Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
File:                     dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft (raw, json)
Hash identifier:          T0nn7XnRz0910EqNN9XylukSkTWFGHdM6h2exercKnk=
Subject key identifier:   27:44:47:A2:89:5C:97:2B:69:38:C1:67:94:91:CC:53:D2:5A:22:29
Authority key identifier: 76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
Certificate issuer:       /CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Certificate serial:       0196737920C0FEAF7A463FD10660046E950F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
Manifest number:          1511
Signing time:             Sat 26 Apr 2025 19:00:40 +0000
Manifest this update:     Sat 26 Apr 2025 19:00:40 +0000
Manifest next update:     Sun 27 Apr 2025 19:00:40 +0000
Files and hashes:         1: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl (hash: pZcqAGLBCjA0RW1wptbUSL6vtuPNoVKxFKZGkuJZZ/c=)
                          2: lcvUmc0LhKo6ANY0ugW3mmP3-ik.roa (hash: +B49PEbia08zz2cV1E64Pu8VSfW83hABBkamjBdKnyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:79:20:c0:fe:af:7a:46:3f:d1:06:60:04:6e:95:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
        Validity
            Not Before: Apr 26 19:00:40 2025 GMT
            Not After : Apr 27 19:00:40 2025 GMT
        Subject: CN=274447a2895c972b6938c1679491cc53d25a2229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2a:46:77:86:e6:55:91:99:14:70:e0:bd:1f:
                    df:9e:42:ab:cc:d1:f7:95:0f:08:cf:64:81:75:53:
                    77:dc:7b:0a:2f:ed:6e:a7:ca:ba:c3:f9:7d:b5:a3:
                    77:85:48:1f:6f:29:7f:0e:a7:4e:2e:40:40:4a:44:
                    52:92:95:ad:4b:01:50:b3:78:85:7f:c6:a9:a0:fa:
                    8b:99:58:1b:ec:90:fe:af:1c:71:24:9e:f9:03:bb:
                    5c:6f:ea:57:5a:0f:ce:14:22:1b:9b:aa:3e:26:a7:
                    81:23:67:1e:78:75:fb:01:96:b2:18:5b:3c:b4:11:
                    c1:5e:61:cc:24:83:b4:6d:b1:1b:f2:9e:5e:f0:fa:
                    09:b9:81:19:22:d0:e0:26:79:45:86:23:bc:bd:22:
                    fb:56:c2:6f:3f:63:32:15:e2:6d:6c:b6:bc:67:50:
                    13:7e:82:dc:20:95:b6:f2:78:03:d8:e1:87:15:7f:
                    74:9f:fa:25:b6:95:a7:56:de:10:5b:72:64:b4:11:
                    62:e3:63:15:27:d8:ca:1d:eb:a0:02:c1:bb:51:f0:
                    d4:3e:b3:fa:35:4e:35:82:a7:64:4a:c7:1a:c6:a6:
                    93:dd:dc:e3:2d:81:ba:96:a2:00:a5:2a:8d:70:2a:
                    98:13:31:66:cf:f3:75:66:6c:6c:d1:06:1e:aa:67:
                    64:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:44:47:A2:89:5C:97:2B:69:38:C1:67:94:91:CC:53:D2:5A:22:29
            X509v3 Authority Key Identifier:
                keyid:76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a0:16:52:a8:cf:34:7a:56:92:60:b6:44:da:5c:13:aa:43:
         df:f5:c6:f2:83:95:9c:89:e8:25:2e:1e:a1:e1:14:76:a6:82:
         7e:4a:93:47:f4:5f:e2:68:d7:6e:21:68:6b:4a:41:3e:9b:3a:
         9b:f3:c9:e8:c7:97:fb:eb:fa:24:6d:08:b2:83:35:71:4a:ef:
         1a:4c:f8:37:6e:d1:30:ea:b2:41:a0:d7:c7:c6:6a:f4:ff:ff:
         db:b2:83:3d:92:38:cc:01:31:f4:34:bf:bc:6d:ff:ef:87:ab:
         56:02:40:f4:09:c9:92:9c:c0:85:11:64:d0:b8:3c:50:95:94:
         a3:9a:32:78:fe:bf:b1:56:b6:4b:11:8b:71:85:de:2e:f8:52:
         73:8c:a0:a5:6c:3c:fd:9f:9c:a1:e8:9a:9d:af:33:e6:11:3f:
         b1:26:a7:79:b7:10:62:d8:92:12:9e:55:93:d4:a0:b3:36:12:
         71:fa:9e:ac:d3:27:aa:db:02:8e:03:7e:59:35:3d:aa:32:d5:
         45:50:18:32:23:fe:d1:72:7d:ad:c7:70:19:45:98:62:df:b9:
         68:8a:69:a3:0c:42:75:f9:c0:3e:95:44:90:5c:d6:db:c5:cd:
         62:d5:ab:18:2c:c3:ac:78:97:99:a4:5c:67:35:46:a2:d7:55:
         a0:ae:7d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:43 2025 by rpki-client