Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
File:                     ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft (raw, json)
Hash identifier:          X9jy/9FkbiUMuL2o5iLVDv6aheT6ox9h80K/RgO0JmE=
Subject key identifier:   53:0E:F4:EA:54:75:E1:BC:B1:1D:AE:C1:7A:97:E3:76:14:4A:61:6E
Authority key identifier: 22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0
Certificate issuer:       /CN=22dc6e4743ed5cc843032852896ef15f4892edb0
Certificate serial:       0194BA8472DDBDBD4018AEE8733B309D2E0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
Manifest number:          0A2D
Signing time:             Fri 31 Jan 2025 04:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:29 +0000
Files and hashes:         1: ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl (hash: IPaZlnO1doNbxa1x5xMVMsByA6PM9pAjQZuiGR8B3RY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:72:dd:bd:bd:40:18:ae:e8:73:3b:30:9d:2e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dc6e4743ed5cc843032852896ef15f4892edb0
        Validity
            Not Before: Jan 31 04:00:29 2025 GMT
            Not After : Feb  1 04:00:29 2025 GMT
        Subject: CN=530ef4ea5475e1bcb11daec17a97e376144a616e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:81:24:4f:af:01:1a:6b:92:69:4f:8d:4e:45:
                    4b:48:8e:88:e1:40:88:2d:01:70:71:8f:fd:f6:06:
                    ac:36:99:f2:02:85:6a:1a:9d:66:1b:64:c6:46:c2:
                    da:39:b8:9e:84:38:9c:5d:d3:b2:12:a4:96:5c:b4:
                    5e:13:6c:1e:0f:fa:75:70:92:1b:c2:60:fd:7b:92:
                    16:63:90:a0:42:62:10:4a:3e:f0:4a:25:91:43:88:
                    6e:b2:6f:d8:72:6d:df:9e:59:18:61:12:50:e8:fa:
                    09:6f:60:3e:47:8d:c8:01:04:9e:35:b2:97:bc:0f:
                    b7:89:07:79:70:4d:23:a7:c3:f1:a1:3e:ae:5b:df:
                    6f:d2:43:0d:fe:e3:7a:23:ba:70:fb:0c:0f:de:24:
                    cf:40:25:7e:fb:1f:d5:79:6f:2e:7c:bc:00:54:c0:
                    64:74:45:d2:45:60:17:df:58:07:95:b9:e6:14:9e:
                    80:21:fe:a7:3a:74:36:17:4c:00:4b:da:36:4b:84:
                    43:13:98:79:84:d4:c7:f0:81:7b:56:e1:2b:ad:00:
                    b2:3f:0b:53:61:c6:40:7b:90:ad:1d:a7:17:f7:09:
                    54:99:1b:df:21:d5:54:b8:b1:90:27:d7:c8:f4:71:
                    c4:7b:27:de:f4:fe:ec:48:52:38:9c:0e:3a:da:6e:
                    2d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0E:F4:EA:54:75:E1:BC:B1:1D:AE:C1:7A:97:E3:76:14:4A:61:6E
            X509v3 Authority Key Identifier:
                keyid:22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:73:7a:e9:e0:73:74:67:b3:06:f1:12:7a:fb:2f:5d:64:3c:
         c6:9f:85:c6:84:2d:3d:47:4e:f8:de:62:41:04:69:e5:ca:2e:
         40:a8:a4:7d:92:ba:0d:77:d6:94:e6:81:83:3a:4a:14:3c:af:
         85:ff:91:c9:e2:9b:38:0a:28:9d:bc:4b:1a:bf:12:26:bf:6d:
         54:55:39:ba:39:39:88:4b:92:04:f4:05:45:48:b3:35:b5:00:
         e0:c8:e4:85:fa:62:a7:4d:08:40:43:68:dd:fb:e1:1f:58:5a:
         77:04:4e:0e:ff:fc:3b:64:7f:a5:d8:7f:bc:13:88:f3:ba:a4:
         10:f6:1e:3b:f9:d7:7a:cc:64:2c:73:d4:24:c8:55:0e:06:e7:
         6f:18:e5:64:5b:e5:f9:e7:8d:df:20:26:c9:e7:ed:99:d4:db:
         04:e4:14:3b:5b:e8:17:ee:56:7a:68:8b:a4:a3:40:54:9a:15:
         f4:46:03:1f:78:87:62:38:1e:6b:2d:e6:ee:29:e1:fe:d7:85:
         e1:a3:41:9d:64:e6:4a:18:cd:80:90:72:55:4c:15:d2:20:4f:
         5b:f6:c9:2a:eb:6b:f7:e0:19:83:03:4d:7e:ef:f2:32:4b:4c:
         1e:7a:3e:c0:ad:00:94:01:dc:c0:7e:cf:66:ee:51:c0:89:2e:
         08:0a:a9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:30 2025 by rpki-client on console-fra.rpki-client.org