Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
File:                     1tk74RT4LQJYkWqXjKy_sVu1hAo.mft (raw, json)
Hash identifier:          /Oqm0bGN0p7j9XBwWNVpHp74bqk0SLOuywUc+tikevE=
Subject key identifier:   3C:E0:AF:E6:30:31:D8:DE:FC:38:A9:33:DD:8A:DC:E1:76:68:26:B1
Authority key identifier: D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
Certificate issuer:       /CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Certificate serial:       0194BAF26CE9BF18D15F94A8293DC1895432
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
Manifest number:          0E9E
Signing time:             Fri 31 Jan 2025 06:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:37 +0000
Files and hashes:         1: 1tk74RT4LQJYkWqXjKy_sVu1hAo.crl (hash: VxvK5dTX3+a/babJZm1FOcRbAhLBxpjE7jWUpehek50=)
                          2: EjxEvyFrbjIutBBjgjTn5G6eW5c.roa (hash: dmAYBtW0oaeyULNatDjSeKws5fd+ZFknimkAFUD4KMQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:6c:e9:bf:18:d1:5f:94:a8:29:3d:c1:89:54:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d93be114f82d0258916a978cacbfb15bb5840a
        Validity
            Not Before: Jan 31 06:00:37 2025 GMT
            Not After : Feb  1 06:00:37 2025 GMT
        Subject: CN=3ce0afe63031d8defc38a933dd8adce1766826b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:32:a0:85:ca:30:45:61:d2:45:44:19:cd:ef:
                    e0:96:92:6a:81:28:46:cb:17:1f:3f:b6:72:f7:99:
                    38:34:48:22:14:db:84:1e:10:cc:c8:99:c1:c5:78:
                    1a:45:cb:61:54:d3:61:28:cb:21:c5:a0:21:b4:b5:
                    ed:54:8f:42:0b:b2:2b:ae:04:de:cd:d5:f2:bd:75:
                    42:87:28:87:98:7c:98:fb:58:da:c5:17:b4:c3:26:
                    94:f8:5f:76:18:9c:3c:80:9c:00:6a:e6:3e:73:66:
                    0e:3e:e3:38:cd:57:2d:c9:35:0d:95:ef:3f:ba:76:
                    4f:b7:2b:1b:9a:9b:90:2f:ab:3c:9b:bb:cb:0a:94:
                    1a:e2:44:98:e2:f1:10:f0:2e:79:6a:0a:36:e2:af:
                    0d:e5:c1:21:22:ae:7f:aa:2d:d0:69:5e:9b:73:93:
                    26:6c:1d:8b:71:df:cc:42:65:bd:3e:c8:02:df:c3:
                    9b:d0:95:6c:2f:53:5e:cd:d6:47:1b:6e:f0:22:ec:
                    9c:07:5f:33:31:43:7e:68:ca:fd:3e:dd:15:a3:16:
                    52:b4:f4:6a:f6:66:fd:1a:2e:99:2c:b2:6e:45:11:
                    d1:7b:82:dc:e4:35:f4:5b:89:85:f7:bf:4d:62:9d:
                    ec:7b:33:eb:83:83:51:ae:33:f7:9a:44:36:e6:d6:
                    c0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E0:AF:E6:30:31:D8:DE:FC:38:A9:33:DD:8A:DC:E1:76:68:26:B1
            X509v3 Authority Key Identifier:
                keyid:D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d3:c7:34:0a:4b:33:0c:51:b9:0c:f4:ad:fb:cf:cd:ae:c7:
         d9:1f:bc:21:e3:a8:0e:60:8d:df:ee:4c:bd:1b:f5:6f:f1:ee:
         a7:c0:97:06:31:4c:e0:6d:b4:e8:56:5f:6c:cf:70:7f:51:3a:
         72:7f:54:a5:36:90:0c:63:4e:91:d8:cb:5e:63:4f:d2:d8:47:
         c6:a1:34:0b:5f:61:76:f2:b9:5f:fe:76:e5:60:1f:58:99:bd:
         30:8f:e7:5c:4b:7d:12:db:6d:b5:e2:79:d6:04:df:da:40:97:
         af:e7:c7:81:dd:af:9c:57:b6:a9:2b:e4:ca:ad:4d:b7:4c:1c:
         eb:c9:12:a9:74:21:10:78:da:ee:97:ef:64:b1:f2:9a:f3:1d:
         60:66:21:3a:63:0c:7c:ff:17:1a:95:2f:bb:44:de:bf:1c:9b:
         b3:d0:6d:02:c1:9c:2f:3a:3a:be:9e:06:ed:e9:11:7f:00:75:
         6d:d3:a0:73:69:16:19:4d:3d:dd:f9:14:85:06:b3:f7:99:b2:
         ce:18:98:f2:0a:0f:be:af:9d:41:27:00:6b:fc:e2:d7:e4:ea:
         dd:88:b5:0d:eb:b2:50:4f:0a:73:7e:76:5c:ec:67:6a:48:95:
         0f:e6:63:6e:b4:72:72:2e:ef:77:0d:4a:81:59:62:f1:ae:fd:
         df:f3:d3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:14 2025 by rpki-client on console-fra.rpki-client.org