Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
File:                     g76BmaF8rKps1S15QSNtpuVuG-o.mft (raw, json)
Hash identifier:          6yhPPklffhlS6qxjd7ccM/Cgmq/VSBz2Ra8tgZ2pMQU=
Subject key identifier:   76:3B:1E:29:F4:1A:D1:15:0A:8E:38:7B:AD:9C:DA:A5:6E:99:DA:95
Authority key identifier: 83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA
Certificate issuer:       /CN=83be8199a17cacaa6cd52d7941236da6e56e1bea
Certificate serial:       019510C6F3F08FD488C5AF5CA322D1E3208F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
Manifest number:          07DA
Signing time:             Sun 16 Feb 2025 22:00:28 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:28 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:28 +0000
Files and hashes:         1: g76BmaF8rKps1S15QSNtpuVuG-o.crl (hash: 2tlGjU5xpRuwOC02taA7xHXzGny2qnaaVWLdkPdvLh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c6:f3:f0:8f:d4:88:c5:af:5c:a3:22:d1:e3:20:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83be8199a17cacaa6cd52d7941236da6e56e1bea
        Validity
            Not Before: Feb 16 22:00:28 2025 GMT
            Not After : Feb 17 22:00:28 2025 GMT
        Subject: CN=763b1e29f41ad1150a8e387bad9cdaa56e99da95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:92:9a:ee:ee:c3:fd:38:98:9a:64:63:69:6d:
                    c8:95:0f:4b:d6:61:d6:9e:1c:cd:eb:eb:17:2a:55:
                    a5:86:84:11:0a:39:b7:0a:22:c1:a1:00:ba:bc:dd:
                    fa:e3:74:48:1c:99:a9:74:cd:86:20:a8:21:25:2c:
                    48:db:be:aa:7e:1e:4c:03:e2:18:29:1f:52:f0:f0:
                    e5:8f:44:a8:67:a4:22:dd:82:4f:89:e8:d9:30:9a:
                    ed:b7:1f:9e:99:b6:bd:3e:5a:c2:57:c5:27:b6:ca:
                    5a:49:31:00:26:6d:64:39:43:08:10:b7:be:3d:00:
                    7e:f3:e4:15:25:83:3b:e5:5b:3e:fe:c5:51:49:8e:
                    4c:b0:50:55:d7:dc:81:fe:16:13:fc:ee:2e:9c:3f:
                    5e:ba:d4:b8:42:82:51:88:f6:bf:4c:20:b3:80:bf:
                    d7:d8:0b:8d:44:08:b2:0e:3e:fa:b7:92:af:db:a6:
                    60:97:3b:7d:c5:71:8f:71:73:56:6b:e5:e2:e2:60:
                    35:9c:7f:8c:3c:8b:f2:19:da:2c:8a:6e:66:93:91:
                    1a:0a:bf:d5:bd:6f:d2:e3:de:c9:93:b9:91:10:ab:
                    a9:ea:23:d7:ef:af:bc:cd:5b:d6:85:72:b7:43:cb:
                    7a:4e:71:5a:53:81:a5:39:84:08:e9:d5:45:16:97:
                    70:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3B:1E:29:F4:1A:D1:15:0A:8E:38:7B:AD:9C:DA:A5:6E:99:DA:95
            X509v3 Authority Key Identifier:
                keyid:83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:27:de:e9:0d:26:eb:5b:58:75:42:7d:80:63:04:c3:a0:60:
         3d:85:cd:a6:15:16:f5:42:50:d3:ac:12:b5:90:58:7c:5b:f5:
         71:e6:75:0d:a9:c4:79:37:d4:26:37:7d:d3:2d:22:38:2f:0a:
         8a:51:84:b7:70:58:15:b3:fc:7f:7b:61:e7:5e:a0:65:b4:05:
         89:f8:01:bb:44:49:a5:8d:d8:59:71:e4:db:c6:7d:b9:9a:c6:
         05:42:bd:ad:be:ae:2f:2c:fa:2c:6d:92:3f:31:bb:3e:d8:6e:
         96:9a:0a:3b:8d:12:2e:b7:e0:8b:a4:e5:f1:3f:04:8d:ff:a2:
         bb:f3:1e:1c:6e:56:5e:ac:94:8b:4c:3e:34:80:8d:f5:f7:52:
         21:f3:8c:5f:63:34:dc:73:2b:43:13:68:20:8e:f7:a9:1b:1d:
         2e:6e:cb:76:58:0b:3c:9b:fd:a1:43:d3:34:6d:dc:7e:de:71:
         54:64:6b:56:bc:2d:4c:73:8f:b9:fc:0c:54:ac:18:98:53:eb:
         82:a0:d5:e8:c8:45:5a:1b:c2:fc:35:b2:d1:10:90:5d:ec:a1:
         5c:e0:ed:8f:2c:49:c9:72:f2:97:2c:c3:23:fc:d2:b3:0e:37:
         f6:db:2b:b5:60:55:8c:35:a7:3a:30:8c:e1:12:5a:03:c5:17:
         ac:d3:0e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:48 2025 by rpki-client