Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
File:                     g9zjc8GLlAqXg5CycnACebMv7jo.mft (raw, json)
Hash identifier:          CrhRumESEIxeCM3mMbOtFqlBqcbOW/vf8VazHXjW7Ik=
Subject key identifier:   F6:A7:20:46:1C:A2:F2:F0:EA:51:CD:60:BC:BD:08:D2:9E:42:6C:93
Authority key identifier: 83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
Certificate issuer:       /CN=83dce373c18b940a978390b272700279b32fee3a
Certificate serial:       0194BAF281CB128517FFFB3F93C7C83E42A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 06:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:42 +0000
Files and hashes:         1: Guy7Gbz5rPMc4iFSpd_8frqdYqs.roa (hash: atB7rNB4GngxSgp2zRWRq0GhS+DcIAMSX9Cb0N8BlB8=)
                          2: g9zjc8GLlAqXg5CycnACebMv7jo.crl (hash: yMUYRvvCFL7TppZI4rgpvltUSie7946g1ICIc//hZ30=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:81:cb:12:85:17:ff:fb:3f:93:c7:c8:3e:42:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83dce373c18b940a978390b272700279b32fee3a
        Validity
            Not Before: Jan 31 06:00:42 2025 GMT
            Not After : Feb  1 06:00:42 2025 GMT
        Subject: CN=f6a720461ca2f2f0ea51cd60bcbd08d29e426c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:ff:f6:95:17:d8:92:e6:bf:6b:2f:79:4e:
                    76:bb:2e:45:29:7e:a6:7e:f7:2e:b7:18:83:26:94:
                    6a:ae:5d:90:e7:39:02:ce:12:0f:de:c8:28:25:51:
                    10:2f:7c:c3:b9:f5:6a:0c:9d:27:50:fd:83:e4:c6:
                    84:ce:60:e2:9d:d2:b8:20:7d:33:3e:29:5c:ab:6f:
                    b5:a8:13:90:fc:21:6b:a1:1f:53:71:e2:64:be:48:
                    e0:bf:08:d6:99:89:8b:8c:b7:c8:c3:9f:db:db:89:
                    16:33:43:da:25:a2:94:2d:04:64:7b:a4:b9:72:e0:
                    5c:9e:88:af:83:32:3b:b1:1d:9f:8e:d7:c5:07:2b:
                    b5:54:44:4e:b3:b9:1b:6d:c6:30:09:9e:5b:b4:31:
                    d3:07:ee:7a:ad:e8:e0:47:d3:36:38:f1:fb:30:1b:
                    03:ef:3d:8e:b0:30:b8:cb:da:39:b3:f6:62:ef:8a:
                    12:29:9e:22:e7:0e:e5:b9:d9:5b:e0:59:07:23:12:
                    1e:29:96:e7:0a:84:44:14:5a:87:18:70:24:7f:a4:
                    3b:09:2e:1f:06:3f:f8:a8:ce:95:8b:13:88:40:fd:
                    8a:a2:8a:ed:50:82:f8:ea:51:8a:7d:d2:30:16:00:
                    45:e0:b8:44:6f:62:71:df:d3:d1:08:51:f3:56:3a:
                    ae:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A7:20:46:1C:A2:F2:F0:EA:51:CD:60:BC:BD:08:D2:9E:42:6C:93
            X509v3 Authority Key Identifier:
                keyid:83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:26:d9:60:a7:2f:b0:13:2d:a5:84:9f:1b:84:36:ac:06:24:
         dc:54:9a:76:01:9a:74:63:19:f5:b2:97:ec:ff:ef:a6:90:29:
         ec:70:34:4c:3e:1b:b2:da:5f:2e:b7:91:e4:4e:0d:f4:1e:85:
         00:b1:7b:02:6a:71:90:58:13:d6:42:41:f8:ff:fe:8c:65:59:
         32:02:97:c9:12:f2:07:1c:22:40:8b:c8:6a:5d:34:7b:d6:2c:
         76:18:c9:dc:b6:b5:53:6b:bb:19:36:28:c0:70:1a:dc:26:4a:
         1f:05:de:b9:2b:5a:22:d5:f9:2f:13:cf:75:48:61:bb:ca:53:
         6c:54:53:5e:86:29:66:40:2d:e2:76:0a:58:df:db:65:54:73:
         9e:d9:f6:49:ba:d0:48:05:1b:5a:93:1e:1c:1f:ab:ff:52:f2:
         1f:ce:5a:59:3f:b9:e3:01:93:79:50:a7:bf:9e:09:66:b9:97:
         e3:e7:b6:2f:9f:c6:5b:79:2a:9d:c6:a8:da:57:38:2f:c0:20:
         f7:bb:ee:d4:b3:a9:e3:a4:c2:f1:a6:21:bc:41:d3:55:88:5d:
         42:b7:10:96:66:2f:ab:f0:8e:cf:42:30:55:97:5d:18:40:5a:
         b8:1f:57:68:9c:2d:b3:d8:a5:10:1d:6e:36:ca:98:66:2d:6d:
         4b:02:9b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:36 2025 by rpki-client on console-fra.rpki-client.org