Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
File:                     81296PvNv0KF6HvkkO1vzbRqBfs.mft (raw, json)
Hash identifier:          hCRyLi7tG6LNB6AmG834Ki5rwww1xtdEHVX6BvmY/yo=
Subject key identifier:   90:1E:B3:88:FD:1C:5C:DA:E3:05:51:8A:45:03:F9:43:72:B2:8A:35
Authority key identifier: F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB
Certificate issuer:       /CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb
Certificate serial:       0194BAF24CE54FE1481E25A2A6D5F415AC38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
Manifest number:          04AD
Signing time:             Fri 31 Jan 2025 06:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:29 +0000
Files and hashes:         1: 81296PvNv0KF6HvkkO1vzbRqBfs.crl (hash: gV+4gwAW1Qy9pX2rgmMfOgXhNfYs7pB7funiA0DVPFU=)
                          2: XwCCzqbTFIbNt4tDIiPwvE7s53o.roa (hash: tvLAuw3pgR4MhRPh7vqk9g2rkTx+zeY+ExS4WrgC8y4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:4c:e5:4f:e1:48:1e:25:a2:a6:d5:f4:15:ac:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb
        Validity
            Not Before: Jan 31 06:00:29 2025 GMT
            Not After : Feb  1 06:00:29 2025 GMT
        Subject: CN=901eb388fd1c5cdae305518a4503f94372b28a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:15:6d:1f:10:de:fc:15:63:1d:cd:8a:f2:81:
                    a0:1a:56:a6:d1:85:d5:68:e7:d1:55:6e:30:5b:79:
                    4a:6c:cc:7b:75:96:8c:bb:73:02:20:bf:56:8e:c4:
                    ac:19:8c:40:8a:59:d5:d5:65:26:24:06:fc:28:7e:
                    e0:47:57:c2:8b:9a:1a:74:4a:3f:6f:fe:5c:dc:80:
                    36:98:aa:49:c5:d8:36:f5:c1:9b:54:f0:6d:be:a8:
                    8e:7b:2f:44:6d:b2:cc:bf:6f:28:3c:98:c9:f5:94:
                    b4:db:c2:29:76:90:ac:ef:da:de:a3:18:92:fe:75:
                    29:70:40:a3:8b:7d:e9:19:22:93:83:d7:13:67:c3:
                    c8:12:74:8b:3b:37:ac:7a:30:5f:24:c4:24:ac:85:
                    4a:55:db:fa:8a:f3:ab:24:c7:05:7f:fd:8f:bf:3f:
                    b9:f8:23:95:3e:93:51:2d:3f:eb:58:c7:93:98:18:
                    16:46:3f:4d:82:d1:fb:77:0b:5f:40:97:f4:97:e2:
                    18:db:c9:d0:7e:7e:14:d6:7e:b1:fe:c5:fc:14:20:
                    30:3c:8a:9e:72:8b:0b:ff:95:50:c5:df:f8:a9:44:
                    9a:a3:6b:12:c3:11:8f:49:5e:88:71:c6:73:fb:20:
                    55:04:fb:f5:2d:70:77:1d:e3:50:ed:85:da:cd:08:
                    bc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1E:B3:88:FD:1C:5C:DA:E3:05:51:8A:45:03:F9:43:72:B2:8A:35
            X509v3 Authority Key Identifier:
                keyid:F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:91:58:13:51:51:28:34:2e:3c:a2:ae:b2:53:fc:d8:1d:95:
         50:a4:5a:5d:de:7b:b2:50:fb:73:eb:ac:f0:a3:f9:0e:20:25:
         ea:fe:f5:6d:c8:3b:30:dd:dc:0d:ea:3f:38:1c:7a:57:3e:9e:
         e9:0c:fb:3c:f5:dc:d5:07:b2:1b:2f:bc:62:35:5b:43:34:84:
         05:d1:a0:27:92:bb:ec:43:f3:15:6a:a1:c8:a2:1f:b7:35:9a:
         60:e3:ec:ec:2f:42:2b:9d:13:10:8f:93:86:16:38:ba:50:76:
         86:68:16:4e:59:3f:7e:6c:56:0c:1c:93:b1:77:2d:16:80:6e:
         0a:48:fd:30:c8:6c:d4:99:8e:25:b8:a4:06:7d:28:ec:04:42:
         03:a2:51:e3:a3:4b:29:49:bb:4c:ad:77:f9:6f:1c:ca:70:cb:
         89:33:14:5f:50:fc:71:49:fa:c5:87:9c:63:bf:fb:68:07:f6:
         8d:04:0b:4f:1c:16:e0:e2:f7:2c:26:1e:e5:f8:36:d5:ce:2b:
         3e:15:d0:48:87:87:b7:32:51:82:c0:0e:3a:81:e7:2c:5b:77:
         69:04:84:e5:8b:41:1f:b5:f0:4f:62:bf:00:b0:55:c8:5e:33:
         6c:60:7a:87:ce:7d:20:96:eb:50:3e:05:02:d7:8c:84:18:3d:
         4a:30:a4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:10 2025 by rpki-client on console-fra.rpki-client.org