Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft
File:                     VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft (raw, json)
Hash identifier:          NflfeQtaP2ADP+cSaAeYpSytKoPEpc4x4qlh7HoqGAs=
Subject key identifier:   CC:D2:67:86:28:B9:64:A6:02:C9:32:B2:CD:41:35:21:F1:9F:5F:5C
Authority key identifier: 54:E7:3F:21:FE:CF:8F:8C:50:58:92:F7:06:4D:E1:A0:A4:CF:8E:7F
Certificate issuer:       /CN=54e73f21fecf8f8c505892f7064de1a0a4cf8e7f
Certificate serial:       019679EA212326F491BF61D1C618D0638376
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft
Manifest number:          0B62
Signing time:             Mon 28 Apr 2025 01:01:49 +0000
Manifest this update:     Mon 28 Apr 2025 01:01:49 +0000
Manifest next update:     Tue 29 Apr 2025 01:01:49 +0000
Files and hashes:         1: VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl (hash: V7IKIxzqRTiwOw7bALKDnoqJo/qGMGiL7zBlHqGQyU4=)
                          2: aS2z1lZE9xnUUTE6JXQy1aNfHG8.roa (hash: G/7B1VXAASY7QAsDWedOiKdkvLm/fHkdhD3zP6wIl7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:ea:21:23:26:f4:91:bf:61:d1:c6:18:d0:63:83:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54e73f21fecf8f8c505892f7064de1a0a4cf8e7f
        Validity
            Not Before: Apr 28 01:01:49 2025 GMT
            Not After : Apr 29 01:01:49 2025 GMT
        Subject: CN=ccd2678628b964a602c932b2cd413521f19f5f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:47:8f:74:7c:22:81:a2:e8:16:2a:42:35:
                    cd:c7:46:d7:c3:c7:1d:57:5e:97:8c:a8:8d:43:2e:
                    11:31:b1:9d:eb:8c:5a:6d:3f:9f:2a:6e:f3:18:13:
                    73:c6:b9:06:46:b0:4d:bb:06:39:ae:2b:22:e2:6f:
                    0f:7a:ad:8b:26:05:d6:23:0b:40:5a:95:c2:6e:25:
                    9c:06:3c:ae:06:51:1f:11:b8:7e:86:6e:98:e9:a7:
                    96:48:e9:ff:cc:d2:bb:13:b5:3e:b5:9a:66:87:d3:
                    49:52:e1:38:2d:9a:7b:74:2b:5d:81:d2:97:aa:e3:
                    b0:6a:d9:4b:7f:ef:29:df:e4:dc:d6:fd:df:ee:b7:
                    ea:4a:54:d5:b3:8d:64:e3:97:2e:14:bc:5f:9b:82:
                    d2:f0:5a:ab:71:cc:8a:4a:e0:d2:53:ff:5a:b9:ff:
                    eb:d5:0c:24:13:79:28:be:6e:46:6a:3b:17:00:9a:
                    25:2a:04:8b:e0:82:67:66:b4:a7:7d:63:76:e8:00:
                    f9:3f:ef:9a:f8:3a:af:cf:52:00:a1:64:81:d9:80:
                    b8:84:81:50:af:41:a0:1f:f4:e3:f5:9e:c9:27:bd:
                    e9:9c:cf:8a:b2:39:a7:17:5e:46:05:b4:8f:5c:61:
                    87:47:9d:38:88:7c:5f:a1:47:e1:19:0b:88:b5:2e:
                    3b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D2:67:86:28:B9:64:A6:02:C9:32:B2:CD:41:35:21:F1:9F:5F:5C
            X509v3 Authority Key Identifier:
                keyid:54:E7:3F:21:FE:CF:8F:8C:50:58:92:F7:06:4D:E1:A0:A4:CF:8E:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8d:cb:d7:ff:78:df:27:d8:92:4c:6a:da:ba:d0:f0:dc:2a:
         fc:8e:d2:ce:d8:c8:6f:8b:02:9a:e4:30:22:2d:52:52:85:b2:
         d5:3a:ab:32:0a:5c:c9:20:cd:bc:34:ee:59:45:d5:c3:39:0b:
         7a:0a:d6:ec:41:dc:f3:c5:61:01:72:45:59:24:a2:0b:34:6e:
         3f:c2:d1:a7:f9:3f:c5:b3:e9:ca:b8:76:64:dc:ea:44:b7:96:
         89:df:f5:7a:c8:c2:c0:39:5c:ee:26:f4:da:7a:7e:c7:6f:ec:
         5c:51:0c:e3:83:00:0a:f1:d2:22:fd:bf:de:fb:fb:43:ad:e8:
         f6:63:c0:ea:ad:76:ad:95:d9:d3:3d:91:e2:2a:1a:1c:99:3a:
         a8:32:84:83:4a:bb:91:ae:60:2f:df:af:39:4b:be:c1:fb:ea:
         bd:16:a0:83:86:cf:78:e0:3c:3d:bb:40:00:89:b2:c2:76:2b:
         f7:0d:c5:c7:33:8f:3a:81:d5:4f:92:e6:98:d8:53:54:7e:85:
         62:08:76:33:ff:29:22:7e:b1:2f:35:11:ce:aa:ef:8b:b2:0c:
         02:b9:35:5e:9e:fc:54:00:b0:ef:59:ad:89:7c:dc:95:7c:84:
         27:84:f6:95:f4:3e:c8:21:7f:3b:f4:a8:2d:ce:f3:8a:e2:41:
         6a:8c:91:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:18:36 2025 by rpki-client