Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
File:                     rMSPelkSBYjUFw6igV5q5RvmvP8.mft (raw, json)
Hash identifier:          +naSfPkRL3AdF4f89GhHoaymToKyzWGJ3ez6YVJyidU=
Subject key identifier:   C3:80:62:54:D1:4A:58:06:14:00:AE:72:3C:96:89:B9:92:A3:93:15
Authority key identifier: AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
Certificate issuer:       /CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
Certificate serial:       019674FA4044AE3B362E205DAA782A97D5BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
Manifest number:          05A5
Signing time:             Sun 27 Apr 2025 02:01:19 +0000
Manifest this update:     Sun 27 Apr 2025 02:01:19 +0000
Manifest next update:     Mon 28 Apr 2025 02:01:19 +0000
Files and hashes:         1: 9aHsA3_Ynggs276_sCFsSz4MycM.roa (hash: qPhn5WBiWKeIsNs1cjOrwQopHwGcYtGq0upChF7kDvI=)
                          2: B0641shvDQ9p2BIgOLZHHAVjZSw.roa (hash: bvzmPdErYhIKPNksHZ+/ri9guEtRIMbmfasCvweNx4w=)
                          3: XrEnfRZ_aS_v253DnFB44a25MQg.roa (hash: cz7gfFsvOBuR8Jx82WCxw05R+M3PHvihU0+XIidI9k8=)
                          4: rMSPelkSBYjUFw6igV5q5RvmvP8.crl (hash: K5n+5Cy3iXVWnZy2DPKnEsl5pKCq66Bwfs8OXqSDqHY=)
                          5: sGNKOVYjDTSby3HV0d5UrQif03o.roa (hash: fEt1u0Pnd1OgLhD2ZLaC3l+U/rkH+wDu1pDtZ8ZNq+Q=)
                          6: xspPEiEQGiUUjQNMRrR4LTirJ8g.roa (hash: ij24ceO8VLn5TPnpgS1+UFG8iPy5YqTgJqLC4WCf/eM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:fa:40:44:ae:3b:36:2e:20:5d:aa:78:2a:97:d5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
        Validity
            Not Before: Apr 27 02:01:19 2025 GMT
            Not After : Apr 28 02:01:19 2025 GMT
        Subject: CN=c3806254d14a58061400ae723c9689b992a39315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:f9:35:84:94:fc:a2:98:41:56:7d:1a:94:
                    a9:c1:a3:d7:ad:3d:4b:66:4c:47:29:a9:21:4a:2f:
                    b5:a7:47:d7:0e:1d:2f:a6:af:fc:cb:ff:47:5f:f4:
                    b7:28:a9:5c:b6:f7:02:98:ef:1d:a0:15:9d:bc:4d:
                    be:4b:32:7f:a8:2b:45:7c:fe:9f:2c:20:0a:53:7a:
                    19:b2:3e:cd:87:11:fc:39:74:de:05:3b:73:21:fb:
                    2f:fc:bd:21:36:87:95:a0:da:36:c8:67:4c:17:5f:
                    ee:06:03:31:c5:4c:ba:a6:8c:e0:52:b9:65:53:78:
                    29:14:9f:8b:97:e3:59:0d:e5:f2:8f:76:69:20:c9:
                    1e:4c:b2:be:c1:3f:60:47:84:59:de:cf:3b:e7:fe:
                    90:16:d6:3a:8d:e9:2b:1d:78:38:26:36:52:c7:1a:
                    82:1c:df:83:f9:98:31:73:53:a5:20:29:e7:cd:81:
                    ec:fb:6e:75:60:2c:e6:91:dd:59:97:12:0e:bd:17:
                    7a:85:05:ba:82:c1:ab:ea:c9:3a:63:8f:66:ed:59:
                    97:34:48:4c:68:86:1e:a4:d4:55:24:c3:53:89:98:
                    12:76:54:1c:60:3e:4d:c1:9e:7b:eb:2f:e2:e8:eb:
                    e7:cc:e8:a7:96:35:e5:47:58:eb:0b:92:78:3f:db:
                    0d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:80:62:54:D1:4A:58:06:14:00:AE:72:3C:96:89:B9:92:A3:93:15
            X509v3 Authority Key Identifier:
                keyid:AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1f:9e:79:f7:65:61:ef:11:cc:9e:59:bc:80:5e:20:b3:e8:
         85:36:d2:e4:04:1b:aa:60:e6:1d:58:de:6b:af:a4:cd:42:78:
         73:8c:77:19:bc:ee:7f:f3:5b:f0:ec:83:a9:14:88:eb:5e:45:
         fb:df:74:70:9a:98:bd:81:a2:72:17:e7:74:1c:51:11:b2:8d:
         01:90:70:94:cf:b1:5c:0d:75:9c:89:e3:48:2b:3b:28:74:93:
         b1:72:b4:66:d9:dd:f7:96:31:6a:fb:b2:a2:af:f1:bf:79:39:
         51:08:4b:f6:27:f4:ef:7c:8c:71:84:4b:8f:cb:bf:c8:7e:bb:
         0c:7f:30:a0:fc:5c:dc:6d:65:fe:16:d8:d0:5f:29:38:f1:fa:
         20:65:f0:51:90:1a:f1:af:8b:24:d1:ce:6d:31:18:df:3c:ba:
         38:83:af:a3:4a:5e:76:5b:17:9d:65:ab:a6:49:89:99:f4:c8:
         86:9c:8c:e3:13:06:27:9d:20:fb:48:00:e5:88:b7:9c:76:60:
         a7:cb:7d:f5:2d:66:8c:e6:3f:40:c2:49:3a:dc:56:a6:f4:95:
         cc:5e:a3:f0:05:85:b5:28:c8:7d:a4:05:eb:4a:b0:ec:80:08:
         f4:3a:e8:0e:74:8e:fe:c6:bf:8f:39:e5:51:3b:ee:4b:0b:07:
         9e:1a:45:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:55:05 2025 by rpki-client