Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.mft
File:                     jdwENRyFimp_4PkIErsQZV5a-Mo.mft (raw, json)
Hash identifier:          u6NXrcv8gZ/MFf4SF+5pT4HEPO/ZF2IlJQ0O/FLbq2o=
Subject key identifier:   D1:61:F9:D3:DB:31:35:E1:FF:2B:5A:87:A0:20:93:F2:C9:23:12:8E
Authority key identifier: 8D:DC:04:35:1C:85:8A:6A:7F:E0:F9:08:12:BB:10:65:5E:5A:F8:CA
Certificate issuer:       /CN=8ddc04351c858a6a7fe0f90812bb10655e5af8ca
Certificate serial:       0194BA84BA97C53777DBB9D82D6AB498F711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jdwENRyFimp_4PkIErsQZV5a-Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 04:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:48 +0000
Files and hashes:         1: jdwENRyFimp_4PkIErsQZV5a-Mo.crl (hash: M8VZtrkl3F0u9frw7oe3PhXoZb8iamusTkGiobcQAhA=)
                          2: vTPGgvTFOTKcwrxoY8g2suU_KuI.roa (hash: z6QhLi9xuHghOnwXqxIVXZYJknTyD77QAsOudJ+xOTg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jdwENRyFimp_4PkIErsQZV5a-Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:ba:97:c5:37:77:db:b9:d8:2d:6a:b4:98:f7:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ddc04351c858a6a7fe0f90812bb10655e5af8ca
        Validity
            Not Before: Jan 31 04:00:48 2025 GMT
            Not After : Feb  1 04:00:48 2025 GMT
        Subject: CN=d161f9d3db3135e1ff2b5a87a02093f2c923128e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2a:75:6e:1e:20:58:58:a8:9e:d6:92:8e:0b:
                    0f:85:d6:8e:f5:66:60:3c:64:39:63:3b:3f:92:41:
                    5f:e8:09:33:74:bc:f1:d2:30:0a:b9:0f:9a:ab:3b:
                    55:31:80:ef:e4:a7:b7:ea:87:28:6c:3d:36:a2:fa:
                    f8:e5:a5:4d:25:aa:13:95:12:a8:6c:44:0f:b9:e4:
                    0a:4b:31:e5:10:14:14:f6:fa:c2:56:1b:1f:1b:d6:
                    05:f7:82:0f:97:a9:15:37:78:a9:ad:ef:e5:20:8a:
                    ec:9f:a7:de:71:d2:cc:dc:99:9f:73:42:a9:50:b9:
                    79:c5:6e:b5:78:18:39:c1:2d:96:67:13:47:a2:14:
                    ca:2c:3a:61:0a:50:61:0e:5c:8f:cb:98:e5:f4:01:
                    77:68:f4:fc:f6:9d:a1:36:37:ed:27:49:9c:e4:31:
                    44:45:04:08:bf:23:64:51:0c:cf:13:a1:59:1b:7e:
                    e6:a3:b2:4c:b0:4a:85:19:ac:24:2a:a4:30:10:c6:
                    da:ec:17:90:df:38:c4:71:4d:26:bf:cf:5f:ed:6b:
                    93:dc:a8:d2:84:38:92:f5:ef:0e:1b:32:95:2a:68:
                    56:f8:33:b0:94:10:2c:76:07:ac:19:11:de:cf:c5:
                    d0:76:52:44:0b:b4:ce:89:3c:90:4d:c1:3e:2d:82:
                    23:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:61:F9:D3:DB:31:35:E1:FF:2B:5A:87:A0:20:93:F2:C9:23:12:8E
            X509v3 Authority Key Identifier:
                keyid:8D:DC:04:35:1C:85:8A:6A:7F:E0:F9:08:12:BB:10:65:5E:5A:F8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdwENRyFimp_4PkIErsQZV5a-Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ff:f9:3b:69:9e:9f:58:a8:81:c9:fc:d6:23:3b:bc:81:8f:
         93:86:ce:42:0f:7b:70:dc:54:0e:bf:a8:d4:10:1e:cc:f2:e7:
         d5:3c:b4:68:7f:a5:19:88:b2:32:ba:99:67:9a:8c:30:d8:56:
         37:43:17:2a:01:e9:ab:a8:5a:be:39:25:4a:db:d3:61:0b:ba:
         d4:88:d5:b1:49:2d:0a:0a:1d:61:5f:d6:af:c7:25:84:1b:eb:
         a1:45:a6:ee:f0:0c:c6:68:27:0d:d3:ba:86:3e:a6:85:fc:9f:
         a4:8d:9d:3b:1f:c7:9c:83:32:96:a1:28:e8:2c:9a:ca:96:7a:
         58:08:8f:1d:84:93:97:0f:dd:90:ec:1d:63:65:d7:51:53:90:
         e8:a2:11:09:02:7e:d8:f8:1b:10:53:bf:ad:03:80:16:81:0e:
         b7:ea:a6:d9:3b:fb:87:2f:10:18:01:83:90:e1:2e:13:15:ed:
         0b:e3:31:18:18:94:e6:5b:02:0b:41:96:09:a6:23:a1:c1:11:
         36:d2:a6:b3:4b:36:21:cf:b4:87:05:6f:51:11:42:c4:38:b5:
         7d:fa:b6:90:8e:7b:c4:4c:9c:3d:0b:62:e5:e2:f4:21:00:3a:
         22:47:97:5c:7b:6d:52:5c:6d:f8:8e:98:54:f8:b6:86:fe:39:
         3a:de:ad:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:21 2025 by rpki-client on console-fra.rpki-client.org