Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
File:                     s48zUI2SUxNJ3z0L6bVF_I4fXms.mft (raw, json)
Hash identifier:          wVG9FxeP53amA79kYJyopKldYJxh0s66S85En8t5x0U=
Subject key identifier:   92:AE:EA:62:62:4D:A9:91:CD:90:B4:42:75:DC:B0:D1:63:FE:E9:33
Authority key identifier: B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
Certificate issuer:       /CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Certificate serial:       0194BA8449062CE8393809A6A40B501BEDDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
Manifest number:          0876
Signing time:             Fri 31 Jan 2025 04:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:19 +0000
Files and hashes:         1: s48zUI2SUxNJ3z0L6bVF_I4fXms.crl (hash: feBoaQF9QfgjC/h0xgZs/Jxn4VIaqjomeuJDwsHjqes=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:49:06:2c:e8:39:38:09:a6:a4:0b:50:1b:ed:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
        Validity
            Not Before: Jan 31 04:00:19 2025 GMT
            Not After : Feb  1 04:00:19 2025 GMT
        Subject: CN=92aeea62624da991cd90b44275dcb0d163fee933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0a:fe:43:42:d5:2d:97:30:fa:17:df:cc:e2:
                    7a:af:a7:95:6a:d3:18:ac:41:f3:a7:14:b2:25:58:
                    0d:b9:b5:22:44:04:e0:45:52:ff:e5:77:41:7d:b8:
                    82:41:50:de:eb:d0:9a:d0:d2:66:35:7e:61:87:cd:
                    3d:19:92:7d:64:fa:5c:ab:49:c7:8d:a3:9c:d5:6f:
                    9e:62:5f:f8:bf:b3:73:99:99:fa:34:41:63:c4:a8:
                    77:53:e7:78:78:e1:df:49:0f:46:a5:97:28:a1:81:
                    27:b2:06:73:bb:ea:a4:9d:59:8e:1a:60:ae:f0:44:
                    84:40:1e:03:28:59:18:e9:af:76:2f:90:41:31:2d:
                    0f:ba:3e:d7:53:4e:16:52:06:8a:46:ee:b7:c0:a9:
                    c0:eb:c9:0e:17:8e:68:39:1b:1a:fd:64:9e:96:7b:
                    ef:c2:43:8f:bd:8d:93:93:6c:48:5e:0b:45:63:24:
                    1d:e3:d2:dd:fc:5d:24:2f:c9:26:df:0a:b2:13:d1:
                    80:d7:a4:0c:85:3c:ea:bd:d5:f4:88:f9:48:03:06:
                    3e:93:9a:2a:0a:58:24:c3:cd:27:1f:24:17:01:ee:
                    0b:6f:e7:f6:76:ee:ce:c4:75:ad:3c:da:c8:6d:7c:
                    af:63:b2:ca:df:a4:cf:96:ee:bf:3d:a4:6b:1f:85:
                    68:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AE:EA:62:62:4D:A9:91:CD:90:B4:42:75:DC:B0:D1:63:FE:E9:33
            X509v3 Authority Key Identifier:
                keyid:B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c9:08:f4:ff:6b:b6:a9:c1:a6:67:a1:4c:c1:44:86:02:e4:
         c4:52:8e:c6:62:62:6c:b8:8f:f1:c1:69:31:07:d8:98:3e:58:
         6a:16:87:cd:bb:8d:e6:0f:04:8d:b6:ac:07:57:a8:ce:9c:f2:
         6f:91:c7:0b:59:f0:0d:8f:16:ea:50:93:8a:b6:38:ab:bc:7b:
         64:39:6f:94:61:18:ec:97:ae:cf:08:36:d2:76:7a:ba:3c:e2:
         1b:82:41:aa:a8:38:ee:1a:26:ac:98:b3:a1:0e:12:8c:8e:e1:
         b9:f6:22:b2:e8:a9:a2:73:40:48:25:b9:ee:bb:7e:05:c1:e1:
         34:a4:dd:b9:d1:f6:4a:7e:b4:59:a0:79:9f:02:e4:d9:6e:0d:
         cf:1f:28:ec:36:5b:ad:f8:ef:9a:54:97:84:40:15:e5:89:94:
         1a:ac:c1:f6:b3:f3:c9:b7:d9:61:4a:9d:d1:31:34:24:7a:ac:
         69:49:9e:cc:5e:23:63:65:fb:1d:2b:4d:55:22:12:03:92:ec:
         42:47:2d:03:5f:67:1b:3a:81:0a:39:26:ea:78:60:95:f9:fe:
         08:a5:be:5d:9d:84:9f:9e:e7:47:75:a3:a5:a5:7a:8e:2f:dd:
         9f:de:cd:bd:17:58:4b:a9:b0:0d:f3:13:d6:ba:a2:75:bc:ab:
         6a:40:68:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:33 2025 by rpki-client on console-fra.rpki-client.org