Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/685711-a4ef-4e6c-b490-396d5ad896b8/1/0m9HluwczjftJ86jmJgDukl2JR4.mft
File:                     0m9HluwczjftJ86jmJgDukl2JR4.mft (raw, json)
Hash identifier:          /IuATDz3BBC+hBkq9D77gx7Ewx7mKJlZAGcAGYXjlp8=
Subject key identifier:   0C:0F:9D:A6:21:3C:FF:80:BB:9D:3F:9B:3E:9D:D8:0E:93:CA:61:D0
Authority key identifier: D2:6F:47:96:EC:1C:CE:37:ED:27:CE:A3:98:98:03:BA:49:76:25:1E
Certificate issuer:       /CN=d26f4796ec1cce37ed27cea3989803ba4976251e
Certificate serial:       019511D9BFFA026041360C125F6A9885E37E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0m9HluwczjftJ86jmJgDukl2JR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/685711-a4ef-4e6c-b490-396d5ad896b8/1/0m9HluwczjftJ86jmJgDukl2JR4.mft
Manifest number:          03B2
Signing time:             Mon 17 Feb 2025 03:00:37 +0000
Manifest this update:     Mon 17 Feb 2025 03:00:37 +0000
Manifest next update:     Tue 18 Feb 2025 03:00:37 +0000
Files and hashes:         1: 0m9HluwczjftJ86jmJgDukl2JR4.crl (hash: AiudGvdy+fa+SjB0X04bok1vtGxN+f2QYgxyyQS2FsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/685711-a4ef-4e6c-b490-396d5ad896b8/1/0m9HluwczjftJ86jmJgDukl2JR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/685711-a4ef-4e6c-b490-396d5ad896b8/1/0m9HluwczjftJ86jmJgDukl2JR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0m9HluwczjftJ86jmJgDukl2JR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:d9:bf:fa:02:60:41:36:0c:12:5f:6a:98:85:e3:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26f4796ec1cce37ed27cea3989803ba4976251e
        Validity
            Not Before: Feb 17 03:00:37 2025 GMT
            Not After : Feb 18 03:00:37 2025 GMT
        Subject: CN=0c0f9da6213cff80bb9d3f9b3e9dd80e93ca61d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:10:9d:41:24:36:c6:8d:7a:a2:e4:3b:44:8c:
                    da:f0:98:80:42:4b:0d:ea:e4:8f:45:cd:46:ef:3a:
                    31:e9:97:4f:c4:38:e2:a4:d3:c0:0f:ae:a8:c4:e7:
                    9a:d4:3c:e9:5b:7a:66:12:4b:3c:c2:34:66:c4:ff:
                    ee:58:a3:b7:d3:d5:b0:18:6a:55:75:06:48:56:ca:
                    9f:7d:90:cc:1c:2f:64:0d:75:28:b3:e1:07:51:eb:
                    dc:f4:ce:87:ef:86:9c:92:91:3d:eb:c3:ea:43:35:
                    96:93:c6:de:4d:8d:b0:0a:27:a6:d2:b3:7f:7a:19:
                    8b:e4:65:35:1e:9e:eb:2b:e1:e9:82:aa:1a:5f:79:
                    85:84:17:46:8d:21:2f:7c:54:a3:63:fe:c3:84:bf:
                    01:30:5b:54:e5:0d:d1:eb:2e:b3:a1:5b:78:7b:89:
                    32:84:09:b3:70:84:be:f3:59:9d:bc:ee:d1:01:7f:
                    5b:2b:58:85:93:a6:6d:92:fe:f2:11:17:1e:b8:8f:
                    de:6d:34:37:fe:77:1c:32:9c:68:21:c1:1e:52:bb:
                    13:36:2c:e7:79:b2:80:4a:3d:32:52:0f:38:18:92:
                    25:0e:be:5b:b1:a0:dc:37:a4:7c:11:5c:8f:82:5d:
                    2e:f0:51:b9:76:42:ca:96:e0:04:56:b7:23:01:f9:
                    f6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0F:9D:A6:21:3C:FF:80:BB:9D:3F:9B:3E:9D:D8:0E:93:CA:61:D0
            X509v3 Authority Key Identifier:
                keyid:D2:6F:47:96:EC:1C:CE:37:ED:27:CE:A3:98:98:03:BA:49:76:25:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m9HluwczjftJ86jmJgDukl2JR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/685711-a4ef-4e6c-b490-396d5ad896b8/1/0m9HluwczjftJ86jmJgDukl2JR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/685711-a4ef-4e6c-b490-396d5ad896b8/1/0m9HluwczjftJ86jmJgDukl2JR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b9:a0:23:03:f5:61:16:2e:a1:66:d2:99:cb:cb:48:8b:3e:
         86:e7:e2:55:75:c9:8d:e4:73:f7:d2:17:c3:e9:99:85:9d:99:
         7c:76:f4:73:55:99:ca:b4:84:7f:10:ff:77:67:7e:91:4d:22:
         77:5b:26:14:28:1d:4e:09:4a:27:14:bf:3b:cb:98:70:32:87:
         ec:93:8a:e3:ac:37:ef:96:88:c4:99:44:9c:26:b7:be:84:08:
         49:b3:1e:92:d0:39:84:d8:63:5e:da:29:ab:ab:9c:c4:fd:1f:
         eb:f1:a0:6a:c4:39:98:ea:35:e6:df:92:dc:c5:95:05:f9:3c:
         f0:94:a6:7a:ee:06:ee:aa:9b:6c:a3:1a:21:53:d1:eb:b6:80:
         f0:48:8b:c5:67:14:c7:cb:a4:2e:42:bd:4d:a3:51:18:b7:81:
         07:5b:40:2d:d8:3f:6e:2f:27:4a:31:36:57:34:48:19:4e:aa:
         5b:6e:2f:cd:f1:9b:d9:64:06:eb:ca:b0:69:54:b3:dd:92:58:
         c5:be:06:41:c0:90:0f:4f:08:a3:04:86:78:00:35:fb:98:3e:
         d2:c7:d3:f9:41:41:4e:6e:e8:d5:1b:ec:ed:d7:7b:80:22:ed:
         57:4f:f0:d1:24:5c:0a:ef:7c:e2:ef:80:f2:b8:2b:8a:48:a8:
         44:89:ab:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:42 2025 by rpki-client