Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft
File:                     _AUWm-THSVJnJZffED7rG0e7aKM.mft (raw, json)
Hash identifier:          WTsZkaL4AvHSqPLunO6MnBF7z3houCw4uN2ULTkPs7U=
Subject key identifier:   EA:C4:B3:5D:CE:CE:9C:61:99:0F:9E:9D:28:59:6E:A1:B2:3F:A5:D4
Authority key identifier: FC:05:16:9B:E4:C7:49:52:67:25:97:DF:10:3E:EB:1B:47:BB:68:A3
Certificate issuer:       /CN=fc05169be4c74952672597df103eeb1b47bb68a3
Certificate serial:       0194BA8474CB447DCE68EDFF8CE31E481E60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft
Manifest number:          13A7
Signing time:             Fri 31 Jan 2025 04:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:30 +0000
Files and hashes:         1: _AUWm-THSVJnJZffED7rG0e7aKM.crl (hash: soKeu7GcttNdfi/IrFaAzSx+6UEVM8Mpj5pKt6cuSsA=)
                          2: qjBjdrunKiTcPXqIE7s1xh7dwEw.roa (hash: uHoSIY7qke5jgdqqvLbgYTxS1uVZNz+Tj5AJ31INqCE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:74:cb:44:7d:ce:68:ed:ff:8c:e3:1e:48:1e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc05169be4c74952672597df103eeb1b47bb68a3
        Validity
            Not Before: Jan 31 04:00:30 2025 GMT
            Not After : Feb  1 04:00:30 2025 GMT
        Subject: CN=eac4b35dcece9c61990f9e9d28596ea1b23fa5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:17:f0:07:bb:1a:58:b7:ef:72:ea:c0:3a:79:
                    ba:b9:66:b9:3a:74:60:db:96:c2:45:6f:4c:a4:dc:
                    a6:ef:8f:f2:42:f2:38:ac:e8:13:86:4a:85:3a:97:
                    65:12:e9:0e:17:16:9a:c6:d5:c3:2f:27:bb:b5:70:
                    7e:06:d6:2c:fb:7c:3a:72:d0:7f:8f:37:62:b1:7a:
                    45:60:bd:cf:2c:bd:65:87:38:73:a6:3b:60:bb:38:
                    e4:a5:f5:de:43:b9:03:d0:d1:ce:e9:11:6e:e7:ec:
                    f2:2c:27:87:f9:f2:a7:1d:18:99:6f:c2:6b:30:ef:
                    d0:a9:45:c8:b3:84:17:d9:1a:07:a7:14:95:97:a8:
                    70:e4:e3:37:a7:35:00:80:ee:88:6e:27:4a:fa:30:
                    42:70:5a:6a:09:58:a1:95:20:81:ac:35:e8:59:1a:
                    5c:fe:d8:d9:72:48:14:ca:ef:2e:bd:eb:fa:6a:e9:
                    45:30:aa:1f:fe:56:cb:20:df:23:1d:38:6c:67:a7:
                    98:75:77:f7:b3:5a:1c:e9:c8:a1:63:0a:6c:d9:69:
                    0f:7f:a8:ee:ef:10:8f:7b:4c:46:47:a1:9d:5b:b8:
                    6f:d4:39:e3:9d:8e:73:d0:2c:a7:88:23:0b:40:9b:
                    da:f8:a8:1b:81:9c:0d:c4:17:0e:05:65:12:8f:e3:
                    d5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C4:B3:5D:CE:CE:9C:61:99:0F:9E:9D:28:59:6E:A1:B2:3F:A5:D4
            X509v3 Authority Key Identifier:
                keyid:FC:05:16:9B:E4:C7:49:52:67:25:97:DF:10:3E:EB:1B:47:BB:68:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7a:7e:c7:02:0c:db:c4:40:31:e4:e2:11:95:4d:d1:61:07:
         8a:6f:3b:df:4a:7e:74:2d:6c:ac:7d:ec:56:cd:d8:7d:a9:da:
         df:fb:63:18:60:e5:b8:32:9f:20:e0:47:1f:93:cd:f6:76:4d:
         17:3b:e9:74:9f:31:6a:2b:a4:85:a9:bb:c8:d5:53:26:32:a1:
         fb:64:d7:8b:17:d4:b7:e9:99:d0:ed:ac:07:62:3c:a5:b3:c8:
         22:f1:ad:49:b9:d5:64:c1:a5:e1:a4:3d:77:91:c6:3b:46:9b:
         2b:47:55:ec:b7:63:3b:5d:5e:eb:b1:95:3d:df:35:2e:e1:64:
         44:ad:df:fc:b8:a5:d6:85:09:fd:94:21:c1:2c:54:a6:97:7c:
         26:d9:7b:0c:eb:d2:bf:6d:d0:79:51:dc:d9:06:3c:7b:60:9d:
         d9:ed:bd:ec:78:d5:08:93:06:ba:80:6a:49:f1:3b:29:a2:d8:
         c6:eb:62:08:9b:1a:75:9e:8c:d9:e4:7a:7a:17:e3:3b:e7:14:
         4d:c0:e2:82:b9:da:c8:99:01:fd:ea:e7:93:a5:bb:3f:a0:e0:
         35:ff:ce:8f:c3:ca:3b:00:b3:77:42:a5:34:5f:cf:2b:ca:a7:
         63:16:dc:ba:d0:68:47:9e:7b:9e:35:bc:df:06:a4:7d:19:36:
         27:26:59:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:15 2025 by rpki-client on console-fra.rpki-client.org