Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
File:                     7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft (raw, json)
Hash identifier:          hfkv41NJNWIpsb+/i9FFOBQyGbds4AJGIQlsVJ0nrW4=
Subject key identifier:   2A:90:A8:B9:4D:DE:45:56:0C:7C:E2:14:D5:16:96:71:5C:52:00:77
Authority key identifier: EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE
Certificate issuer:       /CN=ecee470bf5109976934f51e7eaef210779a2c4de
Certificate serial:       0194BAF265400694C99477D3CDB3091D91E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 06:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:35 +0000
Files and hashes:         1: 7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl (hash: iGvxmBuvoTdGKoKwGdka0AkCVv+sy7Q2vtOh9kwm64w=)
                          2: GOWs0802FOjDjhvj5VByRZ93Ms4.roa (hash: 0E/ca5KwIY555u3Bh3vtXM1rkOkEak6A4cwcKp+8kRA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:65:40:06:94:c9:94:77:d3:cd:b3:09:1d:91:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecee470bf5109976934f51e7eaef210779a2c4de
        Validity
            Not Before: Jan 31 06:00:35 2025 GMT
            Not After : Feb  1 06:00:35 2025 GMT
        Subject: CN=2a90a8b94dde45560c7ce214d51696715c520077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1c:fe:7f:96:8d:9c:d4:30:fa:06:13:69:58:
                    16:a3:c3:4a:2f:99:d6:d4:34:22:b9:3a:1f:11:1a:
                    22:df:41:11:45:fa:ec:a3:59:76:76:e6:1e:e3:08:
                    20:a1:47:14:78:79:4e:69:69:57:0b:31:50:90:ed:
                    33:15:58:62:ff:49:d0:4e:cf:1f:75:a8:50:65:e7:
                    74:3c:6f:99:9d:ae:f0:ce:b6:6c:d0:b4:f8:bb:44:
                    53:1a:ca:ad:ed:ca:34:87:f4:f5:30:5b:14:c9:51:
                    2f:75:b4:76:8c:45:ed:2e:2b:14:7a:55:65:d5:92:
                    53:81:66:65:4e:e1:00:3c:b3:c3:4b:26:10:c7:88:
                    7b:db:4a:43:2b:06:9d:a5:9b:0f:0c:b7:7e:8d:0a:
                    3a:e3:7b:a1:c6:8c:92:91:eb:1f:a6:bf:c4:40:8d:
                    c5:5a:ff:d2:36:bf:b7:8b:40:fa:df:7a:e0:68:3e:
                    fc:cc:09:8d:f2:f7:b2:31:6f:0a:d3:55:28:d3:8c:
                    70:7d:0a:9e:3e:6d:6e:b4:3c:58:d7:31:10:6e:c6:
                    1c:93:a8:08:60:c6:f4:b1:5d:62:75:49:d2:ad:3e:
                    63:5e:46:fe:b7:ea:5b:45:fc:a0:59:7a:b8:cc:38:
                    28:24:74:86:a3:6e:c8:f8:3a:1b:fc:74:2e:8c:23:
                    12:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:90:A8:B9:4D:DE:45:56:0C:7C:E2:14:D5:16:96:71:5C:52:00:77
            X509v3 Authority Key Identifier:
                keyid:EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:58:59:ab:d8:b5:0d:22:d1:0b:39:4e:ed:16:32:06:6b:d8:
         00:a7:ea:9a:47:b7:f1:b2:9c:42:74:59:92:fe:28:d1:2d:72:
         46:8e:ce:4e:cb:0d:30:62:13:fd:e0:f3:e0:02:e8:2e:ab:d6:
         64:2a:ff:05:8d:67:db:f9:ee:89:60:7f:9f:99:43:6d:b0:81:
         de:dc:1c:bd:1c:4f:81:26:ce:0d:f9:47:eb:05:29:f8:51:48:
         a5:21:79:04:9c:5f:b5:15:2c:84:ca:36:ee:9e:77:d0:12:c0:
         da:ea:81:a6:19:14:19:f2:a6:07:71:fa:e7:1b:45:c5:70:de:
         7d:c0:0e:82:c9:d3:72:71:db:14:52:f0:6d:c2:1d:5c:67:9b:
         6c:52:c8:e1:e3:2a:de:68:09:a1:19:7c:63:a7:d9:26:01:91:
         6b:41:41:32:de:a0:5b:7b:7b:60:36:e8:c9:92:36:31:1d:6c:
         b5:9e:70:2c:59:46:99:e1:98:fd:7a:df:c3:73:5e:3e:23:a6:
         23:d4:86:67:ce:8e:57:c2:e4:96:03:08:17:5d:89:e6:c4:a4:
         fb:60:cf:d4:2f:10:dc:94:9c:eb:3e:89:85:23:80:bd:21:b8:
         55:66:0b:18:9f:41:dc:1c:7a:4c:d1:e9:56:96:91:3f:72:6f:
         72:6f:90:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:57 2025 by rpki-client on console-fra.rpki-client.org