Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
File:                     _9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft (raw, json)
Hash identifier:          CpoO4zDqnfirN1O2NwXnioOMBKxKa6IXCCHM3PAsMKQ=
Subject key identifier:   73:DA:72:9D:51:25:9E:E8:EB:F1:8C:6D:2E:14:67:97:66:7E:EF:64
Authority key identifier: FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94
Certificate issuer:       /CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
Certificate serial:       0194BABB9B01E85E7ACCABC357272B914054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
Manifest number:          13BA
Signing time:             Fri 31 Jan 2025 05:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:44 +0000
Files and hashes:         1: GDYfoKKG3yFaIjJkJ3YCAK8hLqA.roa (hash: erb5aM2h7W5I1XqnWYG/lDx7/8zDPLRd0RbZw0dE/qs=)
                          2: _9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl (hash: tTCGb6/IoVZYbRcrnfDBMKfUhx5xEKW9U12INFX5sBA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:9b:01:e8:5e:7a:cc:ab:c3:57:27:2b:91:40:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
        Validity
            Not Before: Jan 31 05:00:44 2025 GMT
            Not After : Feb  1 05:00:44 2025 GMT
        Subject: CN=73da729d51259ee8ebf18c6d2e146797667eef64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fe:f0:ce:be:d7:50:7a:45:98:06:da:74:97:
                    3f:8c:40:94:44:81:02:33:a4:bc:37:3c:f2:69:16:
                    c5:10:c3:bd:d7:c9:3a:8e:64:cd:9c:90:2a:72:fa:
                    40:b6:9b:28:da:e0:c8:02:95:da:46:a3:97:e8:76:
                    04:5c:88:53:c2:f2:9d:55:c5:b9:79:d9:0f:b1:d3:
                    bc:ba:5d:7e:28:e8:d3:fa:f3:97:cf:aa:c6:58:f5:
                    0a:a2:53:ee:21:97:a4:a7:ad:d2:de:d1:f0:d1:39:
                    0a:50:4a:36:5d:92:9f:77:0d:12:ea:31:da:35:ed:
                    24:26:8e:98:b9:df:8a:16:b2:34:9d:83:d9:53:3e:
                    7b:e7:52:b7:9e:1a:86:ba:ce:0a:cc:16:e4:57:23:
                    25:57:4a:18:7d:5b:2a:3e:40:2f:a1:9c:ed:20:6f:
                    02:0d:4f:4a:f4:89:3e:18:fa:7d:5b:27:94:ab:c8:
                    93:46:fb:15:00:e5:84:a8:00:67:62:46:81:66:40:
                    9e:75:a5:33:2e:c6:28:d1:ba:31:e0:ef:81:ce:2a:
                    f9:70:17:95:f0:d4:0b:48:36:9f:dd:ed:38:1c:0b:
                    da:77:ed:83:ee:8d:81:17:4e:d5:5c:41:a0:3d:e6:
                    61:af:5e:35:4e:4c:37:57:eb:b0:ba:cd:69:b4:59:
                    b3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DA:72:9D:51:25:9E:E8:EB:F1:8C:6D:2E:14:67:97:66:7E:EF:64
            X509v3 Authority Key Identifier:
                keyid:FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:2d:9b:06:cb:1c:06:83:9f:1a:04:24:5a:3b:da:68:61:40:
         d1:78:57:ff:24:cb:02:7b:e8:58:bc:b8:8f:43:50:3d:d1:eb:
         71:8d:de:eb:d4:13:0b:70:1d:e6:c3:dd:b4:ed:8b:81:93:39:
         c5:77:ac:b2:e8:8e:bf:e8:1c:e8:e8:39:fd:c1:c4:7a:3c:0f:
         6a:46:d9:3f:e3:76:a3:cd:33:b1:86:e3:09:13:af:88:69:52:
         1f:ce:02:44:1b:a1:ea:45:f4:68:7b:7a:ec:4f:9e:0f:0c:26:
         62:5b:7d:b8:45:19:79:4e:b4:54:2c:7d:21:23:11:2d:fb:f5:
         42:de:28:36:a6:96:d8:34:27:6b:59:11:db:01:89:dc:51:a7:
         30:08:db:a6:f3:48:d0:a9:3b:ed:de:fe:03:60:ee:7c:ad:9d:
         c6:c7:f6:a9:c9:0c:27:df:41:d9:58:09:fd:75:04:e1:bb:8c:
         99:ea:7f:be:7d:b5:78:8b:00:3e:76:26:35:4f:9a:05:34:fc:
         8a:b9:46:c9:b9:f3:00:2d:b9:9a:31:c5:e4:95:31:ab:8f:4c:
         9c:42:57:95:6f:99:9c:87:cd:6c:8f:a1:ea:00:7b:f4:a8:dc:
         53:cf:d4:00:57:e7:d3:d1:80:a1:30:5f:bd:28:c5:17:37:2f:
         4e:a1:15:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u5sB6F56zKvDVycrkUBUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZDNjMTc0MmZjMDVhODBhMmRjNmJiMGViZTEwMzBhOWJi
YzhjOTQwHhcNMjUwMTMxMDUwMDQ0WhcNMjUwMjAxMDUwMDQ0WjAzMTEwLwYDVQQD
Eyg3M2RhNzI5ZDUxMjU5ZWU4ZWJmMThjNmQyZTE0Njc5NzY2N2VlZjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf7wzr7XUHpFmAbadJc/jECURIEC
M6S8NzzyaRbFEMO918k6jmTNnJAqcvpAtpso2uDIApXaRqOX6HYEXIhTwvKdVcW5
edkPsdO8ul1+KOjT+vOXz6rGWPUKolPuIZekp63S3tHw0TkKUEo2XZKfdw0S6jHa
Ne0kJo6Yud+KFrI0nYPZUz5751K3nhqGus4KzBbkVyMlV0oYfVsqPkAvoZztIG8C
DU9K9Ik+GPp9WyeUq8iTRvsVAOWEqABnYkaBZkCedaUzLsYo0box4O+Bzir5cBeV
8NQLSDaf3e04HAvad+2D7o2BF07VXEGgPeZhr141Tkw3V+uwus1ptFmzoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPacp1RJZ7o6/GMbS4UZ5dmfu9kMB8GA1UdIwQY
MBaAFP/TwXQvwFqAotxrsOvhAwqbvIyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzlQQmRDX0FXb0NpM0d1dzYtRURDcHU4akpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jMzNkZjktZWRkNS00NjNiLWIwNTIt
MGYwYmM0MDFlMWUxLzEvXzlQQmRDX0FXb0NpM0d1dzYtRURDcHU4akpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9jMzNkZjktZWRkNS00NjNiLWIwNTItMGYwYmM0MDFlMWUx
LzEvXzlQQmRDX0FXb0NpM0d1dzYtRURDcHU4akpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFS2bBssc
BoOfGgQkWjvaaGFA0XhX/yTLAnvoWLy4j0NQPdHrcY3e69QTC3Ad5sPdtO2LgZM5
xXessuiOv+gc6Og5/cHEejwPakbZP+N2o80zsYbjCROviGlSH84CRBuh6kX0aHt6
7E+eDwwmYlt9uEUZeU60VCx9ISMRLfv1Qt4oNqaW2DQna1kR2wGJ3FGnMAjbpvNI
0Kk77d7+A2DufK2dxsf2qckMJ99B2VgJ/XUE4buMmep/vn21eIsAPnYmNU+aBTT8
irlGybnzAC25mjHF5JUxq49MnEJXlW+ZnIfNbI+h6gB79KjcU8/UAFfn09GAoTBf
vSjFFzcvTqEVoA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:52 2025 by rpki-client on console-fra.rpki-client.org