Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
File:                     HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft (raw, json)
Hash identifier:          Eyjd1k6bxTwx76CeKEbIMsVybc+KRrPqPo3EbJsZpy0=
Subject key identifier:   27:CF:CB:F8:7C:94:82:4A:FE:36:41:03:7B:9E:C8:76:A3:87:22:33
Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
Certificate issuer:       /CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Certificate serial:       019510FE00F7F451877B3CAD1D32F8522F8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
Manifest number:          053C
Signing time:             Sun 16 Feb 2025 23:00:36 +0000
Manifest this update:     Sun 16 Feb 2025 23:00:36 +0000
Manifest next update:     Mon 17 Feb 2025 23:00:36 +0000
Files and hashes:         1: DIbZDqcpM4qcOhMF8eKXFmsPvQ0.roa (hash: lG6irPrrENioJbdZNCV7dvSlaOPs7EcYHQ3gatCpu5Y=)
                          2: HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl (hash: piXlsbUEVvfwNuz8jFiVnt1mONrmkoXEwAz33+EF0i8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:fe:00:f7:f4:51:87:7b:3c:ad:1d:32:f8:52:2f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3
        Validity
            Not Before: Feb 16 23:00:36 2025 GMT
            Not After : Feb 17 23:00:36 2025 GMT
        Subject: CN=27cfcbf87c94824afe3641037b9ec876a3872233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:94:67:fb:b3:ed:8a:38:5b:71:84:df:26:ba:
                    cd:1c:53:e0:bb:22:d7:fd:a6:0e:1a:af:0e:bb:f6:
                    cd:aa:7f:32:06:26:15:9f:d2:99:18:5f:8b:67:17:
                    03:4e:d1:ed:67:e0:ee:49:b8:b9:3d:39:58:4e:f6:
                    0d:12:b9:51:46:5d:22:25:ea:f0:1e:82:9d:d3:13:
                    e7:c4:a8:37:b5:9b:d2:13:a7:ff:5f:e8:cc:45:2a:
                    94:86:1b:c0:35:03:50:7a:82:23:9f:60:e9:b8:db:
                    9d:80:60:a9:ba:36:b8:e3:c1:99:f2:fc:67:71:09:
                    91:00:c0:f3:5e:fc:35:d1:dc:fe:cb:27:d7:87:00:
                    08:91:b0:b8:46:58:16:40:6b:4c:d2:99:20:1f:38:
                    02:05:c8:fb:ab:00:fe:7c:ed:68:ef:c1:da:ad:d9:
                    b6:cc:a0:ba:ff:5c:6f:b3:44:28:10:ec:84:70:74:
                    43:4c:51:92:dd:d8:8e:24:cd:eb:06:ed:5e:62:53:
                    2b:a9:b3:d8:5f:89:93:2d:6e:89:08:b9:04:58:e2:
                    1c:18:55:c2:0c:88:f6:78:15:c2:ed:bc:d7:b6:e9:
                    20:72:e0:7a:45:41:a2:bf:ca:e0:29:fc:41:98:a7:
                    92:37:c3:10:75:38:ba:44:a7:fe:6e:ea:ef:ed:42:
                    3d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CF:CB:F8:7C:94:82:4A:FE:36:41:03:7B:9E:C8:76:A3:87:22:33
            X509v3 Authority Key Identifier:
                keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b8:a2:8b:d9:27:67:ae:a7:9a:9b:cd:c5:3a:80:90:a1:f0:
         c8:e4:98:0c:28:14:3e:81:36:e3:1d:f2:ed:cc:9b:eb:b0:5e:
         cc:06:91:ac:13:11:c3:16:46:47:cf:1e:96:b0:09:c7:e3:9e:
         7f:25:a6:ec:02:26:06:2b:ac:ff:bc:8d:d1:df:84:93:60:c0:
         7b:29:a6:e9:f4:01:17:e1:7f:38:09:06:a1:46:33:45:2b:71:
         a0:38:ee:f9:66:a8:f8:de:30:74:66:a2:f3:cb:15:79:4f:7b:
         03:30:62:ec:48:f5:1c:4c:ae:05:a6:1d:cb:13:78:b8:d6:9f:
         00:69:b4:d4:5a:cb:78:97:3d:63:ed:56:cd:e8:ef:b2:63:e9:
         95:84:91:c4:60:92:53:27:25:7a:56:e6:9b:18:e2:c8:43:36:
         94:39:79:a1:2c:a0:f0:e2:75:1b:5c:43:26:42:15:75:5a:77:
         ea:1a:54:6e:85:2c:4b:9f:0a:66:bc:4d:13:48:cb:2a:e2:b1:
         e2:2b:90:ae:76:ee:51:de:02:a9:dc:f4:c0:37:fe:09:6f:a0:
         fc:16:16:d9:51:fa:fe:d1:be:39:2d:52:e4:e4:9c:02:8b:6c:
         91:db:87:e1:19:22:d2:bd:e1:a0:67:1c:65:80:25:26:98:93:
         86:b6:23:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:43 2025 by rpki-client