Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
File:                     MOEXssTnX9dTA9FNsD6eL0tyK4g.mft (raw, json)
Hash identifier:          lKZRd5kTt6ivWTfnX3dCb0QBj9SB5ufHIhFJDPyE0Rw=
Subject key identifier:   82:7C:72:DC:A8:4E:01:4C:41:B7:9D:F4:E8:47:A7:3B:DB:83:2D:C6
Authority key identifier: 30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88
Certificate issuer:       /CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
Certificate serial:       01967C44F20D4497400D64AFBA6A90761988
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
Manifest number:          86
Signing time:             Mon 28 Apr 2025 12:00:15 +0000
Manifest this update:     Mon 28 Apr 2025 12:00:15 +0000
Manifest next update:     Tue 29 Apr 2025 12:00:15 +0000
Files and hashes:         1: MOEXssTnX9dTA9FNsD6eL0tyK4g.crl (hash: G/hZ8Ru+yHqrV6BeaRIJvGYScKyHTEnfjELAlFN9EPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7c:44:f2:0d:44:97:40:0d:64:af:ba:6a:90:76:19:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
        Validity
            Not Before: Apr 28 12:00:15 2025 GMT
            Not After : Apr 29 12:00:15 2025 GMT
        Subject: CN=827c72dca84e014c41b79df4e847a73bdb832dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:70:f8:5b:38:c7:2b:13:a7:69:06:ce:8c:
                    5f:78:d2:70:ca:f7:77:4e:28:e4:af:39:46:0a:8c:
                    f7:96:a8:0a:a8:2c:e8:29:1a:fd:38:9f:a3:ea:fe:
                    0b:1b:f2:77:e8:ea:97:96:6e:b7:95:b4:08:6d:d0:
                    d7:c3:31:73:9a:e3:f4:4b:b3:ad:86:6a:bc:04:23:
                    2c:f5:75:fa:2f:41:ba:37:e7:4e:43:a1:60:9a:a8:
                    54:ed:74:39:da:71:6c:7d:7d:6b:f2:2c:01:f2:6e:
                    81:5d:cd:f0:d4:84:2b:12:00:79:59:a1:7f:37:6e:
                    82:14:a8:02:4f:0c:b1:82:9c:cd:d3:19:38:be:2d:
                    76:72:c8:b9:19:81:ea:78:15:08:4e:d7:e3:e5:6b:
                    48:bf:a7:e8:83:dc:c9:9a:c8:3f:8b:37:e8:29:45:
                    42:5e:e0:fc:e2:cb:cd:12:de:99:e8:84:75:45:85:
                    ec:fa:de:32:b1:02:f8:43:12:71:13:02:87:12:7b:
                    96:9d:0e:10:5a:da:c2:19:aa:75:3e:e9:8e:37:6d:
                    db:67:e7:37:d1:23:f4:0b:6b:51:e7:a2:30:6a:d3:
                    6d:31:ad:a9:7c:2a:da:5a:c2:f0:2b:69:1c:c8:9e:
                    73:bc:93:3b:d2:f0:cf:a4:cd:73:e7:86:a4:3c:4f:
                    43:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7C:72:DC:A8:4E:01:4C:41:B7:9D:F4:E8:47:A7:3B:DB:83:2D:C6
            X509v3 Authority Key Identifier:
                keyid:30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:05:4c:8f:5d:13:03:38:fb:36:fa:cd:c5:b2:2a:4a:a8:23:
         57:19:2e:c4:a5:a6:7d:3e:b7:49:ac:5c:30:7b:63:07:ec:9e:
         bc:a9:9d:ff:f1:f5:ae:af:7c:13:fe:11:0b:97:18:72:a3:3e:
         4e:ba:47:10:91:dc:47:5f:33:4a:f1:cc:a1:b0:23:0f:e5:c2:
         f2:d3:e3:d9:4b:14:4c:bf:0c:4e:ca:e6:55:4a:3e:88:5a:b1:
         29:e6:bd:fa:8b:af:08:4e:23:ed:73:1d:da:7d:a9:dc:eb:43:
         14:50:32:1a:ba:22:13:8c:28:57:3d:d1:f3:69:fa:f9:50:ca:
         4f:97:36:d5:c5:db:03:94:f6:7a:21:c5:ad:44:3f:00:c7:ba:
         07:18:0f:67:fa:0f:7a:08:21:aa:35:20:7c:5a:ac:78:2c:e0:
         d8:85:a9:65:8b:17:45:a4:d5:2f:98:45:58:b5:90:e4:6e:53:
         45:85:f2:c6:0c:ab:a0:51:fa:bc:f1:e2:87:70:ff:0d:8b:22:
         42:9d:2f:d5:98:41:0e:34:cb:8c:ce:c8:9d:8a:7f:0e:17:12:
         61:4b:5d:a5:50:11:ca:07:99:70:47:a0:4a:bc:70:50:5e:e4:
         17:e2:28:ab:24:54:15:d5:84:fb:d0:c0:01:54:75:fb:67:ff:
         51:fc:34:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:04:20 2025 by rpki-client