Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
File:                     AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft (raw, json)
Hash identifier:          4WLgCAhXHFJQpDZdWyjRY+otpuQJQ/C1chjwhDtjkXc=
Subject key identifier:   1D:2B:18:CF:BB:D2:9D:95:22:2B:F8:2C:6F:10:6C:83:1C:F7:11:A9
Authority key identifier: 01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
Certificate issuer:       /CN=01bae509df7ec524d4f750ff809274ab00649322
Certificate serial:       01967A1F9B1306E86BF11341ABA1D715801F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
Manifest number:          0F84
Signing time:             Mon 28 Apr 2025 02:00:13 +0000
Manifest this update:     Mon 28 Apr 2025 02:00:13 +0000
Manifest next update:     Tue 29 Apr 2025 02:00:13 +0000
Files and hashes:         1: AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl (hash: /tqQuIEsajZXr1RbK6nWEcTHerQX+MvtuanBHNbJzl8=)
                          2: r9ivPCH7B-EIjmvOeGIsU1bVmJw.roa (hash: ZoMymQkL6qzTxWYBfF5BxJb7oUgkp1cRchZsdJ96SAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:1f:9b:13:06:e8:6b:f1:13:41:ab:a1:d7:15:80:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bae509df7ec524d4f750ff809274ab00649322
        Validity
            Not Before: Apr 28 02:00:13 2025 GMT
            Not After : Apr 29 02:00:13 2025 GMT
        Subject: CN=1d2b18cfbbd29d95222bf82c6f106c831cf711a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:05:7c:29:d9:3b:db:f8:8f:d4:a0:a1:66:
                    ba:7e:73:2b:b2:0f:71:6f:f3:ab:dd:1e:1d:f3:79:
                    d6:57:ba:48:7e:45:02:cc:a7:4e:72:e3:c1:f4:22:
                    f7:55:43:67:e0:50:ff:5e:5e:63:ae:94:77:ce:c7:
                    ca:07:96:0a:7c:5c:a4:63:6a:61:00:5a:8e:e4:d3:
                    0a:05:96:32:28:be:10:ff:47:34:14:80:05:0b:a7:
                    ce:e5:38:5f:69:02:44:14:1b:ab:ed:6f:e8:d0:01:
                    2e:7d:a9:40:3a:61:a4:da:b5:7e:ec:dd:70:6b:fd:
                    0d:9c:2d:5c:23:9e:16:14:70:89:0f:d1:cd:c7:62:
                    f3:63:ca:0e:46:cc:d7:7a:2f:ec:53:39:67:ae:37:
                    59:82:82:05:fe:c4:bc:9d:be:6e:b7:f7:8a:1b:aa:
                    ea:21:a2:da:a1:7c:65:6f:29:7e:ec:ee:61:c3:00:
                    73:fe:6c:b8:54:ce:56:46:e8:e2:60:39:42:c1:9b:
                    46:33:fa:45:c7:e9:b3:44:bf:86:21:ae:4e:e7:88:
                    32:42:1b:76:17:05:89:50:5b:ad:80:60:02:cb:be:
                    7f:e4:ec:65:84:6d:ad:ed:3b:cd:76:d3:31:26:75:
                    09:4b:14:d5:a6:d6:81:64:32:50:fa:b2:22:eb:c7:
                    d6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2B:18:CF:BB:D2:9D:95:22:2B:F8:2C:6F:10:6C:83:1C:F7:11:A9
            X509v3 Authority Key Identifier:
                keyid:01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:27:f9:79:70:cf:94:ae:df:ec:05:1e:d2:35:60:ff:d3:f2:
         5c:19:19:59:0c:1c:01:25:02:2a:30:78:6e:59:bd:b4:c2:e6:
         95:84:75:cf:5d:8d:8a:be:fc:68:10:f9:5f:94:b5:68:c5:f4:
         01:96:34:7d:cf:b4:d4:37:5e:ed:8f:cf:4e:1b:cb:34:f2:ab:
         55:c6:a1:93:3a:c1:21:08:43:35:75:51:fe:f3:05:27:f4:aa:
         e9:91:65:68:02:69:74:72:ad:01:ad:54:dd:1c:23:f8:3f:f8:
         35:76:91:28:af:88:e0:3a:4b:4a:12:37:87:20:f7:8b:52:e5:
         33:b4:e8:cb:b8:a6:57:35:e2:a6:4a:aa:1d:94:a9:33:ca:57:
         9d:0c:fc:2f:12:1d:8a:85:ef:83:53:d8:35:97:c7:41:a6:d3:
         27:6f:c7:c5:e5:af:82:ea:14:1a:53:0f:37:49:96:36:91:fe:
         44:57:88:27:4f:cb:22:d7:36:83:79:6a:1d:6f:d5:61:57:1e:
         86:ce:4e:93:d0:5b:c2:97:82:af:dd:97:43:19:6f:40:c1:ea:
         ae:70:7c:3f:ce:f5:c2:8b:fe:59:f7:d7:60:77:8a:1f:6c:e6:
         7d:cb:ea:96:48:c3:23:f3:bc:d4:49:b8:69:b6:56:37:d9:ad:
         7a:1b:be:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:08:38 2025 by rpki-client