Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
File:                     zvcELPfCTHnXmEiy6MqzNXpkD9s.mft (raw, json)
Hash identifier:          fcN6AQ++elAAv8q77TSzOTU9CR9bEVnmEsd1TenH6Jg=
Subject key identifier:   8B:43:26:FC:F5:05:4E:4A:1B:8E:DD:DF:21:76:40:1F:18:0A:F5:45
Authority key identifier: CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB
Certificate issuer:       /CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
Certificate serial:       019510C7D097E5911651D74F7EBE55BCEECE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
Manifest number:          0674
Signing time:             Sun 16 Feb 2025 22:01:25 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:25 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:25 +0000
Files and hashes:         1: zvcELPfCTHnXmEiy6MqzNXpkD9s.crl (hash: dWYGrIT/6CuRPx1rwuGF24Iio6Da3xPVfRGM4j4cPGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:d0:97:e5:91:16:51:d7:4f:7e:be:55:bc:ee:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
        Validity
            Not Before: Feb 16 22:01:25 2025 GMT
            Not After : Feb 17 22:01:25 2025 GMT
        Subject: CN=8b4326fcf5054e4a1b8edddf2176401f180af545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b3:08:b2:9e:d6:9d:13:3a:e5:d4:a3:35:6d:
                    c4:33:05:6e:94:da:89:88:78:a0:49:83:4b:bc:f1:
                    31:a5:04:48:c2:a8:ed:45:46:22:49:5f:16:37:5e:
                    7d:44:cf:29:be:34:ab:73:6d:de:e9:3f:c8:58:c5:
                    66:61:62:3a:30:d2:28:a2:12:03:9d:69:8d:e1:30:
                    1c:90:d7:2a:73:41:8b:ef:41:eb:43:eb:15:0f:8d:
                    54:52:6e:65:2c:74:d7:cd:97:18:9d:cb:5a:37:b5:
                    b0:7f:da:c0:56:8a:f2:45:e7:c4:0e:7a:3b:55:f3:
                    cf:b2:29:a5:a3:4e:d8:87:f7:9a:ea:0c:5f:5e:3e:
                    d4:ba:3e:8d:45:ca:6c:5b:e2:75:20:20:ca:bc:b7:
                    e3:55:72:51:ef:7e:1a:34:e4:a9:2d:ed:05:f1:d5:
                    27:74:aa:2d:bc:91:e9:27:55:23:2f:a3:f3:0f:80:
                    c4:fd:10:1e:db:23:89:d9:b7:12:73:32:3c:00:06:
                    a9:14:f9:a6:42:6c:9a:4a:7d:9a:cd:53:76:b2:6a:
                    33:77:8f:33:3b:1d:3f:1e:fc:1f:9e:54:33:7d:07:
                    bc:80:c7:00:bd:48:2d:5c:a1:dc:b8:98:69:0e:e7:
                    02:84:9f:f0:eb:37:16:bc:bb:6a:c0:8c:86:d7:35:
                    2c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:43:26:FC:F5:05:4E:4A:1B:8E:DD:DF:21:76:40:1F:18:0A:F5:45
            X509v3 Authority Key Identifier:
                keyid:CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:40:c7:b6:36:ae:bf:cb:3f:cb:32:8b:3e:e9:d0:56:5f:25:
         d3:67:d2:43:6c:ea:22:d5:34:c2:89:76:6b:9e:61:5f:20:6e:
         2f:43:e7:6c:7b:62:34:c2:6c:63:35:3a:38:49:49:a2:c4:18:
         0c:c5:5d:35:ed:20:05:d2:cb:44:96:46:56:f1:f3:c1:b7:54:
         73:34:12:85:e1:38:92:cc:54:52:50:d4:d4:18:72:ce:1c:a0:
         99:e0:24:c6:af:9c:62:a9:27:bc:fd:2d:e9:fa:c6:89:d3:b2:
         95:21:1c:35:7d:af:a2:61:37:e2:5a:47:59:8a:e9:d2:06:41:
         b2:72:6a:07:a4:ef:ed:8a:e4:fa:16:80:42:8f:d4:c2:2c:9a:
         b9:3e:3f:65:62:50:f1:17:1a:5c:59:3e:95:4e:d4:95:76:91:
         cf:c7:9e:74:a0:d1:1a:46:11:fb:69:1a:6b:15:8c:55:68:ac:
         60:9d:42:a0:01:1d:1c:ed:13:f9:5d:17:92:a6:c0:b7:df:7b:
         68:ba:dd:a0:ef:85:19:88:29:a2:fb:86:d9:06:2a:b4:6b:2e:
         a8:35:8d:da:63:1b:83:94:7c:77:d5:01:28:d2:3d:ef:f2:dd:
         08:38:b9:01:11:5b:2d:2f:86:06:ff:5a:b0:08:4e:f8:cc:3a:
         05:50:8b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:04 2025 by rpki-client