Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
File:                     dE3Tr9fM584AqerGfgvKmb63Kao.mft (raw, json)
Hash identifier:          LUEGZqKOKafZ2NqP/LUf0jFyZ2AzNyKHe5prq8WEUbY=
Subject key identifier:   BD:6B:7D:BB:2B:67:C9:0D:8A:3E:86:56:BB:B0:4D:69:E0:94:CE:DD
Authority key identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
Certificate issuer:       /CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Certificate serial:       01968134C100C832B15565042BEB695C38F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
Manifest number:          1514
Signing time:             Tue 29 Apr 2025 11:00:40 +0000
Manifest this update:     Tue 29 Apr 2025 11:00:40 +0000
Manifest next update:     Wed 30 Apr 2025 11:00:40 +0000
Files and hashes:         1: dE3Tr9fM584AqerGfgvKmb63Kao.crl (hash: Va4B/TLLoXPCOZam0QatCAzTkRJsuPwMt4B/REgONSI=)
                          2: fOC0mLVVaWFlMUvT0z_PddjsHw8.roa (hash: BmfmQSKAMKow/2vkZFChgOrrtOQvA5Kh+ohq4iFZyJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:81:34:c1:00:c8:32:b1:55:65:04:2b:eb:69:5c:38:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
        Validity
            Not Before: Apr 29 11:00:40 2025 GMT
            Not After : Apr 30 11:00:40 2025 GMT
        Subject: CN=bd6b7dbb2b67c90d8a3e8656bbb04d69e094cedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:51:7c:96:26:d1:51:52:10:ed:81:1a:6a:b6:
                    89:58:fe:4e:b8:f3:73:4e:7e:50:5f:ea:d0:13:d0:
                    2a:e3:4c:5f:d6:32:4d:e2:ac:df:e9:c1:78:1f:5e:
                    b1:4e:5e:f4:9f:48:e3:4e:1b:c2:33:3b:6e:14:0f:
                    d0:a8:c9:6a:01:ea:75:13:73:da:91:03:a4:df:0c:
                    8c:77:22:6f:89:b6:e3:97:29:3e:a9:18:61:ad:71:
                    59:6e:1d:0b:5e:3e:41:f4:4d:b9:99:a8:1b:01:da:
                    a7:80:ce:2d:95:ea:33:59:6f:d2:0c:64:4e:59:05:
                    3b:3f:81:72:f8:81:68:8c:09:6e:cd:05:73:74:bc:
                    63:6a:5a:01:b0:1d:ef:43:45:dd:60:74:1d:18:b8:
                    9c:2f:8e:26:af:85:63:a7:94:44:7a:33:b2:10:5b:
                    0c:9c:91:dc:34:fe:3f:09:8b:e4:5c:6b:2a:6c:a1:
                    b3:ee:46:64:f3:7a:27:9b:f7:6e:2b:5f:e6:da:c3:
                    f0:57:48:70:24:02:98:13:7a:4c:c3:cb:cc:34:58:
                    20:a5:ce:69:d8:1d:0d:f4:73:36:43:86:2c:c7:11:
                    57:73:9b:f4:df:92:c6:86:38:3a:5a:cb:d6:f6:9d:
                    c2:3b:b1:b0:fd:80:4d:70:e6:02:57:b7:1e:58:bc:
                    d2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6B:7D:BB:2B:67:C9:0D:8A:3E:86:56:BB:B0:4D:69:E0:94:CE:DD
            X509v3 Authority Key Identifier:
                keyid:74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e5:83:81:d0:42:b0:d7:e1:17:1e:51:a5:a9:d2:a3:07:a3:
         0c:16:45:83:98:e5:35:70:99:fa:26:09:08:2c:be:5c:1d:19:
         70:2c:31:99:81:ff:2d:96:98:9f:b4:4c:9d:e6:3e:09:8a:28:
         39:18:44:03:0f:9d:67:64:26:c0:56:87:10:47:2d:04:4c:4c:
         76:ff:8e:28:63:e6:50:0b:ad:a6:cc:e4:86:d9:31:2e:b6:1f:
         b0:e3:15:b3:7c:00:50:92:8d:87:3e:30:c9:51:1e:50:13:bf:
         e3:34:55:a0:d1:ec:06:9c:5a:21:35:a1:90:a5:c2:8d:ad:17:
         f0:c3:81:58:63:ef:6f:ee:e1:cd:75:9d:15:a5:9c:cc:6b:4a:
         e7:72:07:58:27:ca:f4:ca:a4:f4:92:bb:03:7d:27:7d:48:c9:
         e6:4f:e1:5c:e2:84:c1:b0:1e:2b:12:aa:62:01:dc:30:7b:f4:
         7f:6a:41:17:89:cf:19:ba:15:03:6f:98:8f:aa:18:39:d2:f9:
         7f:c8:c2:70:d4:90:b6:5a:80:c3:cd:83:82:5b:4c:97:51:da:
         10:b5:dc:de:91:56:90:4b:fc:41:1c:83:25:48:aa:82:ef:75:
         31:6a:ca:99:69:d0:3e:c9:8f:c5:dd:05:05:d7:a3:70:47:fe:
         49:13:0b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:54:36 2025 by rpki-client