Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
File:                     L28OoBJ6bjkhlWljgL5bsEdLAd8.mft (raw, json)
Hash identifier:          UdgXgPNGNc9hl9Gpc2QuHMe0cFSWFAVEefTo8zXHH7w=
Subject key identifier:   6A:92:FE:A0:54:48:0E:EE:14:C2:AF:0D:9F:46:6A:F4:99:16:17:E0
Authority key identifier: 2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
Certificate issuer:       /CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Certificate serial:       01967E6A530A88DC5086EBB9EC33460FBFBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
Manifest number:          1512
Signing time:             Mon 28 Apr 2025 22:00:19 +0000
Manifest this update:     Mon 28 Apr 2025 22:00:19 +0000
Manifest next update:     Tue 29 Apr 2025 22:00:19 +0000
Files and hashes:         1: L28OoBJ6bjkhlWljgL5bsEdLAd8.crl (hash: FlPAMWvN25oTt5tgZRsaXD0gRHnUZPLY/NysNyZ3094=)
                          2: vqiF7KHwgC4hKANJve3WilTtCaA.roa (hash: ViWg/cb4ZOWXmU8DGPzhe6lMZyYPSAoJx2DnUl9cMUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:6a:53:0a:88:dc:50:86:eb:b9:ec:33:46:0f:bf:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6f0ea0127a6e392195696380be5bb0474b01df
        Validity
            Not Before: Apr 28 22:00:19 2025 GMT
            Not After : Apr 29 22:00:19 2025 GMT
        Subject: CN=6a92fea054480eee14c2af0d9f466af4991617e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:10:98:87:8d:5d:c4:96:47:bd:c4:e0:42:e1:
                    ea:f2:bd:b9:f9:75:90:ce:66:93:8c:e4:f7:cb:41:
                    51:48:1f:2f:4c:42:3a:5e:aa:b4:5a:96:1d:58:7a:
                    64:8e:3a:b9:7d:56:4d:f7:57:3b:b9:3c:76:58:1e:
                    34:33:01:ca:ce:96:c3:42:d2:f5:85:7f:f7:a6:91:
                    ef:30:e2:49:42:cf:a0:d6:a7:32:69:d7:27:63:a1:
                    4c:b4:f6:f7:dd:89:d9:ba:61:d2:6a:fc:10:81:28:
                    90:e5:73:62:d2:3c:f8:8f:4c:1d:ef:67:69:da:97:
                    6e:bd:72:fe:18:5d:2a:ea:e1:80:d5:55:f5:14:0a:
                    fb:8e:73:49:38:07:b8:78:ec:ed:da:78:f3:59:f6:
                    05:24:f8:a8:89:82:ca:48:5e:b0:9f:46:a1:f6:f4:
                    ef:38:2f:45:55:2f:fd:e9:f7:11:57:da:24:d4:c9:
                    98:5a:f5:d1:32:4b:f3:a1:a0:0b:73:a3:3b:b8:3b:
                    80:57:68:b8:74:6e:b2:3f:c0:d7:a2:6f:3f:29:91:
                    a3:5f:7b:9a:97:91:94:98:5a:cc:3c:fb:c5:71:ff:
                    6a:60:45:c0:f1:3e:d7:f1:ef:9e:26:74:4b:5e:53:
                    9b:49:6e:33:f5:66:e0:d6:c2:07:9e:f5:1a:79:4a:
                    6f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:92:FE:A0:54:48:0E:EE:14:C2:AF:0D:9F:46:6A:F4:99:16:17:E0
            X509v3 Authority Key Identifier:
                keyid:2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:91:b9:62:ea:2d:c7:e8:6a:02:64:26:61:10:73:04:81:29:
         15:b3:cd:59:1f:07:4b:04:f1:18:a3:ec:de:a6:c3:88:6d:d8:
         2c:97:93:2f:58:c4:03:26:62:d8:a9:f1:43:3c:92:2a:0c:ae:
         33:84:70:4e:fa:87:70:db:34:70:82:e4:99:a5:ad:f4:aa:64:
         f6:2b:eb:c2:b1:fc:f1:1b:6d:54:4f:9b:21:f8:14:05:da:c0:
         a2:95:48:6f:ed:6a:5f:e8:fe:72:b7:f5:a2:01:ce:d7:82:1a:
         9f:b7:1d:df:6d:f3:49:ff:f5:e3:51:a8:e6:68:9a:9a:00:4d:
         ce:ab:09:3c:79:bc:86:b5:0c:40:82:b1:23:2d:a6:a9:fe:19:
         1a:c3:c3:97:df:ee:eb:99:55:7b:5d:96:86:99:c9:4e:c7:7d:
         17:13:0f:85:82:2e:95:aa:84:a3:a5:2d:a2:e8:36:fd:5f:a3:
         c3:a5:d0:44:94:54:17:a4:60:3d:2a:9a:5a:ad:10:a3:15:62:
         cc:12:5d:cc:b0:a3:d5:25:62:cd:64:54:3a:af:22:ea:a6:27:
         97:c6:e2:49:30:27:0d:67:2a:c6:ea:0b:b6:30:c2:80:87:e6:
         73:57:6c:5f:42:77:ab:55:2f:ad:11:c9:60:5d:d5:f2:35:70:
         eb:00:6e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:33:36 2025 by rpki-client