Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
File:                     0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft (raw, json)
Hash identifier:          bxpiwoJxSdHy0InC9mhQlJQvpFJ83SpZoCe60VCmqxM=
Subject key identifier:   51:C0:DD:CB:17:F0:44:A1:63:8F:39:42:24:01:04:44:C3:39:89:DF
Authority key identifier: D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
Certificate issuer:       /CN=d2c17db099bd419eba552a37704deeed3b2e303b
Certificate serial:       0194BAF288E5B06DE0EF19A250B3FA33A756
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
Manifest number:          0216
Signing time:             Fri 31 Jan 2025 06:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:44 +0000
Files and hashes:         1: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl (hash: b6xTp1oVtipLO6feL8U3/2h4j5E5XTk94fTfkemgZ50=)
                          2: yAFTVipgzUq2JehlyXdlgvk4lGA.roa (hash: 4JLBxrRXaq9Ej5PAfStMaFMw5Cw8Ln+aMWKMUmNE/iE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:88:e5:b0:6d:e0:ef:19:a2:50:b3:fa:33:a7:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c17db099bd419eba552a37704deeed3b2e303b
        Validity
            Not Before: Jan 31 06:00:44 2025 GMT
            Not After : Feb  1 06:00:44 2025 GMT
        Subject: CN=51c0ddcb17f044a1638f394224010444c33989df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bf:66:d8:63:e7:05:4c:65:c2:21:07:17:86:
                    0d:a2:90:58:98:86:10:01:a2:6e:e9:68:0a:60:1b:
                    39:2a:fb:2a:0e:56:96:ae:e4:59:55:74:c0:3e:76:
                    fc:65:a5:f4:c6:23:5e:0e:f8:29:81:78:67:2b:6a:
                    c6:a8:b5:dc:45:4a:97:c0:34:60:d3:ce:70:b9:0c:
                    e9:95:71:5c:05:15:6e:08:1e:a6:27:d2:39:c4:36:
                    75:93:5e:d8:78:a6:0b:18:71:b9:6c:1e:95:9b:d3:
                    30:31:24:c1:6e:43:14:69:94:1b:fc:a6:bb:da:7c:
                    99:f9:32:69:6f:d6:71:32:b9:68:93:6d:6f:34:42:
                    0b:8c:de:9a:f1:69:8c:c7:65:67:53:53:55:0b:75:
                    ff:d0:78:fc:7d:e2:85:fe:3a:14:00:e7:3c:a7:00:
                    69:bc:ae:d1:37:24:3e:24:80:87:6e:96:79:36:96:
                    11:2d:ab:2e:2f:a7:99:75:78:ab:2e:a9:3b:cf:cb:
                    7b:33:74:19:42:cb:72:a5:b3:76:0a:de:ae:48:94:
                    96:5f:04:30:4d:b8:2c:f5:e9:78:36:17:ac:4c:c0:
                    cf:5b:39:cf:10:7c:21:08:46:7d:9f:52:c1:c7:85:
                    31:1d:65:27:12:37:4f:07:ce:14:c2:f6:51:61:58:
                    92:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C0:DD:CB:17:F0:44:A1:63:8F:39:42:24:01:04:44:C3:39:89:DF
            X509v3 Authority Key Identifier:
                keyid:D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:2f:22:a4:d7:f5:3c:7f:39:43:72:8d:34:76:bd:99:8c:c2:
         ff:37:99:c0:8b:22:32:5f:d9:54:ee:e0:b2:1c:f5:30:d4:b0:
         41:88:dc:9c:d5:a8:0d:36:c3:29:f5:fc:9c:f5:ad:e3:59:17:
         3c:62:d8:21:e6:36:99:0d:b7:47:42:60:3a:05:75:ca:61:d4:
         97:b3:18:2d:14:6d:b1:59:79:5f:cb:49:8d:c7:ce:32:c6:45:
         3a:4e:40:73:5f:10:28:63:cf:5d:70:b6:e1:73:26:06:f1:bb:
         7a:6d:df:e7:f6:4a:ef:0f:4d:9b:3b:c6:40:26:3b:9d:06:fe:
         44:45:cd:a3:17:d0:1f:76:80:a1:83:16:2b:ab:af:8b:80:15:
         ce:9b:ce:09:39:02:ad:db:aa:42:d5:ed:d3:aa:5f:67:76:ec:
         0e:65:b4:0c:4a:e1:eb:cf:36:e6:3a:2a:ed:a4:51:8e:01:d9:
         f3:02:bb:98:21:cf:0d:11:a0:92:68:c2:62:23:32:1a:82:d3:
         3a:d8:f9:58:4d:90:7c:35:bc:e9:18:32:b7:b2:37:ce:5b:2a:
         74:24:95:c9:91:55:14:7c:3a:a4:83:0a:f9:45:74:3d:d2:21:
         eb:63:79:80:c4:13:b1:1f:c1:83:9c:88:85:51:79:25:8b:50:
         fa:1f:7d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:33 2025 by rpki-client on console-fra.rpki-client.org