Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
File:                     leBbGUrhvlKWmltBBFV_8ELBYCo.mft (raw, json)
Hash identifier:          4J2IXBadMNl1DTxhCqWC8UpH80hXcpMnHAeiWjI49Ro=
Subject key identifier:   0C:5A:9D:33:C9:1F:32:0A:D2:BB:1C:9E:66:F6:13:D2:E0:14:87:38
Authority key identifier: 95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A
Certificate issuer:       /CN=95e05b194ae1be52969a5b4104557ff042c1602a
Certificate serial:       0194BB5FDD8DB6FC418B6B479B0DB9F61092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
Manifest number:          0281
Signing time:             Fri 31 Jan 2025 08:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:09 +0000
Files and hashes:         1: leBbGUrhvlKWmltBBFV_8ELBYCo.crl (hash: KpxXqV4xxZNMAR0oQ9UnJ2OpFq9NrnHvD7qUYrScXYI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:5f:dd:8d:b6:fc:41:8b:6b:47:9b:0d:b9:f6:10:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e05b194ae1be52969a5b4104557ff042c1602a
        Validity
            Not Before: Jan 31 08:00:09 2025 GMT
            Not After : Feb  1 08:00:09 2025 GMT
        Subject: CN=0c5a9d33c91f320ad2bb1c9e66f613d2e0148738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:8e:8c:a7:5c:d3:19:17:5f:cd:64:58:46:
                    75:bb:74:c9:09:5c:9c:6a:d9:a7:95:6b:85:84:05:
                    f6:d2:c7:06:0a:68:02:43:4b:2d:8e:3e:2c:bd:55:
                    08:b0:a6:a7:ed:82:84:67:e8:70:58:f6:a1:f2:15:
                    08:a9:8a:32:a2:e7:4c:77:a7:da:6e:f5:94:01:54:
                    1a:70:5c:09:82:d7:ce:54:e8:0e:a6:54:1e:01:0b:
                    08:32:08:a9:d9:bc:1a:6a:a4:eb:07:b0:61:a0:24:
                    17:e1:60:85:fa:00:61:35:78:82:68:c5:c8:63:06:
                    44:a2:f6:97:b7:cd:65:ed:9c:3f:4c:aa:6a:19:58:
                    5f:20:2a:d6:d5:cf:50:ad:b4:7f:e9:be:7c:df:ae:
                    ec:80:bd:78:64:df:d8:94:c0:ed:51:cf:6e:6d:2c:
                    a2:03:eb:3e:0c:91:f7:7b:f3:f7:71:64:53:c0:40:
                    bc:ee:68:73:a3:27:42:d9:46:79:87:bf:d6:8a:46:
                    93:ea:76:53:a0:30:87:67:e5:f2:1b:6e:23:f8:49:
                    2d:1b:d8:c1:ef:50:c0:ac:0d:84:d6:26:8b:4d:e6:
                    df:41:97:ce:8f:d7:1f:0f:04:fe:34:8c:8d:7c:85:
                    69:25:06:dd:86:45:2a:e4:29:35:62:a1:d4:58:77:
                    f1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5A:9D:33:C9:1F:32:0A:D2:BB:1C:9E:66:F6:13:D2:E0:14:87:38
            X509v3 Authority Key Identifier:
                keyid:95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:20:85:08:39:3d:6e:2a:f3:57:2d:7e:80:ae:cd:a1:10:b8:
         a5:6a:c5:2a:74:d6:9f:ea:37:38:09:e2:06:fa:ca:5e:07:4b:
         60:f1:02:4a:c8:b6:19:28:81:47:7a:40:d5:fa:f6:31:ed:86:
         bf:02:16:d9:1f:5c:82:16:2f:1f:1e:ce:09:d6:2b:cf:3a:2f:
         ea:e3:cc:d0:b7:ce:98:5c:cf:57:0d:8a:3f:a9:a6:08:f0:9b:
         96:c7:7a:45:51:84:e0:6a:cb:b8:0d:8d:92:a2:08:8f:f3:ac:
         eb:df:41:64:4c:7d:1a:75:b4:23:1a:9a:81:ff:f4:37:2b:29:
         35:63:c1:34:40:78:a0:7c:9d:16:75:86:88:5f:d1:24:1b:8a:
         14:42:c4:0b:75:81:ff:5c:97:16:e4:5b:2f:46:bb:d5:da:95:
         21:15:93:80:55:4a:5b:b3:b7:7d:e2:9f:96:80:d8:77:35:b6:
         83:29:bf:94:61:55:07:ab:94:ff:aa:3f:38:27:9d:cf:88:b5:
         4c:f9:c4:09:6c:d8:53:a8:d4:36:8c:9b:6c:f5:3f:c7:64:75:
         b1:78:83:62:ce:ca:6a:54:f3:fd:3e:c2:ec:18:3c:3a:f2:13:
         9b:ae:23:3b:50:cb:ad:44:ae:17:28:d7:8c:dd:7a:87:51:22:
         e4:b6:b0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:55 2025 by rpki-client on console-fra.rpki-client.org