Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
File:                     1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft (raw, json)
Hash identifier:          mCSFZIoSWb+JViy4eJO7aXDuBpIXjmLirJKmUoSz6dY=
Subject key identifier:   6E:AD:F8:D3:6C:98:85:3F:DE:E8:4D:17:05:04:9C:96:72:FD:A1:B4
Authority key identifier: D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA
Certificate issuer:       /CN=d46c9be46cba3051066233ca4f9628a26df8fcca
Certificate serial:       01967A56C9D77FBB86F312F0E05630CBBB03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
Manifest number:          0E8D
Signing time:             Mon 28 Apr 2025 03:00:30 +0000
Manifest this update:     Mon 28 Apr 2025 03:00:30 +0000
Manifest next update:     Tue 29 Apr 2025 03:00:30 +0000
Files and hashes:         1: 1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl (hash: DcZzRYh6jWY4640HStFm+Vlr8sacLh6yswwk09w/t7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:56:c9:d7:7f:bb:86:f3:12:f0:e0:56:30:cb:bb:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46c9be46cba3051066233ca4f9628a26df8fcca
        Validity
            Not Before: Apr 28 03:00:30 2025 GMT
            Not After : Apr 29 03:00:30 2025 GMT
        Subject: CN=6eadf8d36c98853fdee84d1705049c9672fda1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:29:47:e7:b4:97:45:f7:68:d4:e5:36:e0:5b:
                    91:b5:9d:61:3c:45:66:2e:a3:71:45:be:31:56:3b:
                    b0:32:c1:ac:c7:19:98:c6:76:65:17:3b:d8:9d:fc:
                    be:be:52:95:0b:ab:7b:8d:7b:2f:b1:c5:07:ff:d7:
                    cc:11:87:47:7d:51:62:9d:d5:bf:5d:66:04:e2:1a:
                    4a:b6:b4:a9:3e:40:26:bc:91:85:15:fa:4b:26:4d:
                    13:17:9b:3c:14:55:9a:ac:e0:16:8b:51:14:dd:69:
                    b8:4d:0a:5a:cf:13:01:29:9a:49:8b:e1:e8:6f:ff:
                    c6:b2:c8:21:a3:dd:d0:ba:85:6a:a2:58:38:d1:70:
                    38:ae:43:ee:9c:04:a5:a4:5d:31:e6:c3:cc:5a:76:
                    2e:68:3e:84:7c:7d:73:99:3c:6f:98:af:f1:a1:d4:
                    ba:ec:44:17:13:56:e8:7c:9f:65:2a:20:4a:6a:39:
                    5d:f7:05:2b:d7:62:0b:3f:75:59:37:0b:a5:76:63:
                    2b:b7:22:16:95:2b:d6:c6:a8:ce:a3:20:dc:3c:68:
                    3d:2e:92:70:6c:61:bc:4b:20:6c:85:d0:90:75:85:
                    a1:77:40:7d:f4:05:57:92:45:c6:49:f1:f7:92:01:
                    4b:61:b7:6d:b7:ee:e1:ba:76:c1:84:4d:2d:78:4f:
                    0a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AD:F8:D3:6C:98:85:3F:DE:E8:4D:17:05:04:9C:96:72:FD:A1:B4
            X509v3 Authority Key Identifier:
                keyid:D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:59:d7:fb:da:4e:32:50:e2:b5:b7:90:72:63:b1:db:68:dd:
         a8:43:5b:f5:b8:0d:6c:9d:4b:94:bc:8d:8c:4a:8f:65:4d:3a:
         09:44:77:c2:c1:97:35:9f:eb:2e:ef:2e:46:54:31:14:51:31:
         1a:f0:09:c0:86:4c:f7:80:f7:d9:d2:52:24:f7:00:87:f7:88:
         ba:a5:7c:01:35:33:7f:3d:05:e4:c4:28:db:1f:95:7b:4d:0c:
         fe:7c:68:cc:f0:cf:34:3a:9a:4f:de:92:51:88:b3:ae:3d:ff:
         56:a4:00:c7:e4:8e:fb:33:19:c0:2b:a9:a6:14:f2:4f:8c:eb:
         b3:4c:e0:ec:e6:4d:49:f4:14:8a:a7:0d:34:ed:bd:ca:26:21:
         0f:32:22:84:a5:f9:b2:df:3c:ef:5a:db:0c:ce:e2:6b:42:55:
         25:31:12:89:a6:52:fe:f8:45:37:34:57:66:b8:13:44:3d:40:
         6c:f5:e9:22:74:aa:83:7f:54:58:09:65:37:25:b0:7e:28:df:
         9c:f3:af:7e:3a:79:ff:fe:bc:02:bd:0e:40:f4:38:6f:d4:13:
         73:91:03:ef:40:fa:0b:7a:fb:e3:ed:42:07:04:a3:fb:c3:dc:
         70:ca:e1:90:bb:71:11:90:3d:44:53:5b:09:f9:dd:71:3a:c9:
         bb:8c:25:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:13:05 2025 by rpki-client