Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft
File:                     Adm2sACkY7CVvgtY_HIaT6nApGY.mft (raw, json)
Hash identifier:          NkM3zojhketFfdxLilidSLsSizgQpj4A9COa2uL3lWM=
Subject key identifier:   49:E5:CB:6D:AD:DA:1B:E6:9A:9E:DE:CC:29:10:C0:8B:EF:49:E4:CD
Authority key identifier: 01:D9:B6:B0:00:A4:63:B0:95:BE:0B:58:FC:72:1A:4F:A9:C0:A4:66
Certificate issuer:       /CN=01d9b6b000a463b095be0b58fc721a4fa9c0a466
Certificate serial:       0194BA841C73E15C0FCD4EEAB8B662D4EAE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Adm2sACkY7CVvgtY_HIaT6nApGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft
Manifest number:          04D8
Signing time:             Fri 31 Jan 2025 04:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:07 +0000
Files and hashes:         1: Adm2sACkY7CVvgtY_HIaT6nApGY.crl (hash: CN7VLIsmFPI3NcKaIBa3XdpJSfkVHad0YUt3gV1rs7o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Adm2sACkY7CVvgtY_HIaT6nApGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:1c:73:e1:5c:0f:cd:4e:ea:b8:b6:62:d4:ea:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d9b6b000a463b095be0b58fc721a4fa9c0a466
        Validity
            Not Before: Jan 31 04:00:07 2025 GMT
            Not After : Feb  1 04:00:07 2025 GMT
        Subject: CN=49e5cb6dadda1be69a9edecc2910c08bef49e4cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a0:e5:2d:4e:b4:68:88:1f:01:81:a6:03:ae:
                    6f:dc:e9:c2:b4:ca:ce:ad:d8:49:ed:fb:e1:0f:84:
                    58:9a:f7:3b:21:d2:6b:88:a5:a9:20:52:39:1e:e3:
                    06:55:2a:8e:4b:2c:cc:5a:7b:69:b6:14:a4:4c:6d:
                    c2:a0:d5:6b:04:ab:ed:74:b4:25:5a:64:44:26:12:
                    ad:9a:44:41:f7:18:ee:42:57:f7:a7:23:fc:78:5a:
                    08:95:63:f9:37:fa:5f:67:22:44:2f:ca:9a:b4:a7:
                    4c:29:64:ab:bc:65:e3:5d:4c:33:1e:b6:95:9c:06:
                    14:37:f1:30:73:5b:34:06:b5:c4:bb:17:1d:9d:05:
                    87:d2:e7:59:f3:9f:b1:2e:a8:a1:4f:1a:05:a5:7e:
                    f5:b6:82:66:88:bb:7d:06:f1:2b:47:9c:0b:c1:46:
                    c1:36:8c:05:40:6d:b3:5b:34:21:1d:cd:2a:2d:1d:
                    d6:74:20:72:04:bc:9e:99:f1:60:0d:61:8c:7c:fd:
                    47:70:ac:4b:2f:6c:c0:d7:5d:f0:14:8e:f4:3b:84:
                    c8:d2:17:77:1b:69:8c:14:ce:c9:a4:ee:1c:f0:5c:
                    d2:3c:57:00:6e:e6:c0:72:1f:b0:22:d3:da:ad:0c:
                    54:57:2d:16:d8:3c:0a:27:03:1d:8e:4d:0e:32:09:
                    5c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E5:CB:6D:AD:DA:1B:E6:9A:9E:DE:CC:29:10:C0:8B:EF:49:E4:CD
            X509v3 Authority Key Identifier:
                keyid:01:D9:B6:B0:00:A4:63:B0:95:BE:0B:58:FC:72:1A:4F:A9:C0:A4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Adm2sACkY7CVvgtY_HIaT6nApGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:55:2b:93:0b:5d:a0:44:58:cd:fb:8f:d2:08:d9:82:a3:7a:
         51:f6:1d:f4:e4:5c:19:ab:d1:ee:d7:c6:c3:82:9a:d5:20:92:
         69:52:9e:80:b8:58:ab:ef:d5:ac:7f:cb:db:6d:37:98:b1:c5:
         07:40:04:47:9e:2c:fd:ca:80:72:35:24:21:c7:a6:a2:fe:6f:
         0a:2a:0e:7d:2d:bc:97:e0:b0:55:36:76:0e:5d:aa:c2:33:e3:
         c5:43:9e:29:1f:b7:c8:3a:08:f2:7f:da:db:6a:af:7d:46:c0:
         3f:40:7a:c8:aa:60:17:ae:51:41:27:f3:b9:6b:79:b1:46:5f:
         55:a5:9f:2f:b2:ab:5a:37:e3:91:a5:32:21:2a:b6:d2:48:81:
         2f:66:cd:26:f7:2b:11:8a:30:d3:e8:73:0c:f3:c2:b1:7f:9b:
         e4:81:be:fb:4e:78:f4:e0:bf:62:b8:9e:fe:4b:af:3c:d7:3b:
         01:5e:67:6a:cb:3d:cb:1d:a0:ea:07:84:3b:25:8c:1b:1b:5f:
         7e:9c:aa:6d:b9:4a:99:4f:01:76:88:35:55:49:67:52:4d:24:
         16:88:18:72:14:b4:a3:ab:c3:b5:53:52:51:b0:48:33:59:04:
         c9:c2:99:47:6b:5b:51:4c:5f:ee:df:d4:9c:10:7a:3e:ac:9c:
         1e:62:2f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:56 2025 by rpki-client on console-fra.rpki-client.org