Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft
File:                     6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft (raw, json)
Hash identifier:          CzFfptGe8c8TY+xjiKlgoq7af5GRYYCmXre5S6Pll5M=
Subject key identifier:   7C:A3:38:CA:C4:35:AA:E0:7F:28:2F:97:E8:E1:9A:19:70:7C:28:62
Authority key identifier: E8:7A:1D:93:EE:4E:87:CD:55:09:9A:B8:AD:25:EE:C0:1C:4F:D2:4C
Certificate issuer:       /CN=e87a1d93ee4e87cd55099ab8ad25eec01c4fd24c
Certificate serial:       019677FB3E6207B7C1A142FC96A604F458F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Hodk-5Oh81VCZq4rSXuwBxP0kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft
Manifest number:          0A54
Signing time:             Sun 27 Apr 2025 16:01:16 +0000
Manifest this update:     Sun 27 Apr 2025 16:01:16 +0000
Manifest next update:     Mon 28 Apr 2025 16:01:16 +0000
Files and hashes:         1: 6Hodk-5Oh81VCZq4rSXuwBxP0kw.crl (hash: o30gWYI+w7wD2EXC9eCquQJtAvts1GBiORVM7cgqoCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Hodk-5Oh81VCZq4rSXuwBxP0kw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fb:3e:62:07:b7:c1:a1:42:fc:96:a6:04:f4:58:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87a1d93ee4e87cd55099ab8ad25eec01c4fd24c
        Validity
            Not Before: Apr 27 16:01:16 2025 GMT
            Not After : Apr 28 16:01:16 2025 GMT
        Subject: CN=7ca338cac435aae07f282f97e8e19a19707c2862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cf:f0:de:53:d3:53:20:2c:3d:71:f1:58:26:
                    f6:bb:0e:2c:28:01:2e:97:30:4d:b2:90:31:6d:9f:
                    03:fe:15:a7:c8:3f:b3:60:f9:9a:72:d4:02:97:aa:
                    59:3c:f2:cc:e6:49:80:c3:10:21:a9:62:e3:69:7d:
                    3b:09:28:b2:c9:47:66:4e:fb:26:aa:ec:68:cf:8e:
                    da:18:d5:af:55:98:7d:6b:53:80:73:04:52:89:10:
                    cd:87:ad:41:1b:26:dc:ed:1d:a2:79:db:70:70:d4:
                    65:5a:44:03:f5:96:ea:92:dc:f4:93:74:73:b6:c1:
                    2a:e2:da:a7:05:b8:79:69:ca:e6:a8:59:f0:ca:8a:
                    de:a5:f6:62:74:0d:37:0f:45:d0:f1:96:34:e7:96:
                    a0:ec:9a:8c:31:8a:00:e8:6b:74:09:c1:fa:c9:86:
                    f6:7e:c4:28:cb:d5:e1:27:c2:41:cb:9a:d2:65:23:
                    52:cc:f4:74:8e:7e:6b:16:bb:b5:54:8a:06:78:a0:
                    1c:45:56:eb:e0:98:d5:ea:d1:43:e6:60:da:2f:90:
                    58:4f:32:78:44:e5:18:3e:69:3c:48:0c:39:cf:c5:
                    9f:94:bc:2d:97:61:24:4f:82:14:43:2d:e7:da:4f:
                    f8:e6:96:06:bf:95:1e:0e:e9:ce:7c:36:9d:b2:b2:
                    01:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A3:38:CA:C4:35:AA:E0:7F:28:2F:97:E8:E1:9A:19:70:7C:28:62
            X509v3 Authority Key Identifier:
                keyid:E8:7A:1D:93:EE:4E:87:CD:55:09:9A:B8:AD:25:EE:C0:1C:4F:D2:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hodk-5Oh81VCZq4rSXuwBxP0kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:01:04:d1:7f:59:45:a4:14:c8:ee:8a:6f:d7:8e:d9:eb:9c:
         40:80:e5:02:b1:1d:8d:31:f9:a0:58:55:9c:c3:73:17:79:b5:
         06:b3:07:7b:17:27:a2:65:22:c2:01:69:4e:a4:0f:d6:72:b1:
         84:37:e8:25:d7:47:3c:b0:61:03:c9:10:8c:16:47:63:ba:76:
         1e:0e:bd:95:b8:86:74:22:b8:44:eb:07:7f:a4:1f:76:38:8d:
         7f:57:b5:d4:17:c2:af:fb:c0:66:fb:9e:fd:11:65:50:da:a8:
         37:fb:cf:7d:64:d5:83:33:ac:d4:c9:33:4c:c8:2c:2b:83:75:
         5c:f9:a5:49:95:36:c9:32:01:91:5f:36:33:76:20:6b:1d:4a:
         b2:32:89:97:67:df:89:db:ac:8a:5d:6d:25:bb:8e:a7:64:1d:
         29:f4:96:65:c1:13:a9:69:d7:b8:a9:0a:83:cc:73:dd:c4:49:
         c0:c9:de:05:61:9f:e1:90:01:e7:5a:71:3d:df:1a:37:ff:4e:
         84:03:f9:0d:be:a3:c3:d7:d1:66:07:5e:15:ac:94:c3:42:05:
         4e:de:98:c0:25:3d:f5:2c:4a:ad:fc:4d:d5:64:e9:ba:d9:7d:
         60:ec:84:d2:e4:63:f4:fa:29:88:e5:71:40:29:37:59:d4:a1:
         14:72:06:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:30:51 2025 by rpki-client