Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
File:                     oVJEYml6J_56uUtqypBnkx2SEC8.mft (raw, json)
Hash identifier:          zyVmpRHF9X+x98dGkT7bLzbi2e+rrHzGDZSbCxrUb4o=
Subject key identifier:   E0:68:9E:C7:4A:08:79:59:46:B0:70:EC:9F:BF:13:80:76:91:F1:1D
Authority key identifier: A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
Certificate issuer:       /CN=a1524462697a27fe7ab94b6aca9067931d92102f
Certificate serial:       019510C714631527726B8C9381595D90C9DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
Manifest number:          1453
Signing time:             Sun 16 Feb 2025 22:00:37 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:37 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:37 +0000
Files and hashes:         1: oVJEYml6J_56uUtqypBnkx2SEC8.crl (hash: tb+qCpxYnEFpdDjNmJn+WJi28TvXb9+0Rk6BXU4cDsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:14:63:15:27:72:6b:8c:93:81:59:5d:90:c9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1524462697a27fe7ab94b6aca9067931d92102f
        Validity
            Not Before: Feb 16 22:00:37 2025 GMT
            Not After : Feb 17 22:00:37 2025 GMT
        Subject: CN=e0689ec74a08795946b070ec9fbf13807691f11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:29:60:c7:50:e7:dc:a6:ee:27:c6:37:e4:0c:
                    05:33:55:40:b5:36:b8:05:8f:ec:19:3f:6d:ff:31:
                    da:ea:b7:40:ad:06:9b:24:66:00:97:b5:6a:ba:02:
                    3c:9c:b6:56:4d:54:c4:d0:34:1a:37:42:bb:df:8a:
                    2f:f7:9c:62:28:46:02:1f:be:8e:a5:03:c4:63:b1:
                    16:8e:0a:4a:07:cb:a3:ed:5f:f3:7d:e0:e6:ae:2b:
                    9c:28:2b:5d:c1:4c:b4:69:7c:9c:a3:9f:e3:b2:71:
                    2b:69:6c:f8:05:f2:a0:34:75:f6:e1:41:69:a5:3e:
                    7b:c2:40:44:7f:b8:fe:2a:e4:67:d0:09:91:05:e1:
                    ff:b8:21:58:e0:96:a7:62:41:cc:67:14:68:41:60:
                    77:67:64:51:6b:dd:37:7a:f4:c1:9e:bb:aa:89:e2:
                    36:c1:ca:7d:b2:e5:d9:6d:ba:07:27:8a:ee:44:c0:
                    fc:bf:eb:0a:82:c5:5f:f5:08:18:70:87:4a:e5:b7:
                    7f:ba:40:c0:ba:25:e2:bd:17:70:78:c3:61:2e:44:
                    72:f8:b8:dc:22:17:05:fd:0a:a4:ae:79:93:72:10:
                    0f:9f:90:56:43:2e:79:75:93:74:b5:9e:00:af:20:
                    59:55:0a:e5:90:f7:74:42:45:25:21:00:b5:94:12:
                    f1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:68:9E:C7:4A:08:79:59:46:B0:70:EC:9F:BF:13:80:76:91:F1:1D
            X509v3 Authority Key Identifier:
                keyid:A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5b:4d:f8:b3:0f:71:6b:d4:5a:bd:7f:52:7f:63:58:e2:cb:
         63:c5:2e:38:c0:17:3e:de:46:f4:a0:e4:e6:09:db:93:b2:85:
         11:7c:ad:6b:d0:7f:46:d3:27:df:96:38:0e:e2:4f:87:61:33:
         8c:ab:5b:06:9d:8c:c0:86:3f:7e:81:46:74:45:ac:79:fe:1e:
         d1:c7:9b:c9:b7:96:03:f3:62:fc:71:f5:f0:8e:a3:d8:b7:c4:
         f1:b9:d2:e6:ab:94:b6:a5:79:8e:87:65:bb:c6:fc:26:37:ac:
         af:2d:f6:5b:06:09:b6:48:d5:02:04:89:d7:06:4a:96:12:73:
         4d:9c:c6:22:f2:82:9e:d4:2d:12:7a:3d:69:8e:45:bb:39:5e:
         b0:5e:b3:7a:b4:65:b3:07:93:fe:8e:cf:76:66:fb:c4:c6:76:
         0b:df:3d:3a:94:fc:54:21:c2:f4:1f:e0:83:33:99:26:78:a4:
         04:3f:a9:5c:36:aa:33:6f:df:1f:2f:ee:14:12:73:9a:1f:97:
         e2:2e:c4:d4:cc:c7:0f:db:14:d6:a3:7c:66:cf:d3:35:fa:04:
         49:98:39:3f:80:50:b8:d4:92:08:ac:33:46:be:c4:d2:89:0f:
         c8:ed:7e:68:d8:60:3c:a3:97:5c:38:9a:03:ae:ea:3b:1e:9f:
         0b:e0:a0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:28 2025 by rpki-client