Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.mft
File:                     RM62HnGmGfIxTp2YRuxnvIihJEw.mft (raw, json)
Hash identifier:          zV7aRESFYqd99dMDVO63ZkEgjUAk7EOeK6KOV3T3rrw=
Subject key identifier:   18:54:5E:07:0E:1B:BC:90:42:8B:58:BB:C9:AD:F2:CA:0E:B8:36:DF
Authority key identifier: 44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
Certificate issuer:       /CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Certificate serial:       0194BB6028C2467E81C55B65D2CFDCF552FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 08:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:28 +0000
Files and hashes:         1: H87BgtgHIgu3QOsmyVPPsdsknwE.roa (hash: xkDJ76AwerYWSRPO+inuQ8jDirisQ4H3gsMF8VViH04=)
                          2: QtXoVnj67TwjPgxEcqYom66X0y8.roa (hash: G8VO9HJj4m/eWjxYvgve0bBNmaJFIBzj2OTGT7rn2u8=)
                          3: RM62HnGmGfIxTp2YRuxnvIihJEw.crl (hash: WIcVUeloJMbeQpY9t72UGUyedMEKC2WoHidnq8cp4Hs=)
                          4: q_2J_90F4rPreclpPcC8HlAxjrA.roa (hash: HQ44EO8txOKcoFtZru4S60/X6J86Op89ytT0eAb7xzE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:28:c2:46:7e:81:c5:5b:65:d2:cf:dc:f5:52:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
        Validity
            Not Before: Jan 31 08:00:28 2025 GMT
            Not After : Feb  1 08:00:28 2025 GMT
        Subject: CN=18545e070e1bbc90428b58bbc9adf2ca0eb836df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cd:03:df:ae:af:12:27:41:01:4f:7f:31:77:
                    63:c6:52:6f:e1:77:69:0c:90:bb:24:b3:a8:9b:a7:
                    27:38:48:d0:6e:b8:0e:d6:fb:00:e8:1e:db:c7:f2:
                    95:0f:03:7a:be:cf:e6:85:b8:6d:81:09:92:87:3f:
                    92:07:83:24:ae:17:b7:8b:dd:4d:56:3d:d6:f6:27:
                    22:c5:16:fb:87:5c:19:92:22:62:5b:91:c2:79:1c:
                    0a:e6:14:e4:81:de:b8:99:bd:db:3a:5b:98:50:ad:
                    11:82:b8:28:c5:6f:f0:0f:23:20:04:bf:97:72:7c:
                    b6:f9:4f:32:36:a6:05:c7:4b:a4:fd:e0:49:d9:b9:
                    a7:df:f6:5f:a6:b6:d0:87:e5:a7:01:e9:4d:c6:35:
                    9f:b1:a3:6e:5d:11:58:92:62:72:39:37:39:44:c6:
                    ff:97:bd:6d:0c:ff:0d:c9:8f:8f:02:bc:00:db:08:
                    ee:bf:04:62:48:15:7e:36:70:9f:43:29:f7:25:d5:
                    de:9a:a2:3e:f2:0e:53:39:91:ce:80:e9:c1:04:3f:
                    08:80:a9:da:ff:5a:29:e5:24:de:d3:07:a8:62:cd:
                    d1:8e:04:df:05:7f:b2:42:8f:d7:25:52:59:50:24:
                    1b:b1:a1:d7:9d:2d:f3:05:28:e4:73:ef:f5:eb:fb:
                    ca:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:54:5E:07:0E:1B:BC:90:42:8B:58:BB:C9:AD:F2:CA:0E:B8:36:DF
            X509v3 Authority Key Identifier:
                keyid:44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:6e:84:91:81:d4:c4:84:79:b0:12:eb:c5:1b:d9:03:44:80:
         fb:eb:ba:f9:f5:ac:f9:3b:d4:4a:ec:bf:6f:6f:3e:43:f3:ab:
         b5:64:b5:19:3b:7a:41:48:0d:9d:7e:72:6e:ee:30:30:aa:e5:
         68:c8:26:98:5c:90:18:3c:b2:fb:d4:3c:6c:c3:fd:f7:c2:de:
         fc:97:31:ad:0a:6d:b1:d2:95:79:ab:68:a7:70:4d:58:6e:9c:
         26:7a:82:bd:75:bd:96:b5:fb:cc:f6:5b:08:49:49:bd:3e:80:
         47:0b:61:65:d9:f8:c6:33:23:29:1d:ce:b0:b2:06:f7:fd:ef:
         34:69:78:a5:8b:7a:ae:7d:da:b2:41:b4:d8:0c:09:41:f6:18:
         42:86:02:89:8a:48:50:7c:4a:d1:19:69:3c:7b:5f:d0:88:ff:
         cd:56:d2:9a:72:4a:64:7d:15:02:0d:c4:ea:ed:c9:c9:b8:f2:
         be:cc:40:9c:10:68:8d:24:44:fa:17:61:57:a2:ba:c0:ea:ba:
         df:07:22:6f:6d:94:2d:fa:5b:25:17:18:dd:79:b3:fe:91:bb:
         e7:3f:02:b9:ef:ad:8d:36:df:bb:5a:dc:e6:0d:ad:89:5a:e6:
         c1:49:12:f4:88:d6:44:8f:e5:f6:0d:61:39:cf:07:17:f8:8b:
         3a:52:40:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:54 2025 by rpki-client on console-fra.rpki-client.org