Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
File:                     tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft (raw, json)
Hash identifier:          1LnIaRdXE1Kr6lJZ6FJlikpRmGLp0f9N9smM4jV4xfg=
Subject key identifier:   1B:C7:23:EA:11:62:0E:1C:81:BC:E3:2C:31:80:29:70:D8:0C:6C:B9
Authority key identifier: B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE
Certificate issuer:       /CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
Certificate serial:       0194BABB96FFF7214FEA683858E774FE65BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 05:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:43 +0000
Files and hashes:         1: 6vMVm2zjHnS6jWGvj_JPBPoIejQ.roa (hash: WRnwpfl8kuTVj7apaEiYFn6tm3l6ZkpWo7ENQmbJBXw=)
                          2: tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl (hash: QKu1rQXp2oZoy4bISOnTIk/HapuKnO71Nk95lwnjfy0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:96:ff:f7:21:4f:ea:68:38:58:e7:74:fe:65:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
        Validity
            Not Before: Jan 31 05:00:43 2025 GMT
            Not After : Feb  1 05:00:43 2025 GMT
        Subject: CN=1bc723ea11620e1c81bce32c31802970d80c6cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e0:23:98:b7:61:b0:c3:0f:3a:07:ea:a5:d1:
                    8c:e3:1a:67:c4:ba:c7:27:b1:e1:82:75:11:35:43:
                    dc:12:d0:bb:6a:bd:b5:74:9a:23:ae:a3:cd:da:c4:
                    27:7b:4c:0d:ad:0c:a9:0c:17:99:4d:00:4a:18:00:
                    06:6d:d3:8a:3a:cc:c5:e1:bd:a8:d3:6d:33:fe:10:
                    88:67:eb:e2:33:58:c6:43:cf:b0:e1:a3:18:d7:4d:
                    cc:4e:bd:22:74:1e:19:7c:e1:c0:6d:39:a3:87:65:
                    5c:dd:01:4b:ef:62:cf:b0:53:11:7b:2e:9f:75:8f:
                    62:5a:db:ed:95:61:7f:b7:40:33:99:db:20:d1:2e:
                    26:d1:e4:5a:2d:06:9b:26:4e:e1:25:f3:fc:e9:ce:
                    32:61:55:d6:43:6c:3d:3f:47:66:ef:09:60:26:e8:
                    52:c4:49:fe:74:fc:09:be:a5:b7:90:57:3b:50:23:
                    da:3d:2d:e4:8e:89:75:23:56:43:d2:47:c0:a8:bf:
                    0b:1e:50:11:ce:ff:f7:2a:cd:96:b2:d0:1c:49:fd:
                    b9:80:05:07:43:f9:77:05:96:9c:29:b1:9c:a7:8f:
                    d1:5e:60:3d:12:dd:58:2f:73:a4:86:43:8b:5b:d3:
                    34:8b:1b:a4:45:c3:0c:eb:15:2f:b5:86:c8:01:21:
                    82:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C7:23:EA:11:62:0E:1C:81:BC:E3:2C:31:80:29:70:D8:0C:6C:B9
            X509v3 Authority Key Identifier:
                keyid:B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:96:14:9c:2a:42:05:98:f3:d3:b5:ff:8b:93:5d:c3:9a:26:
         ec:2d:77:69:ad:ee:9d:a0:ce:02:b9:a6:40:e3:0d:88:02:bc:
         76:18:ba:96:25:b3:47:89:f9:66:21:54:1e:e2:1f:98:0b:f8:
         24:ae:12:d0:43:d4:86:10:0e:e2:4a:58:f4:68:b3:74:bc:69:
         aa:b1:22:12:19:6c:8f:fe:e9:f7:12:de:85:76:5f:ba:c4:9e:
         c3:93:3a:5e:eb:a3:16:73:53:f4:29:6a:91:d8:c1:ae:99:af:
         ba:41:48:37:88:14:bf:90:3d:30:7e:12:a4:de:06:40:6f:92:
         a0:7d:03:46:dc:53:64:04:d3:f8:a3:c3:ea:28:91:d7:57:4e:
         06:4c:2e:f4:c5:c3:80:16:ee:30:64:e5:8b:8e:0b:a6:2a:b6:
         66:0f:a4:cb:ef:09:41:cc:53:45:44:3f:42:f5:b6:95:83:4d:
         f9:ac:83:98:41:f5:83:26:1e:4a:ce:f3:51:08:62:ad:94:d9:
         70:17:de:34:19:5f:8f:32:53:63:2c:f4:e3:a8:fe:71:ad:47:
         80:ef:8d:ca:bd:af:bf:a8:23:c2:65:cc:d8:89:38:51:bf:02:
         cc:76:0c:2d:42:f1:42:67:a6:ae:ad:d9:e3:3e:0b:5c:ef:a4:
         d2:cd:f3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:30 2025 by rpki-client on console-fra.rpki-client.org