Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
File:                     SKGBKVSA9hv1hC13EvSV7CSacs8.mft (raw, json)
Hash identifier:          uoII1P1N6Qwh1ryikN1VgB9kaP94uQfctSA6ILdrjAU=
Subject key identifier:   98:C3:EC:1B:29:E6:4A:E9:5F:AC:34:FF:59:69:F7:B6:09:3C:58:20
Authority key identifier: 48:A1:81:29:54:80:F6:1B:F5:84:2D:77:12:F4:95:EC:24:9A:72:CF
Certificate issuer:       /CN=48a181295480f61bf5842d7712f495ec249a72cf
Certificate serial:       01967AFBBE0558C1487AB7F33848FF51DF73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
Manifest number:          A5
Signing time:             Mon 28 Apr 2025 06:00:40 +0000
Manifest this update:     Mon 28 Apr 2025 06:00:40 +0000
Manifest next update:     Tue 29 Apr 2025 06:00:40 +0000
Files and hashes:         1: SKGBKVSA9hv1hC13EvSV7CSacs8.crl (hash: wcLHZl/ZvltIMJhkO6Ge3wdVgF6pouU7RMt+0auuEsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:fb:be:05:58:c1:48:7a:b7:f3:38:48:ff:51:df:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48a181295480f61bf5842d7712f495ec249a72cf
        Validity
            Not Before: Apr 28 06:00:40 2025 GMT
            Not After : Apr 29 06:00:40 2025 GMT
        Subject: CN=98c3ec1b29e64ae95fac34ff5969f7b6093c5820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5a:fe:e8:4c:5f:df:1a:40:a4:6f:d8:9a:22:
                    57:19:86:0c:34:5e:e1:98:52:3d:d4:bc:87:34:20:
                    d3:c9:74:aa:5d:c0:1b:c1:88:87:c7:fa:c3:5e:bb:
                    84:c1:44:d7:5a:c8:57:24:a2:05:2f:d3:7f:68:f8:
                    19:e2:5b:02:0c:7b:6b:83:bf:c7:80:16:ba:5d:56:
                    c6:9e:2c:2f:bc:61:01:c5:0f:91:79:72:0a:2b:01:
                    34:e0:45:bb:cb:e1:00:5b:66:88:81:17:9b:f7:55:
                    73:a0:bb:c8:97:32:59:cb:58:55:69:42:ff:d9:9e:
                    08:3b:3e:d6:df:3d:b2:47:d3:e7:a1:89:55:56:a6:
                    1b:29:50:ac:d1:c0:31:38:af:1c:e3:bd:71:8e:a5:
                    96:af:1e:20:61:d9:5a:12:2b:a1:74:4c:af:8d:60:
                    f2:27:f8:6b:dc:b3:2a:70:26:f6:06:32:f6:55:e9:
                    c5:f9:bd:ea:60:a7:c7:79:38:7b:9b:fb:81:8a:0a:
                    c5:b2:6a:13:65:0b:94:f9:3b:76:a6:5c:7c:1f:07:
                    91:83:88:f6:fb:9b:77:b1:e7:f6:78:52:f9:2f:ac:
                    87:42:41:3b:37:84:88:5a:1d:60:de:e2:91:83:de:
                    69:51:f3:9a:a7:db:71:65:53:32:79:9b:8b:78:60:
                    10:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C3:EC:1B:29:E6:4A:E9:5F:AC:34:FF:59:69:F7:B6:09:3C:58:20
            X509v3 Authority Key Identifier:
                keyid:48:A1:81:29:54:80:F6:1B:F5:84:2D:77:12:F4:95:EC:24:9A:72:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:67:bc:9b:a2:3f:66:8f:3b:45:cd:76:ad:da:00:f3:74:c9:
         f4:35:73:fc:8b:f3:e8:b3:14:31:b0:1a:e2:6e:a7:fa:31:58:
         0b:2e:ec:fa:4c:49:a6:47:f3:1b:10:29:a9:ca:31:8c:00:39:
         41:20:71:01:7e:ef:e9:68:b2:8e:ba:a3:27:95:aa:18:ef:08:
         c1:e4:bb:ae:97:b7:3c:6c:6a:6b:8e:cb:96:46:79:f2:89:90:
         47:d8:fa:b3:09:a6:cf:8a:1c:c4:a6:e2:3d:fc:11:dc:1b:29:
         81:8d:37:6f:bb:5b:0a:08:f6:3b:7d:12:b7:2a:9e:1d:63:1d:
         d0:50:6d:4e:5f:20:24:2d:92:8b:f8:68:fd:c8:2c:62:b8:9f:
         3f:a2:a4:4b:bd:98:d0:7d:a8:87:c1:d2:ca:0b:a1:35:ec:f3:
         11:21:10:ab:85:3b:97:cb:a8:a9:11:81:9d:f3:f3:a1:5f:c9:
         81:ce:90:1e:3b:01:a7:23:a0:ce:8f:8a:5e:3a:0e:48:ac:e7:
         8a:d4:c8:79:8f:90:ac:df:f1:00:39:51:08:d2:42:37:45:14:
         aa:12:14:11:32:0b:08:66:60:ea:9d:61:87:4a:16:25:37:06:
         2a:05:55:50:3f:36:4c:eb:7c:2e:d9:22:5b:51:34:4b:42:59:
         c6:82:6c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:32:14 2025 by rpki-client