Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
File:                     ilZohaHW1VRFRs0oXYbE7_6qPCw.mft (raw, json)
Hash identifier:          O1DXpl1c8TnQj/vLIpBTsqv6VzsB8r9BGx50X01VXLs=
Subject key identifier:   D7:16:32:04:AD:E0:FB:11:6B:8E:AD:AC:1F:D3:00:C3:18:52:F1:CE
Authority key identifier: 8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
Certificate issuer:       /CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Certificate serial:       019675303CC6A33CEF5A0F3C6AEE7354A4FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
Manifest number:          1510
Signing time:             Sun 27 Apr 2025 03:00:17 +0000
Manifest this update:     Sun 27 Apr 2025 03:00:17 +0000
Manifest next update:     Mon 28 Apr 2025 03:00:17 +0000
Files and hashes:         1: Lb8vbukOa5hlTRoTkAdj0qnnj8o.roa (hash: gDIkSUwNSGV5eKv6/1wqJs7MzcoYqV9u1fGfL9hM0j0=)
                          2: ilZohaHW1VRFRs0oXYbE7_6qPCw.crl (hash: 1dwthIDhcNsRwRH8f4HCXGIQnBYmn3QXIN25MyG0EUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:30:3c:c6:a3:3c:ef:5a:0f:3c:6a:ee:73:54:a4:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
        Validity
            Not Before: Apr 27 03:00:17 2025 GMT
            Not After : Apr 28 03:00:17 2025 GMT
        Subject: CN=d7163204ade0fb116b8eadac1fd300c31852f1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:90:e3:80:81:30:ae:4d:43:ce:67:de:92:18:
                    09:94:6e:84:2d:f5:c5:40:0d:61:a2:bc:35:4c:43:
                    84:a1:aa:52:aa:4f:a8:24:73:3c:05:b7:76:82:2c:
                    a4:9d:37:f0:49:7a:cc:b2:a1:c0:39:b8:21:b7:3c:
                    5d:b9:a8:d1:27:a0:40:c2:09:43:c5:b1:4f:61:62:
                    52:b9:aa:fb:13:a6:41:b6:c0:17:55:3d:7e:fe:de:
                    fd:06:11:6b:d3:73:28:b8:26:2d:34:53:da:2c:55:
                    51:d7:a5:0d:5b:d7:f7:0c:ef:54:3a:03:54:3f:0d:
                    8c:e0:0d:5d:83:18:0a:e5:2b:50:0b:2c:7e:1d:1e:
                    62:59:d3:a1:5a:45:c5:70:96:2a:47:88:c5:11:0e:
                    2e:3a:d7:40:c9:59:16:e9:af:cf:80:d8:bc:3b:6e:
                    e5:e8:21:c4:58:49:85:13:57:00:d2:e1:10:c3:2e:
                    e1:8d:bb:8b:1b:37:c6:24:1e:72:fb:da:ae:c6:e3:
                    6e:aa:7f:fe:30:ef:f2:bd:d7:a0:05:a0:10:c9:f9:
                    48:b3:0e:1a:35:98:8b:be:48:23:81:a5:5c:b9:0d:
                    f7:ec:ad:8c:33:90:8b:ea:85:98:86:17:48:ee:29:
                    08:48:d1:1a:af:f2:f7:cd:43:f6:92:09:3b:e2:2e:
                    db:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:16:32:04:AD:E0:FB:11:6B:8E:AD:AC:1F:D3:00:C3:18:52:F1:CE
            X509v3 Authority Key Identifier:
                keyid:8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:94:c8:f9:1a:0c:74:34:e0:5b:b5:62:9d:d2:c3:46:72:2e:
         ca:b6:e0:4a:33:73:2e:cf:c0:73:d9:18:b7:15:1c:5f:00:ff:
         49:fa:1b:bf:cc:ad:7d:cc:59:be:71:cf:1c:75:d4:47:6f:96:
         59:e9:85:15:26:cb:31:ba:b1:e4:05:23:eb:e3:73:0d:ec:7e:
         bf:31:48:b5:b3:91:ed:6c:69:2f:37:18:bb:ad:7a:26:f4:16:
         ce:65:a0:2f:6d:f5:1e:70:5e:20:a6:26:5f:bf:f7:6e:19:43:
         3b:56:03:de:a9:08:3f:99:85:c0:18:c5:de:0f:29:d6:ab:c9:
         67:33:bd:3b:8f:54:ca:16:c9:a3:37:a7:ca:bd:63:97:42:e8:
         6d:b0:87:96:3f:ca:09:26:f1:8d:8e:17:06:5c:2e:91:09:7d:
         1a:dc:94:85:e8:cc:77:db:88:54:63:f9:9c:f7:9f:0c:93:67:
         29:14:9a:52:95:e2:5a:bb:ea:bb:9c:b1:be:33:9f:fe:db:12:
         9b:db:75:11:7d:36:51:6b:6f:74:b5:d2:59:97:79:56:3b:1c:
         45:34:1c:49:11:84:54:af:5d:66:f0:82:50:5e:b3:37:b1:a5:
         12:df:5d:83:f9:d4:b7:64:1d:e2:1a:2b:84:70:88:02:d6:1a:
         5e:90:19:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:38:39 2025 by rpki-client