Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
File:                     Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft (raw, json)
Hash identifier:          P8pJsvmBizVcQWGF+pKttyTAxXIoz7Sc8+hDYygK2RI=
Subject key identifier:   56:5E:A1:DA:76:95:F4:6E:C2:43:D7:01:17:CE:F5:1E:69:D6:4A:F1
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Certificate issuer:       /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial:       0194BB604341EB90B924FA74CA595FB3DFA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
Manifest number:          1272
Signing time:             Fri 31 Jan 2025 08:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:35 +0000
Files and hashes:         1: 0wq7nKaScS0pbrNtDp5CCYa40I0.roa (hash: YLAnQ899fen9G75o1VQ4WG3xmrR1aE24+aqGBivGfPg=)
                          2: C61GwcJeRtAOI01pw_9OifWmDg4.roa (hash: 9PW5ZjiozCQ8wL+eGdZzyMhYF63EjKCPmt13mTOq/Zk=)
                          3: Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl (hash: JSX4wXZX4Oh2YjHqDnQkQErFJQOAztHS2v1T2g9vPvk=)
                          4: ItVJPK2mLPB9FvjsYvA3kQUwYMo.roa (hash: 1Z3qdwF8M3C1Jp6cQIQ9f/sPtjEFM+fpGWKdDGskejw=)
                          5: y9tjDMwj3FUxf0FE58l3CpQ2f7s.roa (hash: ER0udvIPerpU2WoViOM+UwzfexA+zzC+m8a4XFVRnXo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:43:41:eb:90:b9:24:fa:74:ca:59:5f:b3:df:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
        Validity
            Not Before: Jan 31 08:00:35 2025 GMT
            Not After : Feb  1 08:00:35 2025 GMT
        Subject: CN=565ea1da7695f46ec243d70117cef51e69d64af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e7:bf:da:01:8d:7b:27:47:38:8e:2b:d6:49:
                    1c:ae:02:f3:91:5d:ba:96:1d:93:ac:b4:14:d9:bf:
                    cc:63:3d:b7:d8:af:82:bf:29:57:9b:ef:f7:03:7c:
                    ea:d1:ea:3b:9f:8d:78:8d:1d:12:2b:de:9c:55:02:
                    9e:3c:bc:88:f9:80:66:27:be:a6:4d:91:f2:2b:4e:
                    fb:32:33:cf:5d:64:7a:04:cb:a7:63:98:b2:68:bb:
                    ec:c3:3d:d9:8c:01:9e:41:31:61:13:f8:f5:dc:a8:
                    cf:12:00:fb:a6:e0:32:3a:78:a0:50:11:fd:aa:7f:
                    4a:76:2b:11:eb:ce:7a:c8:d0:f8:34:84:7c:1d:5d:
                    68:b1:01:c7:97:85:e4:87:30:9e:90:f5:07:c5:06:
                    5c:bb:6c:86:f0:a3:41:d0:66:85:17:cd:41:02:ec:
                    14:55:c1:12:9d:d3:2b:36:a5:07:c7:b2:66:b7:65:
                    b6:cf:52:d6:9a:1e:ce:b5:f1:56:57:f4:cc:5f:d7:
                    1a:be:7f:06:fb:de:e6:4c:19:4f:b8:19:f1:96:59:
                    f8:cd:20:86:ba:7b:b4:f3:f3:f4:05:be:65:6f:44:
                    7c:02:92:ea:c7:83:2a:d4:94:57:ca:4f:f3:3c:dc:
                    4d:97:65:7d:42:c1:1f:ae:62:31:68:3a:32:2d:36:
                    b2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5E:A1:DA:76:95:F4:6E:C2:43:D7:01:17:CE:F5:1E:69:D6:4A:F1
            X509v3 Authority Key Identifier:
                keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d7:5c:c5:97:e3:df:10:65:e4:f3:6e:f3:7a:5f:f6:1a:1b:
         cf:e9:2d:c5:d7:75:6a:13:f2:5c:f1:89:60:4b:a7:7f:ad:7f:
         8b:f0:e8:38:36:31:7b:48:00:be:f5:62:f2:f1:df:cc:b0:ca:
         d3:2f:20:31:91:e7:cc:5d:4a:f4:c2:62:a1:2f:8a:fa:b3:09:
         55:3c:b7:dc:4e:2f:81:35:99:5b:bd:73:cf:58:b1:f1:ed:49:
         39:27:c0:cb:ba:c2:5d:a2:8c:c1:df:c4:a5:2a:21:ef:86:d4:
         83:e2:b3:dc:e6:c1:02:88:d7:67:ac:9d:30:99:1f:1d:cc:c4:
         f0:bc:10:83:e1:63:a4:27:ba:9f:5e:a1:34:94:e4:d3:31:6f:
         57:fd:c2:32:65:f9:9e:c4:b9:21:d2:ee:54:d6:4b:4c:6c:51:
         dc:5c:95:fd:9a:78:a6:9a:1f:86:41:f5:cd:ac:9d:b8:c5:78:
         07:e1:bb:e1:1b:ec:15:1a:ef:5e:e3:3f:3d:6f:4e:c9:03:cc:
         7d:ea:d0:47:29:98:60:13:0c:f0:1d:7d:ff:38:7b:66:c4:3a:
         6c:8e:81:3e:72:1b:ac:4e:bd:fb:60:45:0d:ae:28:d4:cc:b0:
         cf:da:0f:09:2e:fc:f8:d1:44:a7:a5:30:a0:ca:a7:6e:5a:aa:
         21:12:58:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:02 2025 by rpki-client on console-fra.rpki-client.org