Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
File:                     kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft (raw, json)
Hash identifier:          zWo1DQHM267Hb/W25yXnS+c6OAZOffoNQYM6/QOsmjg=
Subject key identifier:   86:F1:D5:62:0E:3E:8C:1A:17:92:3F:ED:92:C1:54:EA:18:7D:D0:3C
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Certificate issuer:       /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial:       0194BB603C1734D6C682CCEBC5667F52D113
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
Manifest number:          1175
Signing time:             Fri 31 Jan 2025 08:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:33 +0000
Files and hashes:         1: CqEnPa0b4387Yb8gdu7piqZKu5s.roa (hash: 7FXFrw8ym051yYy3atG+YQp+VQXGW2aiyGL+xx2k/Xk=)
                          2: XtIL7quorkF1D-_EHiY0b7NsohQ.roa (hash: q5vGrOEbLzDUn3MKsUHJKxeeKv09uan8ihtlp9ven8o=)
                          3: kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl (hash: G1P6RTF/483jlf6A6Gqatq4rCNZHReTgqNt+X8uBzXw=)
                          4: rLGKVyUKBREDsm9aK6Yw80lJkwg.roa (hash: rOtQmfozC5J8XHLeIeIIoLbvmJ2uwQ3sbWfTJEEZWVo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:3c:17:34:d6:c6:82:cc:eb:c5:66:7f:52:d1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
        Validity
            Not Before: Jan 31 08:00:33 2025 GMT
            Not After : Feb  1 08:00:33 2025 GMT
        Subject: CN=86f1d5620e3e8c1a17923fed92c154ea187dd03c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ac:13:d6:4f:6c:bf:ef:bb:2a:cb:0c:4d:99:
                    2a:92:57:9c:1e:1e:16:c2:b4:8a:0e:20:07:7d:e3:
                    87:45:60:6d:3f:71:b3:b8:db:4a:05:72:26:d3:dc:
                    a8:97:2a:40:67:8e:b4:62:f8:4c:07:c0:f9:70:35:
                    1f:a9:1e:c9:59:5d:e7:c6:79:1f:34:9b:3a:ad:d5:
                    6d:0e:18:81:0c:ce:c4:41:2a:52:cd:b6:64:af:90:
                    a4:3a:49:fe:ff:60:1f:f0:4b:e9:41:c6:22:c2:1e:
                    7b:2d:73:7f:ad:4a:09:f5:92:b6:37:f4:22:a4:fd:
                    69:e1:fe:74:0c:d6:fb:44:2c:4e:bb:b1:89:ee:0d:
                    df:e6:9e:82:74:be:ec:b9:7e:53:0e:2c:db:54:80:
                    68:b7:c7:ea:68:62:99:03:7c:cd:f2:da:31:ac:c3:
                    fa:2c:0a:43:e3:bc:d3:2a:32:68:fd:11:74:b7:00:
                    b5:d9:b7:0d:5e:e4:a4:f2:b2:38:05:d6:5a:fc:3f:
                    aa:da:67:d2:29:fa:96:89:f0:71:4f:de:e4:31:24:
                    b2:a6:8a:28:f0:6f:92:d3:28:3e:88:60:16:21:21:
                    80:a9:83:d2:8a:c8:60:d4:98:9b:98:97:57:5f:d9:
                    17:39:7d:8f:98:77:12:63:50:c5:cf:65:61:2b:33:
                    4a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F1:D5:62:0E:3E:8C:1A:17:92:3F:ED:92:C1:54:EA:18:7D:D0:3C
            X509v3 Authority Key Identifier:
                keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a4:4e:aa:28:3f:64:0f:b8:af:3a:76:25:91:6f:ef:08:98:
         b5:f9:2d:40:2b:d4:f7:72:32:c9:7c:f3:fd:e7:ff:c4:fa:6b:
         03:19:7d:4e:78:17:09:b1:f8:c5:ec:08:10:5a:1a:83:5c:05:
         4b:8c:b2:28:5c:ab:ca:16:0b:2a:4f:cb:e9:c3:96:ef:10:99:
         7d:c5:d6:bb:18:cb:69:04:38:13:61:6a:dd:8e:56:4b:87:a0:
         a3:09:c4:d8:51:e0:ec:e4:ca:65:a4:96:cf:97:66:62:3d:05:
         ff:8a:6f:b7:b4:de:47:e2:20:cb:c8:58:40:cb:56:1d:b0:04:
         31:b1:ae:57:87:50:32:8c:6d:65:7d:92:89:9e:eb:4b:63:1b:
         e8:a6:ba:68:29:43:46:8d:c4:89:98:44:25:ab:aa:9d:d1:ff:
         f3:fa:42:b8:f2:f6:33:57:42:0b:1a:1b:35:b9:0c:46:a6:25:
         6d:74:07:3a:3c:8d:03:e9:a5:93:df:80:fc:d5:81:3a:bd:4b:
         e1:3b:1e:bb:d5:e0:73:a1:a7:c2:48:bf:eb:02:0d:f7:0a:e9:
         66:ec:07:01:6e:cb:77:3f:a3:8c:3c:7a:2e:4d:71:b3:87:ec:
         c5:10:a4:75:5c:7f:18:6a:2c:fc:bf:d8:14:f0:2a:d5:cc:df:
         8d:52:70:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:02 2025 by rpki-client on console-fra.rpki-client.org