Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
File:                     QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft (raw, json)
Hash identifier:          L3uv5JJbkPg/vuZHv2zsQCaaWcsJ6JiJPDTaiUScv/I=
Subject key identifier:   00:94:99:D5:B5:CA:78:98:94:DC:79:83:31:30:E6:A2:C4:BE:1D:21
Authority key identifier: 40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48
Certificate issuer:       /CN=4036a64f1a066babb8beb864e695fa997692dd48
Certificate serial:       019679E9F0467AE4B124749037ED34B55F1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
Manifest number:          0F6B
Signing time:             Mon 28 Apr 2025 01:01:36 +0000
Manifest this update:     Mon 28 Apr 2025 01:01:36 +0000
Manifest next update:     Tue 29 Apr 2025 01:01:36 +0000
Files and hashes:         1: QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl (hash: NLPIw2+LKL+OdMx5CIUG5J10YYCOuJMYHEvi7Ra/BSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:e9:f0:46:7a:e4:b1:24:74:90:37:ed:34:b5:5f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4036a64f1a066babb8beb864e695fa997692dd48
        Validity
            Not Before: Apr 28 01:01:36 2025 GMT
            Not After : Apr 29 01:01:36 2025 GMT
        Subject: CN=009499d5b5ca789894dc79833130e6a2c4be1d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:c8:ff:b9:0e:1d:2e:d6:b5:88:27:03:1a:
                    ff:bb:4f:66:ba:ee:08:b7:f1:e1:2d:bd:77:1e:43:
                    d8:f7:ad:4c:7d:a4:15:be:cd:c9:ce:7d:5f:09:7b:
                    0a:10:92:7c:ee:0c:d1:4b:c8:b3:9b:08:48:1a:b3:
                    ac:72:27:6e:a7:4f:3b:50:e0:cc:40:0c:d9:b5:c3:
                    20:ba:50:fb:b4:a7:d9:ca:fc:8b:b3:ce:5f:9a:aa:
                    a8:53:54:cf:96:bd:2b:5d:23:b9:b3:26:a5:88:e0:
                    66:95:ac:9b:84:2f:bf:0e:66:c7:a4:7e:b5:3d:d5:
                    5a:66:50:9a:e3:5b:d5:b8:ea:5d:0a:11:d0:c4:cb:
                    f0:b4:a9:33:4d:02:38:1c:e6:c2:b6:fe:ef:03:7f:
                    0f:ed:8e:ed:cf:c6:87:51:6d:c4:f2:1a:19:83:3d:
                    ef:f8:ad:b2:6a:7e:a0:b0:86:8f:1e:c8:a5:61:67:
                    61:45:dd:99:75:7e:9f:4c:7b:09:69:84:50:a3:58:
                    85:00:e2:04:62:c0:d5:19:4f:7a:f3:7a:1a:5c:fb:
                    db:d4:f2:3e:38:2b:e2:9f:95:d7:c3:75:46:fe:0d:
                    f0:76:e8:f3:06:d7:97:28:38:92:2b:6c:fa:61:04:
                    5e:9f:07:a0:48:28:a2:58:06:6a:fb:e4:65:ea:3d:
                    97:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:94:99:D5:B5:CA:78:98:94:DC:79:83:31:30:E6:A2:C4:BE:1D:21
            X509v3 Authority Key Identifier:
                keyid:40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:56:25:ae:8d:3a:dc:bf:6e:35:ae:29:f3:f0:33:d4:1e:42:
         36:68:6a:24:45:63:68:3b:6d:47:a4:93:d6:76:ca:8b:4d:25:
         80:9a:9e:58:9e:d0:86:8f:5c:6a:38:ab:11:1b:44:88:63:83:
         0a:ce:5f:cb:f0:42:2b:f6:3c:90:52:02:7d:75:88:6e:a4:fc:
         e6:7f:86:f1:1e:a0:4c:a6:5c:e5:43:af:87:c2:55:97:f0:60:
         5e:59:11:c5:8c:0f:6a:9c:2e:85:a4:ee:31:f4:31:2c:f8:51:
         23:47:aa:c8:e3:73:63:75:a7:33:71:d9:25:af:68:75:53:c7:
         91:30:28:82:a2:61:76:24:63:e3:b9:3d:a7:3f:8a:2e:71:da:
         a6:bd:bf:08:72:f2:ce:8d:38:11:15:e3:09:e6:ce:4f:4c:5d:
         54:80:39:9f:9a:be:e8:87:4f:bf:00:59:94:17:ad:0e:ca:e4:
         4f:ac:c6:1f:cb:dc:d8:e4:ea:0b:46:05:ab:8f:3e:86:25:cb:
         0c:51:85:51:db:96:b3:a0:7b:c2:2c:fb:0f:bf:9e:11:ad:65:
         5c:52:6a:8c:be:cb:38:c8:37:fa:a8:b8:89:c7:83:4e:ac:d7:
         dd:9f:1e:2c:b0:cf:7f:c2:d6:4e:93:ec:3a:f9:e7:53:4c:7f:
         c5:60:6a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:25:45 2025 by rpki-client