Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
File:                     J582UuRFj6ABxnOKQUJbB-cMkaE.mft (raw, json)
Hash identifier:          9wLzWPIEsrmadCcpz4UKmIbAUCcvrrst5YgYzpxPjf8=
Subject key identifier:   48:51:A9:46:12:DB:68:48:44:5E:20:85:24:B0:A9:32:6D:0E:41:A5
Authority key identifier: 27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
Certificate issuer:       /CN=279f3652e4458fa001c6738a41425b07e70c91a1
Certificate serial:       019677FBCD7041F38332124B0C9CD05DF3C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
Manifest number:          1188
Signing time:             Sun 27 Apr 2025 16:01:52 +0000
Manifest this update:     Sun 27 Apr 2025 16:01:52 +0000
Manifest next update:     Mon 28 Apr 2025 16:01:52 +0000
Files and hashes:         1: J582UuRFj6ABxnOKQUJbB-cMkaE.crl (hash: Xinv8HZxpuE4oPQLogYaOmtjerT4H1ljsjTgWkGdoK0=)
                          2: M2Kelg9WxvDQBMzJqioPXlZdWcE.roa (hash: mQA6DzGnOtrnPFm8tdzPvg5lmx/E+CRmFPMNFXsiBjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fb:cd:70:41:f3:83:32:12:4b:0c:9c:d0:5d:f3:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279f3652e4458fa001c6738a41425b07e70c91a1
        Validity
            Not Before: Apr 27 16:01:52 2025 GMT
            Not After : Apr 28 16:01:52 2025 GMT
        Subject: CN=4851a94612db6848445e208524b0a9326d0e41a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:78:75:66:d8:ce:5c:08:d5:cf:81:7b:db:39:
                    db:5f:b2:d7:31:ce:f0:3b:32:5c:ff:d5:d8:47:f2:
                    7b:29:d9:dd:2a:66:6c:e1:a1:20:5a:38:2a:19:b3:
                    91:7b:8a:c0:6e:b9:5e:8b:99:3e:f3:d1:e4:65:94:
                    d5:6c:7c:d7:72:2e:a0:32:5b:ec:8b:93:ec:64:f8:
                    a1:43:84:81:99:25:c7:0b:2f:7d:6c:ee:ad:ac:68:
                    74:2f:94:48:4d:ec:8d:b2:bf:93:91:c6:77:c3:83:
                    58:cc:1f:2a:41:b0:2d:d1:e8:a2:8b:6f:65:e2:39:
                    3a:f0:91:d2:85:07:f6:bf:12:56:f7:45:34:80:ed:
                    94:d0:72:35:d9:08:ba:c0:4d:c8:76:8f:14:02:98:
                    76:a7:39:cf:92:fa:29:1d:56:91:1c:ec:b4:66:cb:
                    b0:1f:21:6f:d3:e9:50:2e:58:4e:e1:3a:f0:58:cb:
                    15:db:13:36:85:0d:b5:b0:73:41:d8:63:d7:ca:1a:
                    96:ab:7c:47:fe:27:bb:ef:f1:e4:4a:aa:5e:03:31:
                    fe:11:9c:f5:48:10:1b:af:9c:6c:f4:c2:92:4d:cd:
                    ee:96:cd:ff:56:79:19:62:bb:3b:00:9c:e1:bf:a1:
                    32:45:a4:9f:a6:95:a8:4a:8b:fc:96:7c:5d:14:7f:
                    e6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:51:A9:46:12:DB:68:48:44:5E:20:85:24:B0:A9:32:6D:0E:41:A5
            X509v3 Authority Key Identifier:
                keyid:27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:46:24:6c:00:81:e5:57:66:48:d3:51:16:61:cb:a0:19:33:
         25:ec:a2:60:5a:59:0e:2d:7a:22:1d:db:0b:6c:5d:f0:21:04:
         36:c3:03:d7:37:0f:04:28:25:26:7f:fe:e5:0a:30:06:dd:ce:
         8d:ed:2e:b3:08:81:97:67:8d:01:59:0f:e7:d1:a7:65:af:4f:
         09:39:9d:36:76:04:3f:9a:58:41:f7:a2:1a:42:7b:5b:78:47:
         7e:72:b1:a6:20:d9:24:6a:f4:06:df:2f:b7:2d:ff:cd:76:31:
         c2:64:26:6c:84:28:ff:22:9e:23:b5:c3:c4:d3:cf:af:65:f0:
         40:29:3b:27:69:24:37:f7:82:14:23:3d:8b:a3:61:3b:c5:69:
         eb:22:a5:ab:d3:68:5a:cf:56:03:f0:7c:60:a3:3c:a4:ba:96:
         ff:6c:90:6c:54:b7:f2:27:c4:d6:d3:1f:b1:ce:bf:2b:df:77:
         36:a1:1a:c0:ad:f8:85:c6:cb:46:20:70:2d:fa:82:2f:2e:7e:
         1c:ec:41:ef:6a:d3:e6:0a:f7:55:45:3c:1b:b2:d8:6e:6d:f8:
         29:83:be:38:c8:f2:8b:c4:95:6e:d4:42:49:18:2e:7f:3e:ee:
         96:41:a6:87:e4:cb:24:f4:69:c5:31:2e:3e:91:fa:eb:58:85:
         30:f7:51:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:01 2025 by rpki-client