Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
File:                     6ocBJxa2bugiZCwvChuQFItceyk.mft (raw, json)
Hash identifier:          cGqT/ExQNgbCat8nDb8yu9qiyGNoB/iVqxa6IUvD8WM=
Subject key identifier:   59:AF:6D:48:D1:41:87:31:79:E4:DF:0E:21:EA:BB:B4:E3:82:E1:A1
Authority key identifier: EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
Certificate issuer:       /CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Certificate serial:       019677FAD071D043EC5CC49447C6351A61A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
Manifest number:          0C5F
Signing time:             Sun 27 Apr 2025 16:00:48 +0000
Manifest this update:     Sun 27 Apr 2025 16:00:48 +0000
Manifest next update:     Mon 28 Apr 2025 16:00:48 +0000
Files and hashes:         1: 6ocBJxa2bugiZCwvChuQFItceyk.crl (hash: vK4xdNLPB1wrugEb2NkI7bFmOa9CxxpH03tLKNwEePg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fa:d0:71:d0:43:ec:5c:c4:94:47:c6:35:1a:61:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
        Validity
            Not Before: Apr 27 16:00:48 2025 GMT
            Not After : Apr 28 16:00:48 2025 GMT
        Subject: CN=59af6d48d141873179e4df0e21eabbb4e382e1a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:12:67:5f:40:d9:02:4b:9a:4f:b2:dd:61:26:
                    0a:28:69:ef:cb:40:f4:07:13:10:59:d6:e7:5a:56:
                    a8:08:79:2b:8b:40:8b:66:e3:3a:0a:33:53:50:ea:
                    04:b0:bb:f2:2e:8d:85:f9:70:c0:2b:9c:b9:03:14:
                    3e:30:a2:d5:a6:a0:b2:d8:f2:ca:8a:3c:f7:dd:17:
                    31:24:36:4f:a3:39:03:39:54:d7:85:7e:76:37:f3:
                    44:c6:6b:69:15:c4:7b:dd:4d:74:2b:f6:b1:b0:9d:
                    67:35:b7:37:3a:67:68:8f:34:02:64:17:98:0e:77:
                    89:cc:40:e6:21:3c:b8:8f:99:c6:bb:75:34:61:ef:
                    25:74:71:c3:bc:00:d8:68:39:ae:c3:12:00:e2:8e:
                    aa:64:48:76:c2:04:2c:75:c1:6a:72:42:76:65:e2:
                    21:46:21:c6:0e:f8:13:db:37:3c:da:c3:a0:ed:fb:
                    80:aa:6b:12:5b:96:15:a0:61:eb:41:2e:b5:26:d3:
                    0b:98:ce:20:bf:49:50:a3:e6:14:c3:a6:0d:a6:54:
                    12:0a:df:78:2f:f5:ab:11:42:1c:4a:8f:b8:fe:4c:
                    f7:2f:37:ad:de:4d:c2:16:c6:26:e1:b8:9d:c4:8d:
                    d0:8a:0c:4a:c6:32:4a:a1:58:2b:ae:72:9f:0d:b0:
                    39:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AF:6D:48:D1:41:87:31:79:E4:DF:0E:21:EA:BB:B4:E3:82:E1:A1
            X509v3 Authority Key Identifier:
                keyid:EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:67:79:b1:60:fb:5b:e6:10:10:14:3b:0b:14:aa:27:b5:05:
         1b:c9:8a:06:85:bc:51:ae:38:87:ed:29:ab:c3:00:b1:13:ab:
         17:fa:81:50:49:0e:e6:f9:f6:1a:b9:ac:92:cb:61:ca:d0:0e:
         80:8d:40:05:e9:d4:6a:dd:0b:d2:89:bb:4c:20:da:42:e2:26:
         5a:70:16:df:45:95:b9:2c:d2:e5:32:ea:2a:87:a5:06:1a:f5:
         08:18:73:4f:23:ac:a9:f4:50:14:99:fe:f7:79:9f:ca:23:27:
         e7:cc:7b:ac:57:39:77:c6:ed:b6:af:6e:c7:54:64:c1:ec:25:
         35:62:94:a9:eb:7a:ed:72:52:fa:50:50:bb:5d:2a:d7:e4:36:
         d0:6f:5a:f0:fd:31:95:58:ad:7e:ca:12:21:57:48:92:84:e2:
         f7:57:28:af:51:23:b0:c1:9f:fd:5e:23:0d:65:bf:e4:d7:53:
         dd:5f:9f:c6:53:6b:77:cf:b1:a0:1c:ea:69:8c:bb:b6:9c:89:
         fa:a8:27:98:31:fa:bf:da:3d:55:ce:42:54:cd:9e:31:3e:b8:
         6e:77:63:62:bc:d3:01:b6:36:cd:72:b7:18:57:74:bc:29:12:
         a2:a7:a2:54:a3:54:88:6e:d4:b9:a9:2a:88:79:89:77:57:4e:
         ef:84:4c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:23:55 2025 by rpki-client