fb:20:29:9a:63:de:7b:00:a0:df:d3:
                    22:5b:f2:ba:9c:a9:11:a2:4d:1c:8a:ad:44:2a:67:
                    28:d3:d0:d4:e0:8e:0c:40:e5:58:17:20:d9:61:fd:
                    26:3c:09:03:eb:6d:75:70:39:f8:67:dd:8d:f7:d9:
                    11:fd:1f:61:48:13:89:2b:70:f6:a4:8c:f5:71:67:
                    8c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FD:EC:46:89:3B:D4:EA:AD:90:09:27:C7:00:C6:A8:3E:CA:C8:B5
            X509v3 Authority Key Identifier:
                keyid:5F:A1:51:8A:3C:B5:C2:74:9E:30:D9:FF:21:C8:37:88:91:CE:81:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:9d:78:26:25:c5:24:83:51:2c:9b:45:f4:30:1c:80:9c:68:
         7b:18:bb:59:79:e1:44:bb:f1:00:9e:0d:6d:cb:0c:d3:a3:0f:
         81:7e:70:a5:03:80:a0:21:65:aa:18:fe:ca:da:0d:2f:e1:93:
         6d:68:4e:2f:fb:06:67:f1:45:66:67:ad:a6:5c:97:9a:82:b1:
         0e:8c:16:3c:8a:b9:ae:20:19:24:67:e8:04:86:1e:68:a9:6b:
         22:0d:a5:48:7f:1f:b5:d7:34:37:93:34:2e:59:99:04:1e:12:
         f8:3b:0d:b3:e5:b3:7d:cb:2c:85:59:24:4c:9a:46:75:d6:99:
         d3:ab:09:6b:e9:7e:6c:47:d2:54:0d:51:15:29:f9:8f:a8:07:
         86:7b:41:c2:1e:c3:b9:df:7c:7d:4f:94:de:41:87:5f:ba:8d:
         32:c2:b1:6d:bc:61:85:ad:ad:e0:69:b1:38:4c:47:fb:4a:e6:
         6a:9c:55:31:02:93:b9:bb:84:e0:66:0a:8b:a5:a0:1d:8f:e1:
         98:36:a4:26:7e:13:62:23:64:52:c0:0f:ca:a0:bb:b8:8b:7e:
         ea:de:c0:9b:c0:f5:aa:c7:d1:27:93:cc:ed:72:ee:27:00:3c:
         c1:d9:da:0b:53:63:1b:65:da:15:dc:37:0e:cf:44:1b:d4:b3:
         3e:a2:bd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:31 2025 by rpki-client