Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
File:                     O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft (raw, json)
Hash identifier:          buE18ZfDB7w+cy4i4X/LOMN6QkMmrDpzrWEUAJXG8K8=
Subject key identifier:   3A:1D:9C:B3:DD:AE:76:5E:A4:7D:02:4B:51:CC:11:59:F1:1D:68:02
Authority key identifier: 3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
Certificate issuer:       /CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
Certificate serial:       0194BAF226F81958DD07F746B2A5F0626D05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
Manifest number:          01DB
Signing time:             Fri 31 Jan 2025 06:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:19 +0000
Files and hashes:         1: O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl (hash: Gv2OLsQTs57OK9eq3SXQkWnP9uwAxpn9ntEGVn1BvOw=)
                          2: Xn4-KL-8Bh82Qe59kVWTId-xaSI.roa (hash: 1/y3ci5YILrRiLZoHOXKAtyVkEFrCH3iPpKqyxJyCYI=)
                          3: YYLnpiOtsdNraYy3ykCP3me9_d0.roa (hash: Z2+aG3QOGufBHYy7yM6ZHwElru6zT5L16YKUTxlePLo=)
                          4: fE9SL4lgGLEucOlyvk7fngTw64k.roa (hash: TGIMqMFtt0hwRVhPYaYtgV4OglJO1aoAg/NqO7iMJrc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:26:f8:19:58:dd:07:f7:46:b2:a5:f0:62:6d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
        Validity
            Not Before: Jan 31 06:00:19 2025 GMT
            Not After : Feb  1 06:00:19 2025 GMT
        Subject: CN=3a1d9cb3ddae765ea47d024b51cc1159f11d6802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:70:9f:34:2e:9f:5c:e1:a2:29:5a:b5:ed:69:
                    ab:9f:d9:bf:5b:da:fa:c1:8c:d3:dc:cc:38:ee:bc:
                    94:db:cf:71:af:64:22:9a:cf:47:61:bd:cc:13:53:
                    48:4a:90:97:8e:f8:43:42:6c:ff:8b:c8:c9:17:ba:
                    42:22:a5:bf:9d:32:99:fd:0e:cc:a3:97:dd:e7:10:
                    31:18:b3:3d:6e:63:eb:17:0c:b1:88:77:ec:0f:11:
                    8d:fc:1e:2f:4e:26:85:c8:c6:1a:5b:db:e8:d6:9b:
                    55:22:07:9f:10:8c:ab:d6:62:22:4f:d2:68:89:94:
                    f2:3d:34:d6:ba:92:09:cc:df:aa:2f:f1:41:18:64:
                    6e:20:41:c7:9f:50:22:3f:05:91:59:fe:2d:2f:66:
                    94:5b:4f:f3:6b:7c:e1:0c:f9:72:94:5b:30:c2:fc:
                    3d:3c:36:7b:46:fe:a5:9c:4b:35:e1:34:01:e3:5d:
                    fe:03:aa:fd:fe:f7:bf:9f:6d:61:f4:66:36:82:20:
                    75:94:5d:83:ce:67:3f:f3:01:9d:c1:b4:18:d8:d6:
                    94:72:bd:3e:6e:19:d7:ec:a6:fc:a1:9e:eb:05:18:
                    a7:d0:54:72:b6:6f:4f:d8:99:d1:01:9e:f9:f6:22:
                    99:f1:ec:20:a0:2e:2b:ad:24:08:a7:20:16:fc:4a:
                    1b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1D:9C:B3:DD:AE:76:5E:A4:7D:02:4B:51:CC:11:59:F1:1D:68:02
            X509v3 Authority Key Identifier:
                keyid:3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:de:40:37:c8:48:85:90:9e:ca:74:ab:2d:72:b6:57:2c:33:
         43:ee:98:e6:fe:9e:28:21:e2:17:02:0d:f6:ea:40:b1:63:cc:
         f7:aa:fa:6d:16:ea:a9:01:ca:77:f0:be:3c:42:a9:54:30:51:
         40:da:10:64:93:8a:19:bd:d0:25:63:4c:f9:3a:c0:8b:eb:c2:
         17:ce:18:bd:8a:73:81:f2:58:c7:9c:75:1a:c3:e3:9b:d4:5b:
         c5:55:63:a6:03:2f:57:d1:36:4a:84:0a:9f:02:96:bd:b8:79:
         33:6b:5a:2a:19:e7:14:4c:1a:01:19:9e:a8:bb:24:f3:d2:a8:
         1d:14:4d:cd:28:ef:66:5a:57:66:31:27:ff:a7:30:54:dc:88:
         d0:7b:bf:92:e2:21:0d:15:ba:e7:10:c1:87:a9:5a:ee:c5:60:
         4d:e9:db:18:de:6a:29:30:c3:4f:5b:43:2b:74:cd:73:43:9b:
         8d:90:c5:65:ce:f7:5e:d4:80:3d:e9:86:a2:d2:a8:7d:88:c8:
         83:bb:1c:13:98:16:25:aa:b9:5b:af:8c:67:24:28:a4:2e:ff:
         91:d4:7b:16:dd:b4:15:af:32:85:df:a2:ad:0e:01:06:ba:50:
         10:4d:b3:8f:cd:87:80:8a:ba:83:bc:67:38:8f:db:ce:01:0f:
         2b:ec:28:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:10 2025 by rpki-client on console-fra.rpki-client.org