
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
File:                     VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft (raw, json)
Hash identifier:          tFvcePnkadmafvnxbKN9bQY1ANddgl0NXIhAwiWhHaI=
Subject key identifier:   83:97:1C:22:4C:20:D6:CB:6C:6E:65:CE:D0:89:77:33:30:BB:5A:6B
Authority key identifier: 54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
Certificate issuer:       /CN=547ce483c8241d7a4e6625977798035b638586c6
Certificate serial:       0194BABB34C4AB3FF1B8EF85B3675221E44E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
Manifest number:          0603
Signing time:             Fri 31 Jan 2025 05:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:18 +0000
Files and hashes:         1: VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl (hash: mwBHL3Awkcwdnbsiu0Q4wwSdrt4CvSvKWai6NVt/asg=)
                          2: b9l5sinWdqskbev4cuOxwSEYd68.roa (hash: qnq/UFSTcLvSI/5FTEwaMtiCFn9CDv5K60YTyMFcpss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:18 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:34:c4:ab:3f:f1:b8:ef:85:b3:67:52:21:e4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547ce483c8241d7a4e6625977798035b638586c6
        Validity
            Not Before: Jan 31 05:00:18 2025 GMT
            Not After : Feb  1 05:00:18 2025 GMT
        Subject: CN=83971c224c20d6cb6c6e65ced089773330bb5a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cb:bd:32:92:9f:f7:bd:0c:5f:40:3e:50:c7:
                    3d:77:54:89:76:ce:11:46:c3:cc:a7:37:43:14:93:
                    91:2c:2f:db:d8:6b:e2:b6:aa:ac:8c:9e:cf:1f:3a:
                    58:7d:94:7a:4f:06:ca:3e:93:bd:49:ee:85:a2:26:
                    c8:0e:7b:b3:d4:e8:2b:ed:6f:1a:bc:db:78:db:0b:
                    40:9b:b2:e9:47:01:c4:49:ed:1d:8f:76:8f:c9:8e:
                    5d:36:0e:4b:bd:f0:f2:e3:5f:b2:ac:cb:fa:d3:99:
                    4a:95:f4:e6:e7:ab:f2:a7:e9:db:cc:16:d5:a3:fa:
                    a3:79:db:c2:4e:6a:cd:d1:a0:8f:0a:84:7f:0b:01:
                    32:15:39:5e:cc:f9:bd:4c:0a:80:16:02:9f:ac:f3:
                    f7:0f:0a:b0:cf:37:3f:4d:2d:a6:51:43:09:67:5b:
                    0f:f0:7c:4d:14:33:28:df:ca:98:03:24:9d:ac:2a:
                    a9:59:d2:10:f2:13:16:cf:c8:e9:03:37:f6:de:da:
                    5b:ee:08:4e:2c:46:53:04:c4:28:69:b6:71:ba:6c:
                    ea:de:7a:bb:91:8a:22:4c:67:1c:cc:65:8f:60:36:
                    8a:ef:2a:f1:a9:7e:6e:27:1e:a8:dd:62:98:36:70:
                    ad:c9:94:20:1c:c2:d4:1b:8a:5e:bf:fc:26:16:48:
                    b2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:97:1C:22:4C:20:D6:CB:6C:6E:65:CE:D0:89:77:33:30:BB:5A:6B
            X509v3 Authority Key Identifier:
                keyid:54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         db:c4:9a:06:fd:3a:86:45:b2:d2:a1:f5:66:ee:a1:05:2e:b8:
         1b:5a:9e:cc:1c:f4:db:63:23:77:f4:17:31:bd:65:91:6c:ef:
         9c:59:31:22:69:91:9e:62:32:16:84:07:d2:2f:c5:3f:17:31:
         22:e8:70:94:3d:31:28:5f:b2:67:ff:c7:60:35:bf:91:7c:b2:
         0d:3d:fc:ae:11:30:46:e4:7b:31:aa:97:c9:27:a9:b3:b4:d0:
         52:9f:6a:42:dc:4e:c7:94:5b:eb:3c:a2:54:31:cd:ed:9d:05:
         cd:87:97:e7:8b:5c:cc:91:08:79:88:a3:60:b0:ba:f6:25:6b:
         b4:c3:bd:50:91:f1:44:39:5a:57:92:e2:62:03:10:d9:21:aa:
         df:f5:1c:76:4c:34:2a:75:58:2f:74:9c:65:04:e6:ed:50:25:
         d6:c1:28:11:8e:c4:67:e9:1f:cc:3f:bd:f6:6a:33:e1:28:35:
         a1:d4:da:0a:2e:06:f0:81:da:f1:6c:18:56:8c:60:ac:4f:cb:
         a0:b9:dc:9f:53:60:78:1f:d3:1a:6b:42:3a:33:08:99:78:41:
         0c:4a:66:5b:99:ef:2e:5c:2e:ab:f6:34:38:e5:24:30:c4:ea:
         e8:31:83:37:03:c4:47:0d:74:ed:ce:5d:23:a1:73:cf:39:a4:
         6e:28:ac:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:20 2025 by rpki-client on console-fra.rpki-client.org