Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/974b29-7ece-41ce-b88b-4750c0b2116a/1/pCxsGvKPP4VmrR80IDC_Bg92Vnc.mft
File:                     pCxsGvKPP4VmrR80IDC_Bg92Vnc.mft (raw, json)
Hash identifier:          laQYGQ4snzaYiW1tR/DYKDVgq5+kQZ4hjoNS/UjpqZU=
Subject key identifier:   C3:FD:CE:F2:C6:84:90:A3:E5:01:58:92:C1:0B:83:89:C6:FD:D3:49
Authority key identifier: A4:2C:6C:1A:F2:8F:3F:85:66:AD:1F:34:20:30:BF:06:0F:76:56:77
Certificate issuer:       /CN=a42c6c1af28f3f8566ad1f342030bf060f765677
Certificate serial:       0194C38827DE4BCDA69447FDC2EC4FE9339C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pCxsGvKPP4VmrR80IDC_Bg92Vnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/974b29-7ece-41ce-b88b-4750c0b2116a/1/pCxsGvKPP4VmrR80IDC_Bg92Vnc.mft
Manifest number:          049E
Signing time:             Sat 01 Feb 2025 22:01:07 +0000
Manifest this update:     Sat 01 Feb 2025 22:01:07 +0000
Manifest next update:     Sun 02 Feb 2025 22:01:07 +0000
Files and hashes:         1: pCxsGvKPP4VmrR80IDC_Bg92Vnc.crl (hash: 8uuWm7c8BceLJhTfb3chpTb4qbVYUVGFeISMGQ7T+3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/974b29-7ece-41ce-b88b-4750c0b2116a/1/pCxsGvKPP4VmrR80IDC_Bg92Vnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/974b29-7ece-41ce-b88b-4750c0b2116a/1/pCxsGvKPP4VmrR80IDC_Bg92Vnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pCxsGvKPP4VmrR80IDC_Bg92Vnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:88:27:de:4b:cd:a6:94:47:fd:c2:ec:4f:e9:33:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42c6c1af28f3f8566ad1f342030bf060f765677
        Validity
            Not Before: Feb  1 22:01:07 2025 GMT
            Not After : Feb  2 22:01:07 2025 GMT
        Subject: CN=c3fdcef2c68490a3e5015892c10b8389c6fdd349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c7:d7:c3:6b:b6:1c:d1:2c:4b:d9:a6:f6:eb:
                    47:2e:90:1c:9e:ef:23:67:40:64:20:66:e0:e1:c4:
                    74:42:77:10:f8:fc:60:58:a8:23:cf:ad:8a:19:a8:
                    2f:33:e1:03:f4:8e:91:4d:d2:9b:f5:f7:cb:e1:da:
                    c1:0d:30:76:2e:48:f1:a4:0c:15:08:be:8e:fb:7e:
                    82:4b:5b:98:ab:b0:f1:a6:48:02:2a:15:8c:47:f6:
                    59:63:0f:e6:c3:19:13:bd:bb:c0:0c:64:33:11:58:
                    f2:ce:5e:3a:f1:d6:5a:c8:ab:d5:10:7b:c5:02:43:
                    cd:e0:f2:98:25:40:14:35:53:e8:38:6a:81:5c:fc:
                    a7:19:27:25:c7:89:96:1f:4a:34:b2:79:39:e5:54:
                    09:c3:ea:f5:6e:3d:86:c5:08:0f:25:da:83:0d:d9:
                    15:20:e5:7f:bf:a3:8f:2e:fa:86:d0:bd:2e:4f:37:
                    21:52:ff:28:fe:0d:a6:9f:35:7b:80:c1:a1:2f:c8:
                    29:7e:dc:b1:08:cd:5c:73:fb:d9:68:92:7c:f2:27:
                    ad:a5:f6:08:58:1f:81:21:20:50:97:37:3b:a2:d1:
                    60:0a:a2:7e:51:16:12:96:c7:4b:07:cf:36:31:4a:
                    93:c3:56:f2:6a:38:c0:65:ab:fd:c7:89:8b:5d:d0:
                    01:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FD:CE:F2:C6:84:90:A3:E5:01:58:92:C1:0B:83:89:C6:FD:D3:49
            X509v3 Authority Key Identifier:
                keyid:A4:2C:6C:1A:F2:8F:3F:85:66:AD:1F:34:20:30:BF:06:0F:76:56:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCxsGvKPP4VmrR80IDC_Bg92Vnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/974b29-7ece-41ce-b88b-4750c0b2116a/1/pCxsGvKPP4VmrR80IDC_Bg92Vnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/974b29-7ece-41ce-b88b-4750c0b2116a/1/pCxsGvKPP4VmrR80IDC_Bg92Vnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b8:82:a4:22:a6:f0:06:f7:83:41:c0:a9:eb:27:d9:40:61:
         48:67:fe:8a:b4:d1:c5:8b:06:f7:11:a6:32:ea:88:56:f0:0c:
         48:92:fc:41:f3:9c:cc:71:b8:4c:06:99:e4:d7:7a:83:91:23:
         d5:82:d1:5c:4f:36:ed:c6:c8:a5:a4:d5:2f:81:93:d6:ee:18:
         0d:43:a2:58:8e:f3:c6:dd:a9:00:00:24:37:08:c8:4b:a7:a0:
         9a:b0:2f:03:3a:eb:99:1d:f7:64:75:35:c6:35:5f:cd:78:58:
         ad:db:4f:d5:9f:74:3c:28:4a:10:87:92:e5:96:6d:28:cb:dd:
         bd:cc:a1:27:d5:f9:69:11:fe:62:aa:2e:d4:32:86:88:e3:af:
         cc:f5:bb:4b:51:48:0f:66:08:a2:2d:32:a3:7c:b3:8e:40:68:
         80:ac:b1:6c:67:6f:9b:31:67:48:71:b9:42:43:ec:9a:4e:35:
         9b:82:37:04:f8:74:b3:20:ae:f4:76:dc:a2:0d:fb:39:b5:00:
         65:2e:e2:06:e1:d0:6d:56:c5:cd:e0:76:75:a4:f0:33:fa:e1:
         05:68:b1:44:b7:bf:7d:10:91:16:d3:6d:8f:38:00:8b:4d:9f:
         a7:0e:c6:59:a5:ec:51:39:5a:e1:26:07:27:81:8b:f0:14:fb:
         bd:78:4f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:02:37 2025 by rpki-client