Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
File:                     7crL2itLMjHQi1HxbxsqfAgjetE.mft (raw, json)
Hash identifier:          IrVLeruEGL4Ex87vyprbnr/ZoFRqvoVJq6KYdYjScZs=
Subject key identifier:   E6:CF:50:91:DE:22:B6:E0:19:E9:EC:63:72:6B:F8:32:D0:59:DF:EB
Authority key identifier: ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1
Certificate issuer:       /CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
Certificate serial:       019680224165B3E76E302B4F0AAE13DEFF24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
Manifest number:          0180
Signing time:             Tue 29 Apr 2025 06:00:50 +0000
Manifest this update:     Tue 29 Apr 2025 06:00:50 +0000
Manifest next update:     Wed 30 Apr 2025 06:00:50 +0000
Files and hashes:         1: 7crL2itLMjHQi1HxbxsqfAgjetE.crl (hash: YuzgBBtFnpcUuuMw1no41ki89Uqlo1rWQhDhTkO1uJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:22:41:65:b3:e7:6e:30:2b:4f:0a:ae:13:de:ff:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
        Validity
            Not Before: Apr 29 06:00:50 2025 GMT
            Not After : Apr 30 06:00:50 2025 GMT
        Subject: CN=e6cf5091de22b6e019e9ec63726bf832d059dfeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a3:c7:03:ff:76:da:52:55:42:c1:40:29:f1:
                    54:13:02:2c:1b:30:41:fe:83:cf:0d:f4:6f:64:d1:
                    26:99:d5:ba:11:54:24:2f:9e:17:e9:e9:02:67:81:
                    ad:28:29:85:2d:74:06:03:2c:dc:b2:cb:3e:ea:75:
                    1e:86:56:ce:3b:e6:1f:26:a6:1d:e3:27:eb:ad:ca:
                    20:04:6d:55:ad:6c:bb:9d:79:5e:ab:76:da:af:d3:
                    69:d4:c3:09:8f:db:30:33:4e:15:6f:41:4c:ad:13:
                    4a:75:72:a4:d1:0a:1f:e5:7c:cb:ed:d9:da:86:87:
                    bf:10:95:a0:fe:56:cd:a6:53:61:ea:27:db:d7:e0:
                    57:28:5a:84:ea:2e:c5:71:3d:aa:8a:b9:5f:dc:ec:
                    a6:98:0a:c0:8d:7e:b5:a2:45:9b:f4:96:61:4e:de:
                    f1:87:9f:30:c7:fd:b3:fd:e6:06:95:09:2f:bf:2b:
                    b5:09:69:c8:b7:98:8c:52:9a:b4:3e:00:45:95:da:
                    6b:bc:20:28:da:cc:8b:79:a1:39:05:ca:a2:90:c2:
                    b3:80:65:91:5d:ea:49:8e:89:24:df:de:71:66:58:
                    3e:1c:d5:42:65:36:83:c1:90:4c:10:26:a7:d7:df:
                    3f:54:68:4d:12:02:79:8f:19:56:24:5d:4a:a5:9c:
                    e8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CF:50:91:DE:22:B6:E0:19:E9:EC:63:72:6B:F8:32:D0:59:DF:EB
            X509v3 Authority Key Identifier:
                keyid:ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:04:52:6a:99:c1:74:c7:ed:a3:35:75:ce:ca:d9:d1:86:8c:
         ad:5f:4e:70:73:86:61:2d:a4:59:e4:6e:71:04:65:5f:8e:cb:
         4c:bb:ed:b1:8b:9c:55:fa:b5:91:5a:a2:31:35:6c:fb:92:a0:
         0a:e8:ec:d8:6d:f2:33:a9:28:c0:f0:c7:c3:88:a7:ca:6f:55:
         5b:e8:18:ab:fa:1e:d6:e6:3c:b6:31:6c:43:aa:bc:d8:32:8d:
         15:9c:4d:b1:ef:5f:90:73:74:cc:92:02:a3:2d:8c:0e:db:e4:
         fb:39:5a:a1:0c:be:c7:48:9f:43:15:97:ac:f4:7b:47:c5:67:
         29:ac:57:4f:b7:73:4f:74:3f:6f:46:54:62:59:12:31:9f:68:
         4e:ba:18:68:43:58:8f:3d:1c:52:aa:91:3e:bf:f3:ad:53:2b:
         38:29:91:d2:d7:de:d3:53:fd:e3:ec:b8:78:96:2b:94:92:d5:
         d8:07:1a:ca:31:61:52:c5:a1:e5:82:07:c2:ee:9c:d3:66:6c:
         df:9d:b7:e8:85:ee:fa:f7:db:28:0f:d0:72:d9:24:d0:85:19:
         64:43:23:a6:94:1e:a6:e8:d8:ac:57:e5:a4:d0:f5:84:9c:d0:
         82:7d:6f:9d:b5:58:76:b1:47:c3:42:6e:60:e0:dc:22:f9:a8:
         ae:76:61:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:55 2025 by rpki-client