Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
File:                     F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft (raw, json)
Hash identifier:          Z/E0Ja8JHgtFZbvP866icNFC/cg9I0y/QII5BQr38h4=
Subject key identifier:   13:AD:2E:5D:DC:40:70:6A:F0:76:E4:68:99:E4:1D:E1:BE:26:98:26
Authority key identifier: 17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72
Certificate issuer:       /CN=1792582aa0b18d6073592f121a6e563fec424672
Certificate serial:       0194BABB894F836C339EBC045CF4FE8FD0B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
Manifest number:          04C8
Signing time:             Fri 31 Jan 2025 05:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:40 +0000
Files and hashes:         1: F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl (hash: c9xn8aEQFRNsn2vTTUhlydKv2hl3uBdSyBRtXPzcP48=)
                          2: X1Hk6Afe1QrSetXg0Fl8YXsPzIQ.roa (hash: XOR8QJ4EQ0MnwLrp2DnXgyEFhnN9pPQ9poUD3LAPUHw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:89:4f:83:6c:33:9e:bc:04:5c:f4:fe:8f:d0:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1792582aa0b18d6073592f121a6e563fec424672
        Validity
            Not Before: Jan 31 05:00:40 2025 GMT
            Not After : Feb  1 05:00:40 2025 GMT
        Subject: CN=13ad2e5ddc40706af076e46899e41de1be269826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c1:5d:4a:60:71:7e:10:55:e8:3e:9f:fc:82:
                    7d:5c:49:ec:93:39:bc:82:59:64:cd:d3:8c:cb:fa:
                    19:d6:62:27:5e:66:b4:c9:e2:b7:eb:dd:d5:38:77:
                    78:d3:95:6c:6d:3b:46:38:09:f7:53:80:3f:d9:34:
                    6b:60:c5:aa:a0:0c:8c:73:7d:d1:bd:aa:ff:e1:63:
                    60:fa:c1:d4:19:67:52:c8:ce:3d:14:15:5e:6a:8e:
                    67:d2:37:31:c8:5d:78:42:8e:4b:d1:66:ce:42:8f:
                    6a:de:ee:e6:16:0f:d3:d6:39:b1:6c:e2:71:22:6d:
                    1f:ed:8a:ae:cf:32:f2:39:fa:25:f2:83:7c:bd:16:
                    9b:32:59:4a:ef:dd:14:f8:b1:ba:76:d4:ac:1d:d1:
                    ec:40:83:2a:76:f2:01:ec:71:5d:e5:20:bf:66:0b:
                    72:dc:59:0c:a4:d9:e6:6c:17:ee:20:13:74:30:94:
                    fc:c1:b4:28:bb:07:08:80:ed:6f:3e:1e:00:aa:cb:
                    a1:c5:a4:fc:ca:b4:53:49:d8:da:da:5e:c1:69:e9:
                    a7:70:1e:1f:2e:40:c1:49:6e:cb:0b:26:04:2e:b1:
                    7f:0c:53:ec:59:0e:5d:6b:7d:d5:c1:58:2a:82:5d:
                    00:f9:6e:df:23:e4:4c:eb:c8:6d:ad:a9:62:1e:2e:
                    fd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AD:2E:5D:DC:40:70:6A:F0:76:E4:68:99:E4:1D:E1:BE:26:98:26
            X509v3 Authority Key Identifier:
                keyid:17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:ee:06:11:2e:5d:c8:d8:45:96:70:84:18:2d:1d:ae:04:02:
         20:2d:0d:7f:c3:65:e6:29:a5:5e:50:22:8c:7d:1a:6e:e5:96:
         13:58:01:a5:88:5c:ea:48:e3:36:73:35:35:1f:c3:de:e1:53:
         6d:be:4a:97:d8:92:c4:4d:c8:5b:0f:43:a9:4e:45:08:1b:a5:
         da:8b:2c:01:6d:91:db:77:87:b8:17:09:55:ac:3a:c9:75:e1:
         3b:3f:39:58:27:01:08:35:09:a8:01:94:8b:29:a7:6b:19:c0:
         1e:9b:3e:d4:b9:62:90:1b:c3:48:60:b1:a0:e0:b6:3f:ae:c4:
         e8:d4:35:40:76:02:d3:a6:d7:44:0c:56:92:01:0e:19:8e:47:
         6a:ff:02:4e:51:f7:57:ff:94:9f:73:60:74:71:79:cf:ef:2f:
         eb:6e:cb:10:ca:bd:cd:84:28:10:94:4e:b9:57:74:68:ea:36:
         f5:ec:d3:7b:e5:10:40:c7:e8:3d:97:7c:cf:5a:71:b8:d8:e9:
         44:9d:59:83:fb:d2:f5:4b:1d:b5:17:22:65:b2:11:55:14:ec:
         ba:59:22:49:ae:e2:fd:3c:66:3d:41:56:8f:7b:67:cf:fb:03:
         27:d4:08:ea:20:bd:0e:43:2e:c9:b5:5a:60:8d:f5:d1:fd:72:
         bc:bb:c1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:48 2025 by rpki-client on console-fra.rpki-client.org