Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
File:                     P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft (raw, json)
Hash identifier:          bj0udOI0yfMhg33urgmmDPILgqZeg4JIG+lCb8NEyyQ=
Subject key identifier:   80:FA:58:90:6F:DA:A8:E1:4C:C5:9D:2C:B2:0B:D9:FC:7B:76:A3:31
Authority key identifier: 3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8
Certificate issuer:       /CN=3f8138fea066d6f504436001cc9d7f339db734c8
Certificate serial:       0194BB96DA6BE92C376E755A316FBA914BD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
Manifest number:          AC
Signing time:             Fri 31 Jan 2025 09:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:13 +0000
Files and hashes:         1: P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl (hash: 3TlFiyWOYeYcaw3igQKmqIYB2bNhjTK692MwSreRJt4=)
                          2: a7YNlS63NsZTTW2uGzFrnfKok9w.roa (hash: A6Vj/t1HktktvRKs1GT2mBgPnzQ8ZrkihcAERAUHOMs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:96:da:6b:e9:2c:37:6e:75:5a:31:6f:ba:91:4b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8138fea066d6f504436001cc9d7f339db734c8
        Validity
            Not Before: Jan 31 09:00:13 2025 GMT
            Not After : Feb  1 09:00:13 2025 GMT
        Subject: CN=80fa58906fdaa8e14cc59d2cb20bd9fc7b76a331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:03:16:29:3d:fe:27:ef:47:22:ae:9b:0c:
                    b5:20:68:75:48:5d:f2:5c:c5:8b:ff:0c:8b:c8:5f:
                    25:40:06:13:20:68:2a:ce:8d:30:31:f8:81:57:d5:
                    b7:33:14:11:ff:55:9e:cc:2d:f9:3f:3e:a8:32:d9:
                    b0:2f:07:dc:5d:a0:ea:01:51:42:e5:30:d1:f5:dd:
                    f1:92:ab:62:01:66:63:a3:36:cb:e0:8e:f7:7f:c5:
                    26:20:6a:49:8f:61:cc:10:5b:aa:25:d9:b8:2b:33:
                    ad:e6:bf:c2:39:52:7a:df:c1:1f:9f:f9:31:54:6a:
                    bd:df:aa:d1:9e:96:80:8d:7c:b9:97:8e:14:c0:62:
                    0e:ee:d3:cf:05:d8:3d:10:d8:7d:88:df:ac:52:da:
                    67:da:b8:4a:88:35:c9:90:9f:52:d6:0a:06:d4:a2:
                    a4:fa:ed:56:47:3b:16:aa:3a:24:e6:5b:27:0e:1e:
                    81:90:05:6b:35:d1:93:3d:cb:a3:6d:ef:d0:5e:1c:
                    3f:23:bf:5d:e8:f4:b5:5e:20:a7:87:45:c4:32:0f:
                    a6:a0:a1:6c:14:e8:9c:ac:36:99:ad:57:3c:a9:ca:
                    2b:4e:ee:fc:f0:68:67:28:d9:7c:c9:2c:be:08:e5:
                    94:87:92:a4:bd:93:57:af:a6:62:71:e0:23:89:7a:
                    40:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FA:58:90:6F:DA:A8:E1:4C:C5:9D:2C:B2:0B:D9:FC:7B:76:A3:31
            X509v3 Authority Key Identifier:
                keyid:3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:55:e8:b0:86:1a:b6:5d:77:78:8e:2a:48:38:78:11:00:41:
         d1:d4:9b:05:02:7a:c2:f4:4f:f4:47:ee:02:c8:ee:80:7b:5c:
         54:b3:8f:b1:2a:b4:23:2f:3d:94:78:47:4b:13:a2:3a:f0:14:
         c2:7e:8a:17:97:cd:6f:f1:62:c3:01:5d:13:f9:af:b9:28:73:
         5d:9a:6f:43:d1:7f:0a:47:b7:f0:23:33:4d:bd:40:d7:00:a1:
         2d:68:04:ef:27:4f:9a:5b:a2:64:76:8d:0e:a4:a6:8e:41:f0:
         f9:6f:5f:9e:2d:8b:22:c4:83:dc:ac:0d:95:e0:01:84:5b:8d:
         19:d1:59:03:8a:48:b1:35:b9:17:42:a7:bb:90:da:ed:d3:99:
         c9:bb:87:f2:75:8a:09:c5:a0:ad:c6:15:93:1b:94:50:96:b9:
         cc:f5:e9:74:94:50:72:e1:df:b6:93:d2:ff:af:8b:d0:bc:03:
         39:70:97:0e:e3:a4:9c:03:60:35:99:95:c6:8a:76:bd:de:25:
         a3:a0:a8:4e:e6:65:f4:a8:2c:e2:49:91:bc:f5:7f:4f:9f:30:
         d2:b6:96:ed:74:22:97:e2:15:32:ab:db:ec:e5:fd:c8:8f:bd:
         3a:23:a9:15:9a:16:ee:90:48:55:be:96:27:8e:3a:a9:aa:d4:
         0c:30:7c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:17 2025 by rpki-client on console-fra.rpki-client.org