Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
File:                     Ty_D6GA1oLjpOA_7I_I_V0MLess.mft (raw, json)
Hash identifier:          voQ0ISMzC9gFV8MPT96yQUFOYkO93777ANE5o8pM4eM=
Subject key identifier:   48:BB:E4:DF:AB:CB:C6:39:AF:D5:0B:E3:EF:64:28:E1:65:B5:3D:B5
Authority key identifier: 4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB
Certificate issuer:       /CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb
Certificate serial:       01958B8466320603A538734F3FEAAB0CED23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
Manifest number:          0D05
Signing time:             Wed 12 Mar 2025 18:01:04 +0000
Manifest this update:     Wed 12 Mar 2025 18:01:04 +0000
Manifest next update:     Thu 13 Mar 2025 18:01:04 +0000
Files and hashes:         1: Ty_D6GA1oLjpOA_7I_I_V0MLess.crl (hash: K+DIK/KpWfJn9UUS3Uv2kP6G0hip/s72dU9h97i7E7o=)
                          2: WjR-M02WnGrf1hvkkNo0bZEQvnQ.roa (hash: CW8wqMfi/RZSfPuGRw3DqaK3c0hn412Beo4u95KUkQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 18:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:84:66:32:06:03:a5:38:73:4f:3f:ea:ab:0c:ed:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb
        Validity
            Not Before: Mar 12 18:01:04 2025 GMT
            Not After : Mar 13 18:01:04 2025 GMT
        Subject: CN=48bbe4dfabcbc639afd50be3ef6428e165b53db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:82:bf:80:57:4b:2b:c6:65:14:b5:f6:8f:81:
                    c7:da:50:18:e0:07:a7:29:76:44:da:06:ff:b7:77:
                    8a:f3:b3:68:92:cc:4d:d2:58:65:5a:df:32:11:e0:
                    78:b3:9a:2f:11:72:42:c4:3e:5c:c9:ba:04:e0:6f:
                    9d:e1:1d:ee:ac:14:32:77:ec:a0:9a:67:4d:fc:5f:
                    59:c6:bb:cb:ca:7d:6b:3c:cb:b9:96:7d:eb:94:a5:
                    f1:96:11:84:ff:03:d6:8d:e1:92:c8:c4:f5:8c:b1:
                    41:70:2c:3b:98:6e:1e:4b:53:df:62:9a:de:7f:20:
                    86:94:e5:f9:0f:0c:34:2c:b5:19:d3:e0:33:13:e9:
                    50:4d:45:6e:89:89:d6:b3:76:96:2c:4a:ec:d3:b4:
                    7a:4d:bf:04:2d:da:a6:bd:c8:9f:ea:06:d4:bc:49:
                    76:de:a1:4a:63:be:7d:36:e6:ee:42:da:98:57:8d:
                    9a:6a:ae:2d:25:0a:94:c9:95:16:91:6d:f3:84:1f:
                    78:12:16:26:d4:d2:81:50:97:91:b2:87:e7:2a:79:
                    4e:09:78:02:31:b1:ec:84:44:61:65:85:03:72:4b:
                    f3:e1:51:80:76:63:73:f9:f6:e1:33:d4:d7:a4:86:
                    e5:21:ba:3a:be:b2:50:32:d4:c0:ac:d2:c7:76:2b:
                    57:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BB:E4:DF:AB:CB:C6:39:AF:D5:0B:E3:EF:64:28:E1:65:B5:3D:B5
            X509v3 Authority Key Identifier:
                keyid:4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:32:f4:50:00:1f:e3:02:04:37:f7:75:aa:ce:24:66:5b:1e:
         cd:fb:3a:80:ff:6f:d3:c1:c4:b5:fb:81:e6:0d:51:c3:34:a3:
         7f:c8:f1:66:95:48:73:55:a4:90:a4:84:7c:72:93:c1:38:f6:
         b7:31:8c:32:e7:6d:6e:c2:3d:74:da:54:ba:05:ca:85:fe:df:
         5b:90:96:61:28:8c:c7:57:d3:5a:31:05:2a:c7:cb:52:d9:a8:
         95:0b:98:bc:f8:b2:d1:2d:49:69:76:92:6d:78:94:d8:28:61:
         cc:78:89:f0:82:8c:89:9b:0b:eb:9c:81:c2:60:41:9e:26:3d:
         1b:c7:9d:34:14:b9:af:9c:a1:86:a0:c6:36:5f:ae:63:5f:ee:
         4d:01:0d:cf:d0:11:fd:87:e6:77:4e:28:b3:f5:ab:1f:04:45:
         8a:bb:10:a4:f0:ab:f7:78:bc:b7:8e:35:5e:c9:c8:ba:87:d2:
         4a:c2:1c:3a:cd:a0:ef:cd:6e:8b:a8:76:e7:97:2c:4f:4f:59:
         c2:8a:ee:95:ec:46:30:c2:9d:86:d4:3b:4c:43:9d:d8:0f:d9:
         ee:29:05:9f:9d:6c:7d:8d:ee:e7:f8:ab:15:80:8f:36:49:4a:
         81:58:2d:2b:f5:2e:64:49:b0:2e:3d:1a:89:ab:74:bd:9a:71:
         71:24:a9:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLhGYyBgOlOHNPP+qrDO0jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMmZjM2U4NjAzNWEwYjhlOTM4MGZmYjIzZjIzZjU3NDMw
YjdhY2IwHhcNMjUwMzEyMTgwMTA0WhcNMjUwMzEzMTgwMTA0WjAzMTEwLwYDVQQD
Eyg0OGJiZTRkZmFiY2JjNjM5YWZkNTBiZTNlZjY0MjhlMTY1YjUzZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIK/gFdLK8ZlFLX2j4HH2lAY4Aen
KXZE2gb/t3eK87NoksxN0lhlWt8yEeB4s5ovEXJCxD5cyboE4G+d4R3urBQyd+yg
mmdN/F9ZxrvLyn1rPMu5ln3rlKXxlhGE/wPWjeGSyMT1jLFBcCw7mG4eS1PfYpre
fyCGlOX5Dww0LLUZ0+AzE+lQTUVuiYnWs3aWLErs07R6Tb8ELdqmvcif6gbUvEl2
3qFKY759NubuQtqYV42aaq4tJQqUyZUWkW3zhB94EhYm1NKBUJeRsofnKnlOCXgC
MbHshERhZYUDckvz4VGAdmNz+fbhM9TXpIblIbo6vrJQMtTArNLHditXzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEi75N+ry8Y5r9UL4+9kKOFltT21MB8GA1UdIwQY
MBaAFE8vw+hgNaC46TgP+yPyP1dDC3rLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8xZTM2ZTgtOGZhNi00YzE3LWEyNDAt
MzJlNTdiYzU0NzRiLzEvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8xZTM2ZTgtOGZhNi00YzE3LWEyNDAtMzJlNTdiYzU0NzRi
LzEvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsjL0UAAf
4wIEN/d1qs4kZlsezfs6gP9v08HEtfuB5g1RwzSjf8jxZpVIc1WkkKSEfHKTwTj2
tzGMMudtbsI9dNpUugXKhf7fW5CWYSiMx1fTWjEFKsfLUtmolQuYvPiy0S1JaXaS
bXiU2ChhzHiJ8IKMiZsL65yBwmBBniY9G8edNBS5r5yhhqDGNl+uY1/uTQENz9AR
/Yfmd04os/WrHwRFirsQpPCr93i8t441XsnIuofSSsIcOs2g781ui6h255csT09Z
worulexGMMKdhtQ7TEOd2A/Z7ikFn51sfY3u5/irFYCPNklKgVgtK/UuZEmwLj0a
iat0vZpxcSSpcA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:58 2025 by rpki-client