Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
File:                     uCtyJxX5G-eSoew8Med-2doFy-E.mft (raw, json)
Hash identifier:          5Rhni4rPczPG1uWQcY/Seu/fCGzU1zFqGSs0m9KBPc0=
Subject key identifier:   1B:FE:47:98:00:0A:D0:9E:57:4C:B9:02:0A:F7:B8:83:0F:90:63:82
Authority key identifier: B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1
Certificate issuer:       /CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
Certificate serial:       01968391955B861977A13FDC1E0D1A3B7308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
Manifest number:          151D
Signing time:             Tue 29 Apr 2025 22:01:18 +0000
Manifest this update:     Tue 29 Apr 2025 22:01:18 +0000
Manifest next update:     Wed 30 Apr 2025 22:01:18 +0000
Files and hashes:         1: uCtyJxX5G-eSoew8Med-2doFy-E.crl (hash: xoRxlpmAFH8bQWe+8cLBlmAyp6Joosv3qKOBuf2WhgQ=)
                          2: uXdBuhKzl7TqagYxbnMVKfuzZgw.roa (hash: 439m9an3WKHP1JzPsBM0Kr1+N4e9+/KuslEwF/6KLxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:91:95:5b:86:19:77:a1:3f:dc:1e:0d:1a:3b:73:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
        Validity
            Not Before: Apr 29 22:01:18 2025 GMT
            Not After : Apr 30 22:01:18 2025 GMT
        Subject: CN=1bfe4798000ad09e574cb9020af7b8830f906382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:74:18:1a:e1:df:a4:6f:f6:00:45:e7:07:1c:
                    fd:37:36:f1:e9:09:33:39:e5:1c:a5:5e:ca:c6:de:
                    60:93:ef:65:4c:c8:bd:b8:f0:21:b3:42:60:7b:e8:
                    b9:f7:15:cc:ec:8b:f5:16:0c:54:19:32:d0:ab:2f:
                    df:eb:e8:76:91:25:65:a0:0e:4f:12:cc:c2:eb:c4:
                    e2:54:50:88:8b:88:66:21:57:40:b3:0d:89:9d:09:
                    5d:3d:fc:b7:8d:33:dd:0a:ec:63:9b:b0:df:e1:f7:
                    2b:9f:bd:fd:e2:b7:cd:cc:e3:17:be:ae:98:06:38:
                    13:fb:79:7d:7f:16:97:e4:47:b2:4b:6e:d6:1c:84:
                    b6:63:5e:e7:b5:4e:a7:49:33:0f:82:f3:9b:4b:4a:
                    77:29:4a:25:61:de:88:68:be:63:0a:ad:09:96:5e:
                    e2:48:b7:93:73:e5:6a:44:d0:d9:37:8f:0d:78:c5:
                    27:42:d4:9d:1d:93:60:ac:4b:96:15:1c:21:7b:21:
                    ca:8d:b4:0a:a7:95:e8:6a:4e:8e:7c:51:77:49:ca:
                    f9:c0:cb:2c:0c:c7:fa:60:5a:9b:ad:3f:0e:c3:04:
                    03:9d:54:8b:4c:a3:75:d2:c9:8d:5d:24:6f:de:db:
                    bb:26:67:7e:83:4f:ee:4a:79:84:07:fe:0a:08:08:
                    19:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FE:47:98:00:0A:D0:9E:57:4C:B9:02:0A:F7:B8:83:0F:90:63:82
            X509v3 Authority Key Identifier:
                keyid:B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:de:ac:e6:cd:43:34:77:3d:f6:3c:0c:0c:81:6e:fc:5e:ea:
         46:a8:61:3e:c1:d0:bb:af:43:88:19:05:45:e8:1a:96:d7:27:
         52:97:77:a4:21:ce:4b:83:7e:d1:13:f5:8f:28:4f:95:9f:79:
         b1:0a:0b:a4:d7:8d:1a:70:34:f9:4a:8c:cb:c7:d1:b3:ea:d5:
         8b:64:53:48:c3:24:25:90:e7:b5:d5:23:f4:43:39:cc:3f:ea:
         02:60:f9:93:77:c9:84:25:f1:a1:9f:68:68:ea:e0:4c:58:02:
         ab:a9:e4:a5:62:87:7c:1e:d7:f3:04:35:a0:88:5f:56:94:8b:
         c2:2e:83:3a:b7:b4:f0:e3:08:cf:f8:53:f9:dd:39:f3:ac:14:
         4e:c5:e2:f1:4b:ae:ae:2d:24:64:d7:b9:73:eb:58:48:42:7e:
         ab:e9:eb:91:98:33:58:ad:68:ad:31:d9:21:b3:ef:2e:b4:f7:
         c4:62:cb:8c:05:f8:f6:10:f4:72:20:5c:4d:3a:eb:48:df:ee:
         1a:e8:19:bd:68:b6:d7:87:35:25:19:f5:72:22:eb:ac:d6:bc:
         3f:e3:0b:01:57:f6:0a:25:94:b3:ba:63:af:69:b6:44:8e:e3:
         78:bd:aa:12:a2:36:f1:58:ce:67:c2:8d:ec:9f:ef:0f:ae:0b:
         8b:63:cf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:55:57 2025 by rpki-client