Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.mft
File:                     cOWgYTFWcLW_JuJ3ySw4lNcs08U.mft (raw, json)
Hash identifier:          CPASFnLgtRfpVM5zpyQMbRmcTq+Tp/0ykX+36uo6hA0=
Subject key identifier:   51:B4:93:1E:C2:0A:B9:98:8F:54:FA:FE:99:37:ED:6D:89:B1:34:0A
Authority key identifier: 70:E5:A0:61:31:56:70:B5:BF:26:E2:77:C9:2C:38:94:D7:2C:D3:C5
Certificate issuer:       /CN=70e5a061315670b5bf26e277c92c3894d72cd3c5
Certificate serial:       0194BB292D156331E129DDACD0E0E397F48C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOWgYTFWcLW_JuJ3ySw4lNcs08U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.mft
Manifest number:          01D3
Signing time:             Fri 31 Jan 2025 07:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:25 +0000
Files and hashes:         1: cOWgYTFWcLW_JuJ3ySw4lNcs08U.crl (hash: RopfTReZiVczRlwY+4wPP/Bp17m5T45GuebxznEXL6Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cOWgYTFWcLW_JuJ3ySw4lNcs08U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:2d:15:63:31:e1:29:dd:ac:d0:e0:e3:97:f4:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e5a061315670b5bf26e277c92c3894d72cd3c5
        Validity
            Not Before: Jan 31 07:00:25 2025 GMT
            Not After : Feb  1 07:00:25 2025 GMT
        Subject: CN=51b4931ec20ab9988f54fafe9937ed6d89b1340a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:18:0f:45:9c:4f:56:9f:03:88:b2:5b:4e:b1:
                    04:61:3e:8a:00:29:e3:a5:b3:98:cf:40:c8:53:50:
                    ea:be:37:bb:8d:f8:22:8a:ac:2b:6e:fd:fd:56:31:
                    02:61:61:fb:49:46:6d:36:5a:41:92:ce:73:ff:97:
                    eb:55:1c:75:63:a8:cb:56:f9:ca:79:a5:e9:64:fc:
                    13:21:5b:ce:51:15:60:f3:d0:4c:fd:07:5b:b2:d5:
                    88:38:f3:d4:59:d6:2a:17:df:4e:9a:86:57:db:1d:
                    c6:6b:9b:00:89:69:74:37:ae:56:1f:42:a9:39:fe:
                    bb:aa:af:9b:56:e7:68:d0:cb:42:e1:ee:59:fe:f1:
                    53:52:9f:34:b0:69:1c:8b:31:a7:da:29:05:ed:cc:
                    b1:8a:18:66:fe:1f:10:d3:a5:59:07:6d:1b:c0:03:
                    62:0e:7b:c5:5d:42:23:51:51:20:55:70:3b:6d:5f:
                    5d:fb:93:9c:1f:de:b1:ae:b7:18:5f:71:3d:c2:50:
                    13:53:66:fc:a2:65:c9:78:5c:4a:ed:41:7c:9e:b6:
                    00:59:b6:fc:da:eb:05:6e:1e:15:0f:80:78:02:c7:
                    21:e6:f8:e6:22:bd:30:cc:cd:99:17:36:43:1a:4e:
                    1b:80:43:38:24:9c:88:e4:49:5e:a3:ae:0b:c3:ec:
                    4a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B4:93:1E:C2:0A:B9:98:8F:54:FA:FE:99:37:ED:6D:89:B1:34:0A
            X509v3 Authority Key Identifier:
                keyid:70:E5:A0:61:31:56:70:B5:BF:26:E2:77:C9:2C:38:94:D7:2C:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWgYTFWcLW_JuJ3ySw4lNcs08U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:40:a1:f8:27:ef:6a:ce:b8:7a:bc:80:81:0d:aa:45:a4:24:
         90:ed:1e:97:95:d0:00:19:8b:71:21:a8:e6:2f:84:e1:c2:e4:
         ff:e6:84:4b:bd:87:ce:0d:a8:61:6f:84:00:60:c2:4a:f8:37:
         47:84:67:7a:6c:e6:78:93:2d:51:fd:4f:f3:77:e8:6b:63:e2:
         e4:b8:54:41:87:ef:f6:f1:7b:03:31:74:cc:89:fe:c5:d1:9f:
         51:fd:71:55:44:bd:85:78:0e:e3:bb:6e:9e:4b:ed:97:c9:89:
         78:31:38:ec:ad:8a:1f:0e:3b:00:62:00:4c:f8:48:14:3d:34:
         f0:17:96:fc:fc:c7:c8:a5:fa:1d:d5:62:32:b8:90:cd:84:4f:
         27:df:e0:25:6a:f7:92:30:bc:68:88:dc:cc:d2:86:05:59:69:
         2e:bd:19:73:5b:8e:3c:4a:dc:2e:4c:93:03:81:46:f7:aa:8e:
         e3:ec:97:81:97:20:23:75:db:40:b8:2b:db:97:c4:02:57:ec:
         77:13:ab:bc:81:59:c1:7a:f6:89:37:a1:5c:e2:9b:83:5a:42:
         37:09:9d:a8:39:42:24:e7:d2:e7:7d:ac:46:d3:ec:c1:b1:2b:
         96:27:a5:a2:b7:43:46:38:e6:e5:ce:15:ac:f2:80:df:01:f3:
         9f:48:bc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:15 2025 by rpki-client on console-fra.rpki-client.org