Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft
File:                     jvk0jidxFMzrutie_olfUKEqgYc.mft (raw, json)
Hash identifier:          LziVgirpzMHdNDvYda2fNdTosuRMKAZ+ubmaIjTbSuY=
Subject key identifier:   95:C6:5A:98:C7:AA:66:DA:7D:93:44:E9:AF:78:CB:86:87:EC:C7:57
Authority key identifier: 8E:F9:34:8E:27:71:14:CC:EB:BA:D8:9E:FE:89:5F:50:A1:2A:81:87
Certificate issuer:       /CN=8ef9348e277114ccebbad89efe895f50a12a8187
Certificate serial:       0194BABB29345F94D24BE385B6BC7402D185
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvk0jidxFMzrutie_olfUKEqgYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft
Manifest number:          0B85
Signing time:             Fri 31 Jan 2025 05:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:15 +0000
Files and hashes:         1: jvk0jidxFMzrutie_olfUKEqgYc.crl (hash: +XZ6EGXiyiPb3aj8BjRaekuN0tKHYY2MRWDm2aBG6lk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvk0jidxFMzrutie_olfUKEqgYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:29:34:5f:94:d2:4b:e3:85:b6:bc:74:02:d1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef9348e277114ccebbad89efe895f50a12a8187
        Validity
            Not Before: Jan 31 05:00:15 2025 GMT
            Not After : Feb  1 05:00:15 2025 GMT
        Subject: CN=95c65a98c7aa66da7d9344e9af78cb8687ecc757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:51:10:44:28:24:c1:c4:a8:a5:e6:dd:f9:fd:
                    a9:21:3a:f8:50:b5:01:52:fb:49:87:6e:99:30:38:
                    56:6c:f7:65:04:89:d9:87:ef:ef:9b:49:0f:12:32:
                    ac:c2:3f:6d:68:ae:ac:42:65:53:e9:3e:3d:9c:91:
                    95:b5:92:cd:97:4c:b9:a7:64:30:71:bb:54:53:fe:
                    00:21:bd:67:cf:36:5c:c2:e2:57:c4:d7:24:0c:9c:
                    7a:66:e5:83:10:65:bb:a3:b9:ce:c3:bf:08:1a:a6:
                    15:ec:07:60:06:07:f0:49:48:97:a3:96:75:d9:b7:
                    0d:01:14:ab:52:10:fd:37:18:bf:d3:2e:62:71:dd:
                    e5:9f:bc:e7:f7:99:14:20:df:74:31:8d:75:64:33:
                    32:2e:b7:0e:a4:6e:b4:0d:d1:3f:46:4d:ad:d9:5c:
                    0b:b9:af:51:87:71:78:02:43:d4:6b:b0:67:cb:13:
                    15:70:4d:b5:df:60:ce:fb:80:a5:05:83:e0:99:6d:
                    1f:20:87:1e:05:f1:d7:33:02:31:a3:86:ea:8f:7d:
                    3f:bf:78:92:58:16:05:70:6a:ed:36:bc:d3:73:30:
                    34:05:d0:9b:94:e4:7b:e5:18:4b:bf:c8:1a:8b:44:
                    57:97:7a:6e:6f:ad:73:62:ac:15:56:81:86:30:be:
                    92:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C6:5A:98:C7:AA:66:DA:7D:93:44:E9:AF:78:CB:86:87:EC:C7:57
            X509v3 Authority Key Identifier:
                keyid:8E:F9:34:8E:27:71:14:CC:EB:BA:D8:9E:FE:89:5F:50:A1:2A:81:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvk0jidxFMzrutie_olfUKEqgYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c3:d4:eb:96:39:ed:b0:16:57:1f:f3:be:14:92:1f:9a:c6:
         0e:78:b3:87:5f:aa:7b:5a:9a:33:df:97:62:9d:0c:26:eb:8d:
         17:6c:09:10:2a:c1:5b:20:e4:e3:db:02:ab:f2:3b:14:cd:b0:
         1e:2e:5e:04:71:66:d9:2b:44:b3:48:9a:7c:42:e5:da:13:0f:
         9a:2d:37:83:9c:d4:99:37:81:c2:b1:1a:a5:e7:af:bf:18:5f:
         02:6a:7b:e6:bb:9c:df:73:f4:4b:35:78:56:6c:37:de:38:2d:
         e1:b6:b7:00:02:15:8f:64:03:7c:e3:73:d7:fa:5f:73:ce:47:
         77:88:eb:cf:4a:16:41:0b:48:c5:ab:46:e6:8a:b7:be:f7:75:
         3e:06:2d:3f:ea:62:2b:db:8d:05:a4:b6:36:3a:5a:f2:8d:89:
         ae:ac:94:c3:bf:7f:75:ae:b0:5b:69:7a:c9:cf:bd:53:45:ba:
         f9:48:9b:6f:e0:cd:7c:de:c0:d3:db:08:75:3d:78:68:37:eb:
         d3:c0:19:4e:b2:af:bd:32:96:00:be:6a:d4:52:67:7e:4d:f3:
         e8:46:20:62:a6:e7:66:24:1a:e8:f7:73:17:a1:7c:df:02:43:
         3d:05:cf:d3:08:91:7f:99:76:51:61:0b:77:1c:b5:63:cb:ff:
         89:61:62:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:39 2025 by rpki-client on console-fra.rpki-client.org