Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
File:                     huGrpgDN5ewxgxmxVZS2irlslWw.mft (raw, json)
Hash identifier:          KVOz2zrEpuHY7IGH3J6HMO1EtwtTXFjJkvnZFKRRzGA=
Subject key identifier:   97:51:BB:3F:A9:AE:F5:B6:C4:72:18:4F:B5:16:DA:4F:29:8B:DC:BF
Authority key identifier: 86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C
Certificate issuer:       /CN=86e1aba600cde5ec318319b15594b68ab96c956c
Certificate serial:       0194BB2959A34E1C1382749C5817B9C7D6E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
Manifest number:          0D2C
Signing time:             Fri 31 Jan 2025 07:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:36 +0000
Files and hashes:         1: Q7vNAscnF-4OhkgVonOsxeJBDjA.roa (hash: 0ioDa0FuPDgR/Y4yLPplBITqL6YDwLS4b5dcomdJX+s=)
                          2: huGrpgDN5ewxgxmxVZS2irlslWw.crl (hash: h+vTaHsSq0fwT+Wd7KymFBux1x3HMbPROAIwRdbuk8I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:59:a3:4e:1c:13:82:74:9c:58:17:b9:c7:d6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86e1aba600cde5ec318319b15594b68ab96c956c
        Validity
            Not Before: Jan 31 07:00:36 2025 GMT
            Not After : Feb  1 07:00:36 2025 GMT
        Subject: CN=9751bb3fa9aef5b6c472184fb516da4f298bdcbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1c:16:c0:57:57:bc:8b:7b:80:65:58:9b:1a:
                    b3:52:74:5e:da:2e:ac:fb:28:99:25:5b:1a:14:08:
                    11:a0:b5:59:c6:63:c3:37:60:ce:94:e2:18:9a:7e:
                    25:42:84:d3:88:0b:b6:c0:87:58:d3:0f:b5:dc:32:
                    1e:a3:c5:e9:79:e2:12:39:8a:0a:b5:57:54:a0:93:
                    2b:b2:4f:a0:af:05:10:6a:2f:d8:85:39:2b:af:b1:
                    3e:31:71:1d:87:e3:b1:d5:ff:c4:2f:e8:f4:1d:ac:
                    b7:26:d4:0d:be:a8:75:d8:32:a1:df:56:46:55:c1:
                    82:ce:5b:34:5d:c3:a7:f9:0f:60:d1:b7:0e:5a:fd:
                    51:9e:1e:9a:4d:fa:d7:3f:a7:b8:87:2d:c7:3d:29:
                    32:ce:dd:fb:4f:c7:2c:be:96:c4:c0:fa:e3:bb:d4:
                    22:fe:50:73:b5:77:66:03:7e:70:fd:d5:b6:41:32:
                    32:91:41:e8:3b:99:59:9b:de:b5:a3:02:dc:5c:d9:
                    a0:03:26:34:78:88:05:c7:2e:f4:67:9b:58:aa:c3:
                    65:79:f8:41:30:40:0c:57:8f:9f:fe:d6:05:07:2e:
                    9f:81:be:5d:d4:54:d9:e5:03:7d:93:d9:02:52:cc:
                    62:65:7d:49:e2:5c:4e:44:5e:54:27:e9:17:eb:77:
                    37:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:51:BB:3F:A9:AE:F5:B6:C4:72:18:4F:B5:16:DA:4F:29:8B:DC:BF
            X509v3 Authority Key Identifier:
                keyid:86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:6b:62:e5:30:68:e1:47:10:9e:18:b2:8f:73:11:05:5c:c1:
         c4:e9:62:33:28:42:65:ce:ba:7f:c6:bb:aa:09:58:dd:9c:dd:
         da:2c:6f:a4:25:7d:07:e8:1f:05:6c:2e:8d:e3:76:37:ad:be:
         16:59:a4:71:28:94:80:94:1e:71:6a:d7:cc:9c:e0:0d:a2:52:
         d0:03:b9:89:c5:05:4f:d2:1e:4c:a0:2d:c8:4c:3d:2f:0f:b4:
         1c:df:e9:69:74:59:11:68:f0:e0:4e:61:ea:c7:be:33:b4:5d:
         f4:64:a4:ac:cf:79:39:8d:17:df:1a:f2:d7:26:88:3d:7b:ea:
         14:54:d0:19:17:73:72:20:93:e9:65:c8:bf:67:03:db:66:d6:
         ef:3d:57:b5:d0:d2:10:6a:f2:ce:ac:b9:25:43:c8:c8:1c:06:
         47:a1:15:fa:e2:83:b7:0b:66:f5:9e:3b:88:81:67:a3:da:79:
         a1:8d:b0:b5:c2:81:1c:b9:55:d8:27:ca:ed:c1:1f:0f:5d:81:
         79:24:33:4b:57:5f:cc:82:0b:09:62:0a:a1:6f:e4:51:fc:8f:
         28:3a:e2:ab:f7:a4:35:88:67:f9:ab:4c:4d:71:91:5e:f4:e1:
         fb:e1:25:a8:18:ee:e5:d4:6a:83:f8:88:7c:89:33:a0:a3:f5:
         4b:19:44:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:01 2025 by rpki-client on console-fra.rpki-client.org