Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.mft
File:                     sxkSbzPdwqJ24LNRcv5c2qsaVBY.mft (raw, json)
Hash identifier:          UzvJrnH6cQj1h2FjqCUhzB7b8eXA51vC1tGmiZ1WnVQ=
Subject key identifier:   B9:B4:D3:52:D3:B5:D0:5B:77:9E:EB:78:F2:3F:D7:DB:05:02:46:B8
Authority key identifier: B3:19:12:6F:33:DD:C2:A2:76:E0:B3:51:72:FE:5C:DA:AB:1A:54:16
Certificate issuer:       /CN=b319126f33ddc2a276e0b35172fe5cdaab1a5416
Certificate serial:       01968C25EBB15FA28B7BDD7EB94506067B26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sxkSbzPdwqJ24LNRcv5c2qsaVBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.mft
Manifest number:          06BB
Signing time:             Thu 01 May 2025 14:00:17 +0000
Manifest this update:     Thu 01 May 2025 14:00:17 +0000
Manifest next update:     Fri 02 May 2025 14:00:17 +0000
Files and hashes:         1: sxkSbzPdwqJ24LNRcv5c2qsaVBY.crl (hash: iuZv1x7hAMYKog3PBnACL2YPKoA4s13D9Ux7yVO+wio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sxkSbzPdwqJ24LNRcv5c2qsaVBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 14:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8c:25:eb:b1:5f:a2:8b:7b:dd:7e:b9:45:06:06:7b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b319126f33ddc2a276e0b35172fe5cdaab1a5416
        Validity
            Not Before: May  1 14:00:17 2025 GMT
            Not After : May  2 14:00:17 2025 GMT
        Subject: CN=b9b4d352d3b5d05b779eeb78f23fd7db050246b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2a:d1:0a:ea:96:34:85:39:5b:cf:a1:56:0c:
                    72:1e:49:aa:e7:e7:66:7c:4c:be:f6:9c:a0:1a:30:
                    a4:22:8c:33:65:61:96:53:39:aa:b7:72:82:27:c7:
                    3e:df:fd:24:dd:da:d8:f5:39:43:5f:39:95:ce:26:
                    2d:a1:6c:13:69:bc:b2:49:bc:01:b4:c0:a3:3a:6b:
                    48:4d:e0:63:8f:02:cf:5f:f2:61:53:6d:e5:6c:fc:
                    ef:64:f5:c1:2d:e5:51:f3:b5:64:79:24:ee:ec:be:
                    13:bf:f0:6d:3b:8f:a6:02:f0:6d:46:fc:06:c5:9a:
                    ff:eb:f6:a5:57:5d:a0:5f:8e:45:64:83:1a:92:9a:
                    f4:e2:e3:bd:35:7d:51:e5:25:dc:9f:9f:f0:76:14:
                    e9:e5:28:30:32:19:a7:a5:16:6d:4a:3c:e2:7b:53:
                    36:1e:f7:9f:43:3d:07:b8:c5:55:a8:6a:75:d0:d3:
                    73:ed:52:cd:6b:4c:c8:76:ca:e5:c5:53:84:ff:c4:
                    52:09:fe:31:c2:34:b9:08:d1:2e:5e:d7:bf:dc:3e:
                    8c:6f:24:26:f4:81:bd:cc:a0:3a:9f:96:57:49:e0:
                    63:7e:00:98:e0:59:5c:f8:f0:37:5d:62:a6:27:a2:
                    3e:ca:61:5b:9f:96:a1:fa:6a:8c:53:d2:e7:31:e0:
                    8f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B4:D3:52:D3:B5:D0:5B:77:9E:EB:78:F2:3F:D7:DB:05:02:46:B8
            X509v3 Authority Key Identifier:
                keyid:B3:19:12:6F:33:DD:C2:A2:76:E0:B3:51:72:FE:5C:DA:AB:1A:54:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxkSbzPdwqJ24LNRcv5c2qsaVBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:cf:80:87:52:1d:e6:c8:72:6f:60:58:76:1c:29:d2:c0:ac:
         df:6f:7f:3f:d4:f3:c7:ca:6c:21:ce:9a:73:0e:f5:3f:50:6a:
         aa:9f:b2:48:a2:d1:29:f0:51:75:2d:93:02:10:fd:1f:44:ef:
         8c:1c:6e:1a:a1:0f:2d:3b:ef:b2:11:fc:69:7a:0c:69:b0:62:
         fc:84:56:a0:db:c4:51:a1:d9:af:6a:b3:64:37:3b:8b:cf:bf:
         d7:35:13:5e:40:12:92:67:d0:2a:52:f9:64:64:95:a3:ee:18:
         a5:da:52:92:60:f3:40:ef:96:d5:58:66:76:f6:96:af:c0:ff:
         1a:06:6f:85:3c:4a:c2:5a:ca:73:d5:50:0a:8c:3a:d9:c1:d7:
         aa:c6:c4:aa:e4:b9:44:35:6f:3d:7d:34:73:d5:c1:4d:fc:11:
         99:8f:14:0c:30:85:6c:1c:f6:34:aa:6c:7e:e6:94:af:80:6b:
         85:45:0d:65:2e:ff:34:c2:4b:62:aa:dd:24:94:d9:f7:22:af:
         ba:8f:ef:a3:65:1a:1d:66:e3:47:37:af:cc:6f:f7:5c:8a:99:
         4a:8a:f9:20:4f:7b:92:ec:da:b0:64:7d:fa:ab:d1:2b:1b:30:
         cb:4c:4a:43:bd:f2:65:9e:16:cd:e1:0f:d3:05:df:c1:e5:6e:
         21:1e:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:20:31 2025 by rpki-client