Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
File:                     2fkESVCev547D0LBzcIuPvQAdCY.mft (raw, json)
Hash identifier:          Uuws0gmo82fYdlouZ3BsWjTBDMSKtNAMT5ITq1UthLM=
Subject key identifier:   F0:96:3C:97:D2:FC:1D:79:59:76:2F:69:B1:C0:9F:AC:38:DE:51:08
Authority key identifier: D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
Certificate issuer:       /CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Certificate serial:       0194BA84724E52AC98A592ABE5D9C1D9605F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 04:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:29 +0000
Files and hashes:         1: 2fkESVCev547D0LBzcIuPvQAdCY.crl (hash: 971roO5soFdqK18kGgoX3LXZnTi+mZdUx8d25hhMnFM=)
                          2: Kz3po1HxXV0o_QrY9XITSTFXVJI.roa (hash: VAFUPoAe7hllDMdDCgHvMZTasRHVjamq6QvBPj1A6Gs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:72:4e:52:ac:98:a5:92:ab:e5:d9:c1:d9:60:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
        Validity
            Not Before: Jan 31 04:00:29 2025 GMT
            Not After : Feb  1 04:00:29 2025 GMT
        Subject: CN=f0963c97d2fc1d7959762f69b1c09fac38de5108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:08:d9:b2:01:1f:cf:57:f3:1a:52:cc:d9:e1:
                    b3:79:d0:f1:15:1c:d6:20:e7:72:96:5d:69:82:4d:
                    9f:ee:a4:0d:64:04:b7:17:2e:be:15:14:00:aa:78:
                    20:ad:9a:ab:ff:48:e7:f3:2f:33:68:13:43:ab:f9:
                    bc:f3:36:5d:70:ef:98:e4:8a:d9:c8:c8:24:e6:b8:
                    6f:11:3c:d2:45:0e:de:2b:1c:f5:2a:c3:1b:75:28:
                    c7:fc:f7:23:6e:67:2c:1e:ba:f8:f7:68:43:04:a7:
                    ee:42:05:28:02:45:7b:74:42:8f:99:31:35:f3:6b:
                    59:80:a9:02:98:76:bf:1b:fc:3e:ee:68:44:a7:c3:
                    8d:74:6c:89:c0:8d:1c:34:8f:53:38:a1:17:e9:e0:
                    d1:47:73:3c:55:33:b5:38:a7:95:e0:db:98:dd:f9:
                    f7:20:70:4c:bc:09:49:0f:2a:4c:d2:8a:10:ea:ed:
                    b4:2b:99:cc:30:15:b1:05:a7:99:46:6f:a9:36:54:
                    0c:41:7e:a4:15:95:67:e1:bf:12:28:60:7a:7b:2c:
                    2c:6a:e7:a0:17:94:50:38:4b:fd:3f:60:6e:93:86:
                    65:81:bf:15:f5:33:c7:ec:76:9d:90:ce:fe:9e:8b:
                    51:b2:f5:8f:c1:dc:ad:d9:4a:0e:72:e7:7d:91:c2:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:96:3C:97:D2:FC:1D:79:59:76:2F:69:B1:C0:9F:AC:38:DE:51:08
            X509v3 Authority Key Identifier:
                keyid:D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c6:f1:00:2f:55:08:74:6e:70:3e:5e:19:fb:d5:e4:16:d4:
         1d:1c:74:ae:ac:0d:51:36:6e:6b:20:92:8f:cb:ad:69:43:0a:
         30:d8:e7:83:d4:55:9e:82:ca:27:31:2d:7f:48:24:71:88:1e:
         b0:53:9c:8f:c0:3e:07:c9:54:4d:6d:b6:7e:c0:27:7f:85:21:
         dd:2b:fe:3f:de:18:6f:79:a7:06:56:4a:35:92:18:26:90:8a:
         4b:a4:a7:65:0d:0f:ac:36:fd:04:b1:20:19:18:42:0a:d8:d7:
         34:a6:a6:35:d4:af:94:8d:90:3d:52:a1:70:36:df:20:d4:8d:
         2b:c0:5c:89:4a:aa:68:9c:dd:8b:d5:d6:12:78:50:4f:de:eb:
         53:72:8f:76:84:02:e5:63:5a:e2:7d:e6:f4:86:14:98:ac:5b:
         de:d7:a8:02:6d:a9:2a:c3:c1:ad:5b:8c:a4:da:e3:a7:18:44:
         73:e3:24:5d:7d:8c:11:48:6c:ce:b9:a1:8c:cc:86:74:d0:97:
         6b:c9:50:30:d2:a6:f7:d1:e7:96:73:e9:0f:78:13:58:6e:b0:
         3d:3e:9a:8d:77:83:60:bb:4c:d6:47:4b:26:5f:10:18:b4:7b:
         58:e9:2f:f6:4e:c9:a8:e4:29:fd:ba:85:6c:a2:b3:eb:58:ca:
         6f:b0:6c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:39 2025 by rpki-client on console-fra.rpki-client.org