Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
File:                     phvll6k-axrZQXjQPo6MFVcmeMc.mft (raw, json)
Hash identifier:          HFejmqA3aQzQ1qfbjbEOV1h2d77QiJEmrIb+zAdQXUE=
Subject key identifier:   48:6D:F8:0E:7A:B5:66:99:29:6F:83:E5:FB:F5:C4:A4:42:4C:95:CD
Authority key identifier: A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7
Certificate issuer:       /CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
Certificate serial:       0196756725D93D354B5E0280BAF1B76D55B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
Manifest number:          02F3
Signing time:             Sun 27 Apr 2025 04:00:16 +0000
Manifest this update:     Sun 27 Apr 2025 04:00:16 +0000
Manifest next update:     Mon 28 Apr 2025 04:00:16 +0000
Files and hashes:         1: phvll6k-axrZQXjQPo6MFVcmeMc.crl (hash: HlvXZTceBjOAdQ4hZWF0PKb3uSPdA2ukjfjYEfy2xD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 04:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:67:25:d9:3d:35:4b:5e:02:80:ba:f1:b7:6d:55:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
        Validity
            Not Before: Apr 27 04:00:16 2025 GMT
            Not After : Apr 28 04:00:16 2025 GMT
        Subject: CN=486df80e7ab56699296f83e5fbf5c4a4424c95cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:03:f7:88:ff:aa:05:41:16:97:7d:ee:ca:88:
                    44:20:b9:b5:83:a4:00:25:ca:73:03:f7:23:ef:41:
                    94:8b:be:f5:2a:ba:1c:56:4e:71:b6:15:60:fd:ba:
                    d2:cf:95:09:4f:27:fe:22:c8:3d:f6:59:97:01:e1:
                    c6:6c:56:cb:45:1c:de:f2:bc:8f:b0:14:13:3b:80:
                    f0:20:bf:ac:d7:4d:61:b2:c4:c7:46:b3:5a:18:82:
                    b6:30:32:c5:7e:4c:52:04:2a:e1:0f:bf:fc:8d:b7:
                    4c:be:e3:a8:ba:37:fe:a2:1e:a2:63:79:fd:a9:a6:
                    7f:3c:5a:2c:08:a9:04:7d:ed:81:6a:2c:fa:5f:0f:
                    51:d8:88:67:7d:1c:4f:23:df:fa:d1:4a:2d:49:30:
                    2d:2a:32:7c:02:79:94:78:07:df:d2:56:67:f1:49:
                    ac:cb:a8:ce:19:b3:c9:aa:f2:d5:1b:4f:c8:e0:b6:
                    92:d6:53:46:6d:4a:1a:fe:51:7c:7b:e3:36:07:1a:
                    61:8d:5f:de:18:68:9c:ab:a8:22:89:0b:bb:e5:ef:
                    77:6b:62:ac:07:76:25:2a:d2:ed:c3:07:40:51:be:
                    7d:61:1b:07:be:13:70:51:ea:45:e4:9a:39:1a:94:
                    93:8f:8d:60:93:6f:24:27:ea:37:a6:eb:f8:b3:12:
                    a3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6D:F8:0E:7A:B5:66:99:29:6F:83:E5:FB:F5:C4:A4:42:4C:95:CD
            X509v3 Authority Key Identifier:
                keyid:A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:84:5f:a4:bc:08:37:11:26:4b:de:28:3e:e8:0c:4b:fb:5a:
         b1:de:0a:c7:d7:d6:e1:c5:c1:27:66:1c:ae:88:99:f3:63:a1:
         97:5c:91:cd:b2:17:0b:2f:46:45:5d:4d:17:06:94:2f:9d:62:
         c7:4c:86:60:fa:98:2c:4d:e7:51:fc:0d:c7:e4:62:64:8f:50:
         5d:80:65:85:39:82:6e:70:63:62:56:2a:7d:69:95:be:7d:b1:
         79:c6:12:5d:cf:2e:5b:d4:8e:91:ef:2b:1c:2b:cd:b2:c1:d9:
         c0:f1:ef:d6:e0:91:82:75:b4:e0:67:ff:6b:b8:8b:b2:9c:5b:
         23:bc:f7:b1:f2:66:80:ba:a2:90:8f:36:80:54:9b:27:89:c8:
         2b:78:1b:66:73:e9:45:a4:90:8a:6a:42:d5:85:bb:59:0b:24:
         22:68:28:25:3a:4f:99:be:73:99:d5:2b:53:a0:a1:5c:83:8b:
         b4:5a:24:19:8f:ef:d2:d3:74:b2:ba:6d:b9:16:bd:d2:ac:f5:
         9a:4c:2c:0f:ff:9a:fa:bf:a0:2a:ce:aa:77:c1:08:b5:47:55:
         15:6e:40:b1:1a:5c:d6:6f:24:9d:e2:a0:fa:4c:9f:79:27:d9:
         ff:1b:4d:66:83:4d:1d:06:27:99:14:75:cb:25:d0:69:97:0d:
         93:a1:be:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:29:40 2025 by rpki-client