Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
File:                     Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft (raw, json)
Hash identifier:          HqXBMOO0Zy22dlLc/woiNXT4dxtV1ObkSc6w5xniWPE=
Subject key identifier:   5C:02:3C:F8:17:E3:22:43:5F:AD:A1:03:12:D0:F0:AE:1A:6F:35:46
Authority key identifier: 5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
Certificate issuer:       /CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Certificate serial:       0194BA8439982B88E8C7DBF6544C73727100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 04:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:14 +0000
Files and hashes:         1: Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl (hash: 2lev1rwvUlhqJ8aKkmR7QtWwK2JGeXUUiegU3uimyco=)
                          2: ZL3E7Adz2UxGlx__ehEXq17MBJk.roa (hash: eyCT9Oq7LBXIn9/dNlFO4JQgfNKfcXzeYyZGwsbG9dM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:39:98:2b:88:e8:c7:db:f6:54:4c:73:72:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
        Validity
            Not Before: Jan 31 04:00:14 2025 GMT
            Not After : Feb  1 04:00:14 2025 GMT
        Subject: CN=5c023cf817e322435fada10312d0f0ae1a6f3546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9f:6d:51:fa:9d:de:0b:61:a0:dc:91:6e:03:
                    fd:3b:17:ff:11:03:94:81:7e:f1:6e:a9:36:d8:d2:
                    fe:6f:02:b0:55:8b:dd:25:c6:47:ba:8d:62:3c:72:
                    be:e2:ff:6b:ac:85:be:c2:fe:5b:e6:25:81:be:0a:
                    1a:c6:c9:f5:a5:e9:1f:56:17:55:d1:97:5e:f6:07:
                    8a:59:99:26:05:25:19:26:3f:de:72:08:47:97:7e:
                    c2:73:93:7f:36:b1:6c:ff:77:32:32:6e:85:b2:65:
                    aa:34:bb:41:b3:14:4d:05:58:59:45:37:b9:c2:db:
                    1e:7e:bd:67:88:65:1f:8e:96:81:d3:42:05:51:a5:
                    6f:0c:9c:2a:88:7a:99:bd:3d:59:18:22:7d:16:6d:
                    6c:7f:40:d8:08:56:96:55:ad:ad:5d:50:b8:36:b7:
                    e3:d2:7c:25:4a:c2:ad:fd:46:1a:22:17:5e:f2:5b:
                    20:f9:e0:79:53:fd:64:5d:dd:03:28:46:73:35:94:
                    91:d0:e5:b3:c1:e5:83:07:3b:55:4c:c9:f2:57:3e:
                    58:dd:cd:ad:64:7e:d2:e8:93:46:ee:5a:71:98:ea:
                    e3:43:34:f5:b5:12:36:f9:74:d9:03:da:7f:8b:8c:
                    36:5b:c7:47:b4:b5:07:db:38:61:a3:31:70:32:54:
                    c8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:02:3C:F8:17:E3:22:43:5F:AD:A1:03:12:D0:F0:AE:1A:6F:35:46
            X509v3 Authority Key Identifier:
                keyid:5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e8:d4:33:f4:5f:5c:a5:ab:14:42:d0:cf:b4:3e:51:c4:2d:
         0c:26:fc:9b:8b:f3:c0:d1:5a:e5:ce:18:2a:dc:18:5f:0a:28:
         7d:49:d4:3f:0e:d8:ee:a3:27:8a:e6:d5:3c:6a:f9:5a:c0:8c:
         30:c3:f4:95:94:8f:67:41:a5:95:e1:d4:4a:ec:76:52:ed:48:
         bd:c3:1e:c4:0d:fa:81:37:b5:18:34:ae:8f:69:80:a7:19:77:
         29:b0:13:29:c1:fb:35:ca:56:5b:4f:07:fd:42:a3:31:02:36:
         36:7a:58:0e:5e:4d:aa:6c:d0:ad:3f:96:a8:3c:2a:4f:77:9c:
         e8:d2:63:67:15:8d:7e:61:90:3b:df:9a:69:98:4c:81:b9:68:
         4a:0c:c6:4b:81:8f:5b:8a:c6:9c:8b:5a:bf:f1:d6:78:03:6c:
         c7:8a:1f:02:de:63:f7:74:b6:89:9e:c1:ca:8e:98:f8:94:57:
         ef:39:0d:f8:85:1d:a0:4d:1e:74:f6:bc:d1:8f:39:96:4e:9f:
         53:1f:64:4c:1f:d5:a1:3d:bf:ed:77:f5:e5:95:e1:23:5a:2c:
         9d:4e:48:1f:0f:ea:5e:0a:fd:61:93:95:86:41:8c:af:f0:e3:
         b4:b1:38:59:f5:4e:12:3b:f8:3f:39:34:aa:20:ad:4e:48:ed:
         50:f7:24:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:55 2025 by rpki-client on console-fra.rpki-client.org