Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
File:                     oqodRGKTg8rfx1F9733ikpWuObQ.mft (raw, json)
Hash identifier:          DlxUiPUwcaY8vlyCryO0MsLuPcWbI6ss4qeo5d6XMcs=
Subject key identifier:   C3:F1:43:DD:82:34:56:A7:8C:68:D6:BD:37:17:6D:0E:A7:14:86:0E
Authority key identifier: A2:AA:1D:44:62:93:83:CA:DF:C7:51:7D:EF:7D:E2:92:95:AE:39:B4
Certificate issuer:       /CN=a2aa1d44629383cadfc7517def7de29295ae39b4
Certificate serial:       0196805899E503D49B8C863ED5D16BECC015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
Manifest number:          0C8A
Signing time:             Tue 29 Apr 2025 07:00:12 +0000
Manifest this update:     Tue 29 Apr 2025 07:00:12 +0000
Manifest next update:     Wed 30 Apr 2025 07:00:12 +0000
Files and hashes:         1: oqodRGKTg8rfx1F9733ikpWuObQ.crl (hash: w/ZrvX93i/AerN2LffhdQUx3x+sehWB36xe73tfwIVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 07:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:58:99:e5:03:d4:9b:8c:86:3e:d5:d1:6b:ec:c0:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2aa1d44629383cadfc7517def7de29295ae39b4
        Validity
            Not Before: Apr 29 07:00:12 2025 GMT
            Not After : Apr 30 07:00:12 2025 GMT
        Subject: CN=c3f143dd823456a78c68d6bd37176d0ea714860e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f9:3f:9b:61:aa:bb:53:09:6a:c6:02:c9:d0:
                    8f:ff:1a:fd:db:89:67:48:2d:91:98:09:66:aa:80:
                    72:49:42:30:12:ae:29:d3:60:2f:4d:d0:0b:7e:bb:
                    e9:a5:b8:07:91:b5:82:2a:14:23:d7:78:29:d1:08:
                    89:f8:05:82:ca:82:22:4a:7b:32:77:0c:0a:d5:7a:
                    6c:ea:33:f5:95:1b:ab:9b:d1:94:77:f4:70:fd:27:
                    9c:5f:a4:9c:e8:71:60:76:0d:d1:7e:ab:d2:5b:97:
                    53:12:59:00:7f:dc:d9:cc:ba:5f:eb:a5:ba:da:66:
                    d8:d2:75:71:65:95:a2:78:ce:3e:79:c0:72:84:e3:
                    e3:04:f9:3c:04:4f:00:df:b2:28:52:1c:d9:e8:1a:
                    dc:6f:88:cd:b2:03:f4:5b:79:36:75:f3:eb:08:f6:
                    30:e8:7a:33:fa:1d:35:80:4e:eb:00:f4:27:09:7a:
                    0c:9f:88:a2:18:3d:48:83:73:ff:11:c5:ce:f1:60:
                    43:08:74:00:93:92:3e:6b:c9:a8:17:65:db:71:f6:
                    4e:2b:80:65:fc:4f:02:ed:bd:b3:59:1a:43:bf:a9:
                    55:06:40:b7:0a:d9:9e:94:0e:cd:5a:d1:7f:9f:bd:
                    c2:93:f8:3b:6d:5a:3e:34:05:3c:2b:ee:17:2a:81:
                    ab:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F1:43:DD:82:34:56:A7:8C:68:D6:BD:37:17:6D:0E:A7:14:86:0E
            X509v3 Authority Key Identifier:
                keyid:A2:AA:1D:44:62:93:83:CA:DF:C7:51:7D:EF:7D:E2:92:95:AE:39:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ae:28:f9:b1:9b:62:5d:6b:bc:e6:41:26:11:69:79:3d:99:
         9e:a5:8b:04:a9:39:53:ea:a2:13:e4:8f:fe:18:68:07:4c:0e:
         c0:0c:b5:8c:2a:d5:a9:3c:7b:93:93:d8:d3:9a:78:9c:a5:02:
         12:ba:7e:cf:41:7f:42:fe:d3:e9:f6:70:b8:88:32:6e:ed:7a:
         f6:d0:ff:0e:da:69:7d:db:66:41:80:f4:2d:5e:83:bf:11:29:
         1d:0e:31:38:a4:c8:05:33:2c:26:2b:c1:5b:12:49:bb:a9:b3:
         ff:ea:af:45:ba:14:bc:01:a6:ec:c5:9a:f7:28:cf:2c:65:b7:
         7b:52:0a:36:2f:5b:a1:46:92:15:8a:61:67:84:2b:f1:c2:68:
         3a:c1:1b:4b:5e:b8:24:b6:44:4a:7a:12:d6:eb:44:ea:2f:ef:
         d1:33:af:5b:a3:c8:61:da:ab:e4:93:c7:e9:c0:80:09:62:1e:
         4b:dd:ad:ac:d1:45:e5:e9:79:17:b3:b4:45:68:5f:55:18:b0:
         d3:4b:7d:ec:4a:27:9b:ed:6c:8f:b1:02:23:9d:fd:4a:3e:4f:
         a5:68:46:72:f6:76:f1:f6:14:67:57:55:8c:25:20:08:34:eb:
         d2:b8:66:a6:10:18:2f:46:55:97:8f:2b:e3:7d:99:37:e1:d2:
         27:e0:48:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:28:36 2025 by rpki-client