Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
File:                     ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft (raw, json)
Hash identifier:          SWiwk4wySnLzzdwSk0voWkG409r5KclhPlU/GEt0Vlw=
Subject key identifier:   D8:9D:A8:D0:62:E0:D6:2B:66:90:FE:49:0A:C0:84:56:F1:17:8F:8C
Authority key identifier: 01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22
Certificate issuer:       /CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
Certificate serial:       01976D3E1033AA026FBBD0BC8DDB8B8B41CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
Manifest number:          06BE
Signing time:             Sat 14 Jun 2025 07:01:13 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:13 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:13 +0000
Files and hashes:         1: ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl (hash: Ila23lgngbxuj+lBDAGHd3gYGk1MpAeakLj/wqATU+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:10:33:aa:02:6f:bb:d0:bc:8d:db:8b:8b:41:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
        Validity
            Not Before: Jun 14 07:01:13 2025 GMT
            Not After : Jun 15 07:01:13 2025 GMT
        Subject: CN=d89da8d062e0d62b6690fe490ac08456f1178f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bb:f9:df:14:02:75:57:d6:77:c2:28:32:92:
                    7e:b5:f9:d7:82:9b:c9:a2:69:a0:1f:52:7a:b0:46:
                    a2:16:89:f5:23:41:92:32:da:22:4d:e5:e3:87:e4:
                    f2:b1:77:66:a0:0a:2f:14:00:1f:ff:22:f2:52:85:
                    69:48:45:d8:a9:d7:de:b2:00:b6:cc:90:43:8b:e5:
                    ac:8d:98:ec:0f:0a:cc:a4:36:98:c7:a6:a4:a6:71:
                    a8:98:2d:cc:0d:f8:93:4d:55:9e:cd:8f:54:fc:b2:
                    01:8b:5f:03:8a:c7:21:ae:49:ed:6b:5a:8b:02:d8:
                    88:e5:a3:bc:8b:a0:65:ac:fd:c7:fc:9a:97:85:37:
                    ed:b4:f6:25:82:cf:7e:c3:bb:f0:bf:44:37:51:48:
                    4b:e5:59:7d:1f:70:6e:d4:19:8e:4d:ce:b9:4e:7f:
                    a7:70:0b:de:82:c2:e8:94:9e:38:08:b9:d3:76:7c:
                    12:ec:c2:dc:36:d7:43:0a:9f:e7:b5:88:68:40:94:
                    7d:3e:34:56:4f:b3:4f:f8:4e:e9:64:20:5f:3f:86:
                    6e:16:e7:c9:ef:80:2c:f2:93:49:b5:ed:85:3d:95:
                    b9:41:cc:5a:eb:62:9c:ea:40:f1:f3:08:fb:48:6b:
                    90:c1:5c:6f:9b:8d:b6:8b:69:37:15:78:42:09:55:
                    dd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9D:A8:D0:62:E0:D6:2B:66:90:FE:49:0A:C0:84:56:F1:17:8F:8C
            X509v3 Authority Key Identifier:
                keyid:01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e6:60:91:16:c1:e3:48:97:6a:b9:f6:bd:57:cb:a3:53:8d:
         de:43:42:8b:0b:c6:2a:ae:59:85:79:50:68:f9:9e:8f:e3:38:
         f9:03:66:ec:cd:d1:db:c0:86:39:1e:a3:54:1a:1b:74:5b:af:
         b8:97:84:ad:d5:24:29:d1:9b:c1:01:74:91:c3:17:de:d1:1d:
         8a:bd:13:9c:cb:8e:a9:17:c3:9c:26:58:4d:62:c2:4b:8d:e1:
         db:6c:ef:d7:9c:5b:af:07:b4:e2:5d:d6:6d:23:3b:ab:09:d5:
         e5:26:ad:14:c9:32:5c:f3:30:2e:c6:14:da:0a:69:15:bc:10:
         89:32:48:9d:f9:9e:95:45:79:40:0e:53:ba:d2:a8:d5:d9:81:
         79:a1:b7:f0:2f:b2:c4:32:a1:75:25:f9:4d:59:4b:ac:ef:f6:
         fd:22:9e:a4:68:b5:64:d4:86:52:f2:b1:76:fb:dd:7e:98:e6:
         26:73:4c:00:b2:1b:86:a1:6b:97:82:3d:49:5f:b8:33:53:a3:
         13:09:c7:69:f5:e5:66:bb:a4:df:7d:5c:e7:2c:34:16:5c:07:
         ea:4f:69:3d:af:e6:d2:7c:33:06:d0:15:a0:55:e2:d5:c5:d1:
         50:58:e1:85:0b:6d:fc:4d:7b:87:6d:89:ce:da:b2:dd:6e:20:
         c6:5b:07:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:49:33 2025 by rpki-client