Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
File:                     Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft (raw, json)
Hash identifier:          Uh/VoCTxpFYDSgBsM4OQ+xdwwzOlFFudFrnqlss5oJo=
Subject key identifier:   E1:41:FE:3D:67:A3:58:FA:36:CA:04:B4:03:3C:DE:AC:20:D2:95:BC
Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
Certificate issuer:       /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Certificate serial:       0194BABB587FFF4E589AA76F52F6FF50C43E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 05:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:27 +0000
Files and hashes:         1: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl (hash: 0ZxG9RhsjOyDyqgAS1UxfCybpFgk8ITdBE5KIxUIi7w=)
                          2: I8ss4EzfBc_E6Ebc96KtodwkTNg.roa (hash: AiTv5W+AlPuM/j/7wO8LKQb21Yhuyp4ro3rVouKC/1Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:58:7f:ff:4e:58:9a:a7:6f:52:f6:ff:50:c4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
        Validity
            Not Before: Jan 31 05:00:27 2025 GMT
            Not After : Feb  1 05:00:27 2025 GMT
        Subject: CN=e141fe3d67a358fa36ca04b4033cdeac20d295bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bf:85:0a:ff:c8:42:c5:fa:e0:db:f7:02:5b:
                    e4:8e:40:fa:b7:5f:c9:1b:e1:a5:68:d6:e9:31:29:
                    bf:e3:9f:1d:5a:d0:9a:65:64:61:b6:82:45:8e:fc:
                    ca:eb:e1:71:b0:15:31:d1:c0:f9:cb:bc:83:bb:cf:
                    6c:aa:f0:63:f0:38:3c:46:1c:4b:99:bb:92:17:ec:
                    c5:05:59:ee:2e:72:02:55:f5:bc:c6:b9:b5:2b:28:
                    de:66:f2:73:39:f3:68:30:0c:d4:7d:e4:fa:86:7d:
                    32:53:8a:c1:9a:e9:d6:22:c1:77:2b:09:3f:cf:a4:
                    50:1a:3d:5c:dc:c2:ae:f3:78:13:1a:38:26:b0:ea:
                    be:ba:49:3a:ee:cb:75:8d:52:0a:01:55:5f:ae:97:
                    38:71:a1:51:b7:70:02:89:a7:d4:d1:06:e6:58:44:
                    42:68:c3:bb:95:8b:70:b4:ff:df:ba:ba:70:54:c7:
                    ca:fe:c0:32:e6:ff:46:08:ea:7d:3f:35:9f:50:a3:
                    75:a0:cc:af:22:27:1f:3f:2c:3c:8b:88:5b:95:7b:
                    71:72:2c:f5:c2:2f:83:63:04:1a:09:b8:97:5c:64:
                    c7:36:74:3d:b2:97:20:cd:a0:f2:c5:71:da:01:ff:
                    44:ed:45:2c:42:bc:e4:cc:38:97:84:22:43:01:27:
                    7b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:41:FE:3D:67:A3:58:FA:36:CA:04:B4:03:3C:DE:AC:20:D2:95:BC
            X509v3 Authority Key Identifier:
                keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:6e:a3:dc:d3:22:54:dd:29:a9:a3:67:e7:e6:af:9d:7d:77:
         c1:81:29:21:76:fd:0f:0c:ad:4a:5d:3f:34:5e:50:13:16:59:
         86:6d:f6:bb:19:19:2b:0d:19:f0:2d:e5:09:87:59:b1:06:9b:
         bd:86:01:08:1a:5b:a8:f4:8a:57:95:29:a0:22:ea:75:95:5d:
         fd:03:08:5a:4d:f9:7b:ae:80:a3:cc:31:f3:e6:26:99:2d:18:
         df:db:bd:95:c6:d3:8a:b4:30:f6:67:91:d6:54:aa:50:c0:89:
         f7:72:90:57:61:72:a3:ba:f9:10:4c:32:ac:65:c5:72:97:6b:
         79:5a:62:9c:eb:12:b7:22:0a:52:5f:cd:3e:bf:cb:f4:6c:5d:
         0d:21:a3:78:65:a9:85:b9:14:b0:6e:77:7c:e4:b1:1f:73:9f:
         86:68:b6:4f:7c:84:89:68:64:cb:ba:e0:7d:de:5a:8b:93:2b:
         fa:a5:8e:b8:f1:82:23:1c:25:38:5f:6c:ad:a3:f3:54:b3:c3:
         74:90:1a:8f:dc:bb:24:f8:99:c0:3b:34:c2:44:70:7c:20:a3:
         ca:b1:65:bf:53:26:eb:ca:29:5d:16:ab:4a:76:c5:31:15:6e:
         1b:ed:be:34:d7:ba:80:f3:5a:75:a8:64:cb:3f:dc:ac:d6:c0:
         54:e1:34:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u1h//05YmqdvUvb/UMQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZGQxMDg3NWU5ZTRjOWU3ZTg3ZTcwMWJiNTE2YWE2ZTFi
OTUyYjAwHhcNMjUwMTMxMDUwMDI3WhcNMjUwMjAxMDUwMDI3WjAzMTEwLwYDVQQD
EyhlMTQxZmUzZDY3YTM1OGZhMzZjYTA0YjQwMzNjZGVhYzIwZDI5NWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb+FCv/IQsX64Nv3AlvkjkD6t1/J
G+GlaNbpMSm/458dWtCaZWRhtoJFjvzK6+FxsBUx0cD5y7yDu89sqvBj8Dg8RhxL
mbuSF+zFBVnuLnICVfW8xrm1KyjeZvJzOfNoMAzUfeT6hn0yU4rBmunWIsF3Kwk/
z6RQGj1c3MKu83gTGjgmsOq+ukk67st1jVIKAVVfrpc4caFRt3ACiafU0QbmWERC
aMO7lYtwtP/furpwVMfK/sAy5v9GCOp9PzWfUKN1oMyvIicfPyw8i4hblXtxciz1
wi+DYwQaCbiXXGTHNnQ9spcgzaDyxXHaAf9E7UUsQrzkzDiXhCJDASd7PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFB/j1no1j6NsoEtAM83qwg0pW8MB8GA1UdIwQY
MBaAFA3dEIdenkyefofnAbtRaqbhuVKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGQwUWgxNmVUSjUtaC1jQnUxRnFwdUc1VXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80ZjYzYTQtZDU3Yi00YzljLThjZWIt
OTgzYzcxZmY3MDUzLzEvRGQwUWgxNmVUSjUtaC1jQnUxRnFwdUc1VXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80ZjYzYTQtZDU3Yi00YzljLThjZWItOTgzYzcxZmY3MDUz
LzEvRGQwUWgxNmVUSjUtaC1jQnUxRnFwdUc1VXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm26j3NMi
VN0pqaNn5+avnX13wYEpIXb9DwytSl0/NF5QExZZhm32uxkZKw0Z8C3lCYdZsQab
vYYBCBpbqPSKV5UpoCLqdZVd/QMIWk35e66Ao8wx8+YmmS0Y39u9lcbTirQw9meR
1lSqUMCJ93KQV2Fyo7r5EEwyrGXFcpdreVpinOsStyIKUl/NPr/L9GxdDSGjeGWp
hbkUsG53fOSxH3Ofhmi2T3yEiWhky7rgfd5ai5Mr+qWOuPGCIxwlOF9sraPzVLPD
dJAaj9y7JPiZwDs0wkRwfCCjyrFlv1Mm68opXRarSnbFMRVuG+2+NNe6gPNadahk
yz/crNbAVOE0Lw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:03 2025 by rpki-client on console-fra.rpki-client.org