Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
File:                     r0j2f1P86YkdQVk6yEyuMEq_y88.mft (raw, json)
Hash identifier:          Byl4OSiZiPP5Czq/kXQzZ6RtI5wjgu78J26ph8AepjA=
Subject key identifier:   80:39:EE:CC:C0:23:E2:84:AF:3D:DC:F2:4E:38:6B:D9:E1:6E:AF:0F
Authority key identifier: AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
Certificate issuer:       /CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Certificate serial:       0194BB605698D2CE6D4216009F62D5C32720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 08:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:40 +0000
Files and hashes:         1: LJm4ejx93tTGGSMSp9-CoJADCNU.roa (hash: enkxB1ym9D6j6OauD2B7/3J70MmuSWDzwk6AA84rwRE=)
                          2: Rx5Tk2OFD4AUCGaXo47NJtzGllk.roa (hash: comS5qd1rLPpE+d2v/ddO3rLzCRrN86e4IPWwWweF9Y=)
                          3: r0j2f1P86YkdQVk6yEyuMEq_y88.crl (hash: JtNYQxwAKeTFdkQeeW6yFKsJyqwzsOBmD3qgKViWIb8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:56:98:d2:ce:6d:42:16:00:9f:62:d5:c3:27:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af48f67f53fce9891d41593ac84cae304abfcbcf
        Validity
            Not Before: Jan 31 08:00:40 2025 GMT
            Not After : Feb  1 08:00:40 2025 GMT
        Subject: CN=8039eeccc023e284af3ddcf24e386bd9e16eaf0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fe:0a:3e:2e:10:c9:7a:29:1f:ae:af:cb:9e:
                    08:9d:eb:11:76:51:b1:6e:36:90:f7:96:8f:af:5a:
                    a5:d3:3b:d8:1e:ce:99:06:d8:a3:cd:90:7e:7d:03:
                    a6:12:80:53:2c:3c:c6:5a:f3:bd:47:c2:57:10:18:
                    c3:b8:25:66:ff:2d:5b:bb:23:ae:83:db:85:a1:8f:
                    3f:07:b6:4a:c2:f7:45:f8:2f:c4:fc:cc:a8:10:28:
                    10:28:44:9f:ec:6c:d1:f1:71:22:30:f0:99:70:cc:
                    75:3f:2d:30:ba:6a:36:8e:e1:0b:73:cb:f6:5d:8b:
                    dc:52:f2:99:25:6d:4e:9d:49:19:65:48:92:0d:7c:
                    f3:e6:30:2a:a8:5c:f1:15:61:55:4a:c3:60:c1:ca:
                    f9:a8:1d:18:a9:18:c5:1a:85:ac:3d:f0:51:be:73:
                    aa:1e:dc:99:33:e1:8b:d8:ec:19:2c:c3:ed:3d:10:
                    f0:c7:91:12:6d:4d:2e:37:b4:31:1a:cb:07:08:48:
                    05:f6:a8:47:fb:1d:8a:92:2b:8d:d0:4c:46:05:dc:
                    7a:6a:3b:cb:37:03:92:d6:60:0d:9f:c5:6d:d4:0f:
                    3b:14:ae:0a:f0:ed:73:20:b3:9e:11:c7:db:68:a0:
                    ea:4e:b6:16:41:aa:dd:72:1a:b2:15:ad:67:ea:19:
                    ca:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:39:EE:CC:C0:23:E2:84:AF:3D:DC:F2:4E:38:6B:D9:E1:6E:AF:0F
            X509v3 Authority Key Identifier:
                keyid:AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:0f:f0:2f:3b:fb:04:99:28:e0:84:7a:62:80:ca:29:1f:a4:
         bb:a2:64:e4:0f:fd:57:bc:94:68:30:a6:72:92:f1:45:00:f7:
         7b:55:f2:07:13:e9:38:0d:0f:80:78:34:ff:3c:d5:d2:c5:16:
         eb:d4:2d:63:2f:11:24:63:5e:b0:59:51:97:99:7c:78:4f:d2:
         88:65:c6:81:c9:34:98:29:b9:9f:e7:5c:af:b2:a3:85:fa:00:
         55:f0:bb:53:ef:18:f7:87:fe:7b:05:53:da:7c:0a:0a:da:99:
         32:e9:4d:dd:08:fe:c6:a3:1c:54:bf:68:55:34:57:dd:3f:e0:
         33:e8:1c:da:62:11:b4:c6:5e:5a:8f:03:9a:c3:32:d6:3f:41:
         4b:d7:7f:b0:11:56:53:58:86:26:e6:ac:b2:39:15:7d:4c:71:
         36:79:a3:ed:ec:99:bd:22:a2:d3:d7:47:ad:41:60:88:25:ff:
         ea:ec:05:95:dd:d9:c6:27:29:7d:32:1f:38:4d:7d:42:4d:f4:
         df:70:cc:c1:d0:3d:c0:0b:3f:db:07:38:27:fa:00:84:c4:11:
         2d:fa:46:c4:9d:c3:0c:19:07:e4:fc:7e:86:ce:16:3d:9c:d0:
         62:1c:6f:bb:84:ec:19:ec:6d:39:aa:58:b7:72:08:96:1d:e9:
         ad:38:1b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:58 2025 by rpki-client on console-fra.rpki-client.org