Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
File:                     Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft (raw, json)
Hash identifier:          lce8ECLzjaopdN2g6duQoi2XhBLDcuYevif3UL1WeQ0=
Subject key identifier:   57:20:11:A7:A9:BF:81:6E:DB:70:E7:8D:4C:25:BA:55:1E:A3:38:6C
Authority key identifier: 2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
Certificate issuer:       /CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Certificate serial:       0194BABB521E57110F697FA71DF44FE01A5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
Manifest number:          138D
Signing time:             Fri 31 Jan 2025 05:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:25 +0000
Files and hashes:         1: Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl (hash: 311zcEcD3Mb9YiMBlIpGCL7eUtYtEG8kawmNkBdAKgM=)
                          2: fXL0uaR8EGTfgjwNeLPfkR-XYZ0.roa (hash: XcBDg6SFO9es9ohuelGMBtP1Av1BLAYbIVQZ992NLeU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:52:1e:57:11:0f:69:7f:a7:1d:f4:4f:e0:1a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
        Validity
            Not Before: Jan 31 05:00:25 2025 GMT
            Not After : Feb  1 05:00:25 2025 GMT
        Subject: CN=572011a7a9bf816edb70e78d4c25ba551ea3386c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c3:36:a8:dd:1d:b6:f3:5a:eb:0f:3c:04:30:
                    9d:3b:cb:e0:32:0b:15:40:4c:06:37:40:13:4b:34:
                    32:96:bc:27:38:93:ce:4e:64:61:d5:10:bc:d0:a7:
                    bb:77:e4:69:e8:48:71:54:ae:45:cf:0b:03:44:d6:
                    ea:54:0e:7b:07:d1:8c:1e:a6:83:14:da:b9:3e:d2:
                    09:90:90:4a:d8:04:db:1a:be:eb:d5:6c:af:0c:2c:
                    ea:5b:1e:a4:f0:49:00:ea:00:0b:cd:53:e0:ce:0c:
                    31:45:bc:1b:d6:5e:5c:24:21:c0:af:64:ed:13:56:
                    3b:50:95:c3:e3:fb:4b:a7:25:14:66:05:c8:8f:f9:
                    e4:91:73:49:74:08:d2:04:67:a0:48:3e:ae:6e:35:
                    a9:cd:8d:d1:5b:a1:49:d5:ee:ff:f4:97:36:ad:4a:
                    61:46:91:2c:e0:3f:b5:85:22:93:a0:47:32:ec:3d:
                    c8:52:74:46:b5:69:4b:44:08:4f:74:10:02:e9:95:
                    b0:b5:b9:3f:0b:9f:84:5e:97:45:21:77:06:a3:19:
                    bf:2f:e3:c4:60:dd:96:db:72:71:79:10:82:2a:f7:
                    32:32:c4:30:ac:c8:6a:06:e7:f1:2c:e1:a5:37:0e:
                    17:0f:b9:86:cd:7d:6f:e2:0c:f9:30:9e:39:3a:ca:
                    5c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:20:11:A7:A9:BF:81:6E:DB:70:E7:8D:4C:25:BA:55:1E:A3:38:6C
            X509v3 Authority Key Identifier:
                keyid:2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f2:92:12:01:88:9b:25:23:46:73:b5:34:a5:9c:c6:38:5c:
         29:01:72:04:52:be:3d:c3:9f:18:95:81:33:6b:c9:bc:fc:68:
         cc:c0:3d:37:fe:7d:af:33:4c:9b:bd:b4:ec:45:94:9b:07:cb:
         a1:64:d5:e3:a5:a3:f2:0e:33:85:54:f5:53:f1:5f:2e:c2:4f:
         b2:13:28:59:a7:46:a8:d1:bf:c8:94:3b:e3:fb:04:72:87:2b:
         17:13:fe:20:e8:5c:2f:06:bf:8b:6a:96:4b:f5:56:04:7d:0e:
         0e:35:07:6a:b1:59:71:c6:2f:d9:6f:18:49:e3:0f:d7:c2:94:
         35:5d:37:82:3d:15:99:2a:47:89:7d:7f:6e:a7:58:69:ba:8b:
         cf:14:b7:21:72:a3:db:0a:26:fe:6e:8c:fd:de:7b:25:28:c4:
         5b:af:38:d8:cd:08:e6:3e:19:88:49:07:5c:be:81:1d:42:45:
         d9:09:c5:28:12:eb:81:5b:7e:9f:d4:1b:90:62:a7:87:90:38:
         62:57:50:c2:3e:96:5b:41:18:26:72:d3:e7:d5:d2:34:83:5f:
         7d:c9:ff:92:58:82:d1:d5:81:8b:f0:4c:1b:86:9d:39:af:24:
         0e:04:1c:71:3c:a6:09:d1:9b:0e:37:0f:42:0a:e2:b7:ce:87:
         27:19:09:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:26 2025 by rpki-client on console-fra.rpki-client.org