Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
File:                     CAdgG8REIsjSOjzXK_6hu_KgVjo.mft (raw, json)
Hash identifier:          CaJR4UJRjPKf0F+LsD5o9EXNFxvvnvkQHto8+D8aW2E=
Subject key identifier:   10:A5:A2:47:15:AE:65:15:D2:8C:A3:13:F3:44:B8:07:0D:36:F9:D9
Authority key identifier: 08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
Certificate issuer:       /CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Certificate serial:       019677C371F7A007ED38DB299817FB93EAF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
Manifest number:          1510
Signing time:             Sun 27 Apr 2025 15:00:19 +0000
Manifest this update:     Sun 27 Apr 2025 15:00:19 +0000
Manifest next update:     Mon 28 Apr 2025 15:00:19 +0000
Files and hashes:         1: 3O8SjjWsPfLABa3jrVc6djhtyEs.roa (hash: HeQvLqUlnnayNmN/r7cxXFLVXADWQxZs3mFygr2LMHc=)
                          2: CAdgG8REIsjSOjzXK_6hu_KgVjo.crl (hash: eWonqN97k9Wad1B9TF/zIzu2/dUxwOQdYH9ne9DgrHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:c3:71:f7:a0:07:ed:38:db:29:98:17:fb:93:ea:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
        Validity
            Not Before: Apr 27 15:00:19 2025 GMT
            Not After : Apr 28 15:00:19 2025 GMT
        Subject: CN=10a5a24715ae6515d28ca313f344b8070d36f9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:11:50:65:c2:07:b1:8e:cc:fa:da:2f:ea:ee:
                    e9:7b:f0:6b:f3:04:18:72:76:21:03:9b:f5:e3:f9:
                    ea:d5:b0:1e:f0:49:26:2b:f0:44:a4:2a:6a:6a:bb:
                    cf:44:c6:d9:67:8a:01:e4:2b:01:26:09:24:9d:5e:
                    80:fd:3d:3d:d9:eb:97:f8:15:f1:e2:a5:c0:5c:96:
                    7b:52:4a:03:42:9e:95:e8:58:cf:77:c5:ea:d1:08:
                    e6:07:01:79:39:10:96:eb:4a:b5:71:74:52:79:8d:
                    ba:c9:66:7a:44:d5:42:3f:57:19:d9:e0:a2:13:78:
                    6d:0e:24:55:21:bf:5d:a1:7c:ca:64:70:db:84:fb:
                    89:3c:2f:88:e8:53:27:c1:07:c9:92:dd:0b:64:02:
                    6c:99:28:e3:ce:3a:3e:8d:4d:62:d4:bf:aa:99:3d:
                    01:da:1f:20:81:32:ac:cb:cd:84:3c:86:0e:37:9c:
                    57:bc:a3:d8:9a:58:4a:bd:e2:4c:5e:a9:84:6a:d5:
                    4f:8c:6c:2c:43:d9:b9:43:54:d5:63:e5:e6:4d:cb:
                    5f:6f:4d:40:b7:0a:04:2a:c4:d7:08:ad:0a:d6:66:
                    1c:e6:7d:f9:6c:9c:07:8d:2b:2a:36:c2:9c:8c:ff:
                    8f:0e:83:90:80:a0:ed:f0:48:79:d5:f8:31:48:1e:
                    ce:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A5:A2:47:15:AE:65:15:D2:8C:A3:13:F3:44:B8:07:0D:36:F9:D9
            X509v3 Authority Key Identifier:
                keyid:08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:9c:1f:86:d4:41:b6:3f:a9:be:72:d8:3b:e0:cd:9f:5c:3f:
         4a:c3:73:10:f2:e6:44:d1:1a:15:65:a6:d6:ae:8a:3d:7a:91:
         35:12:d2:0d:bd:b2:48:bd:52:75:59:dd:f7:10:4d:cd:bd:d3:
         52:f0:11:b6:02:e0:4d:f7:0f:1e:4b:68:a0:ea:72:c7:8a:2c:
         3f:5a:16:43:46:5e:b2:f3:89:f3:05:b4:eb:04:b1:92:30:70:
         57:f0:69:7f:a6:e2:5e:06:f1:a8:bc:71:c1:0d:37:88:47:e7:
         a6:d5:98:c7:35:10:96:98:3f:46:83:a4:7b:1e:20:3a:67:69:
         f1:c3:dd:27:48:d9:e5:46:06:e3:7b:c8:b5:3e:e7:50:40:9f:
         bb:01:3f:a4:89:99:ba:7c:bc:0f:b3:47:99:fa:9b:1d:a2:ca:
         e8:94:99:b9:54:fd:96:4f:8c:76:20:a3:82:51:8a:cd:9a:7a:
         91:80:66:09:e1:b5:29:05:42:2a:06:ea:a0:61:8b:4c:8f:3f:
         30:3e:12:31:ba:bd:22:9e:fb:b8:2e:d8:38:60:f7:f9:56:a6:
         81:95:94:85:21:0c:dd:e8:89:68:57:7a:b6:ec:0c:6a:9c:18:
         68:9b:3b:87:d7:49:d5:8a:b7:51:bf:bc:bc:69:6d:59:c3:3d:
         c5:9e:70:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:18:39 2025 by rpki-client