Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
File:                     BrFkGJ99th6LYf3a5WIqCxNPXBY.mft (raw, json)
Hash identifier:          RrzyNFmx3i+uy1kXBgvVBIEMBasvZsNNO6QLLczCtM4=
Subject key identifier:   17:85:CF:B5:AD:08:25:E9:E8:5E:74:A2:48:D8:2A:A0:34:04:2F:03
Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
Certificate issuer:       /CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Certificate serial:       01967CEA3D0C4462F74FA5FCB9D3E7F0CB8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
Manifest number:          05F6
Signing time:             Mon 28 Apr 2025 15:00:47 +0000
Manifest this update:     Mon 28 Apr 2025 15:00:47 +0000
Manifest next update:     Tue 29 Apr 2025 15:00:47 +0000
Files and hashes:         1: BrFkGJ99th6LYf3a5WIqCxNPXBY.crl (hash: ZfMTum1U7rJzERuvLNNqwOe1WSA5n0pN/S8KmyAO1dk=)
                          2: xiu8A8Z9HiQjvOQtwLKzLq6Rmzs.roa (hash: lWKOLN6hC8W0RzZe4v2RWSxfRmyJvM8+WBxEcTGjqnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7c:ea:3d:0c:44:62:f7:4f:a5:fc:b9:d3:e7:f0:cb:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16
        Validity
            Not Before: Apr 28 15:00:47 2025 GMT
            Not After : Apr 29 15:00:47 2025 GMT
        Subject: CN=1785cfb5ad0825e9e85e74a248d82aa034042f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fc:9f:92:d0:8b:39:20:4c:45:3b:7f:15:40:
                    6a:7e:bf:9b:da:82:0a:6d:2f:42:7e:e7:2a:2c:77:
                    ae:42:c7:7b:9b:83:1d:76:b5:f1:5d:b7:09:7c:b2:
                    30:9b:3e:46:17:ba:17:86:ba:2d:5e:8d:82:6c:15:
                    43:93:17:04:25:b0:0c:a1:38:ae:df:76:69:ba:9b:
                    c6:58:de:8a:09:63:7b:b4:ae:d6:2c:2b:96:8d:f9:
                    29:a3:22:8d:b9:60:2d:59:9f:b0:c9:23:05:3e:b4:
                    9f:be:07:55:e6:38:67:d3:f4:da:1a:e2:5c:78:eb:
                    9c:e0:e9:5d:50:0b:e9:a5:02:4d:07:5d:98:be:1b:
                    a9:22:57:da:1c:26:0d:58:bf:9b:c9:17:53:b4:6e:
                    74:09:a9:a2:03:18:9a:a3:b8:8c:d5:7a:47:e3:c6:
                    11:a8:13:6f:63:1f:57:9c:a5:b9:7f:76:7f:31:55:
                    0c:43:78:27:fb:9e:49:3d:e9:5a:fa:73:01:19:8c:
                    89:7c:fa:a6:74:a9:17:64:48:4e:bc:03:63:77:85:
                    4e:8f:55:aa:71:24:2c:3d:be:42:bf:7d:6e:0e:9b:
                    9c:b0:b8:36:bc:6e:7b:1a:6f:70:30:a6:d8:05:e5:
                    21:cf:5e:2c:ab:d3:9c:a9:c3:b3:ee:2a:3b:93:28:
                    c7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:85:CF:B5:AD:08:25:E9:E8:5E:74:A2:48:D8:2A:A0:34:04:2F:03
            X509v3 Authority Key Identifier:
                keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:30:4a:83:5c:05:26:3a:3a:5e:33:17:14:51:9b:c8:e0:95:
         fc:0a:36:fc:48:f9:e0:f5:a6:15:6f:10:3a:96:87:33:b2:a8:
         b9:15:b3:a8:46:bf:ec:1c:17:19:76:ce:0f:c6:7a:10:c8:13:
         8a:76:b0:cc:f5:d2:3f:1d:3e:7a:52:64:90:32:b0:7f:e6:d3:
         f3:21:64:69:19:ce:fa:8d:f3:b6:07:29:74:82:55:2e:0d:77:
         a9:97:ed:6a:58:66:ae:02:a6:48:4d:27:bc:30:1a:24:90:32:
         bc:b7:a7:2d:0b:a8:f0:a0:d3:eb:4d:5b:7a:23:ba:66:6a:c7:
         a1:b4:5f:2f:06:8e:3c:c9:b3:2c:fa:ac:c1:23:91:68:21:9a:
         58:6b:4d:fc:06:10:b9:84:5c:77:d8:8d:31:e0:5b:4e:9a:3b:
         d4:3a:85:f8:98:b4:34:c4:ee:51:df:95:05:9f:44:37:d8:c5:
         b6:27:c3:b6:06:e8:a9:ad:32:96:4a:1c:3e:0f:fe:a4:76:e0:
         64:41:40:41:53:91:fe:5b:84:c9:8b:ed:33:55:7f:76:fe:dc:
         5c:98:7d:fe:49:89:b7:aa:79:9d:47:d1:89:bc:eb:a9:2c:06:
         15:01:de:be:f0:27:d8:a3:92:b8:ea:94:35:18:bc:8a:11:9b:
         c0:47:a2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:49:26 2025 by rpki-client