Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
File:                     11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft (raw, json)
Hash identifier:          ZMwbnlR0RuuylShaAC67mGLSet6bUCAmGYU7TXNB378=
Subject key identifier:   E4:B2:A9:49:8A:31:4A:7C:65:15:22:8F:E3:F4:1C:60:19:15:14:6B
Authority key identifier: D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F
Certificate issuer:       /CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
Certificate serial:       01968F27843EC7EDCBF71EA4918694EB79B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
Manifest number:          1518
Signing time:             Fri 02 May 2025 04:00:53 +0000
Manifest this update:     Fri 02 May 2025 04:00:53 +0000
Manifest next update:     Sat 03 May 2025 04:00:53 +0000
Files and hashes:         1: 11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl (hash: +msqyObz0RRfGw/MBCDcQtgcPrFJ2ZN1PKCI0/m8vW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8f:27:84:3e:c7:ed:cb:f7:1e:a4:91:86:94:eb:79:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
        Validity
            Not Before: May  2 04:00:53 2025 GMT
            Not After : May  3 04:00:53 2025 GMT
        Subject: CN=e4b2a9498a314a7c6515228fe3f41c601915146b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:34:8f:c7:11:e8:ce:0e:1e:5c:4f:01:d5:
                    57:59:56:84:f9:27:2b:62:f1:95:d2:6d:33:93:53:
                    fc:79:82:9f:3d:f5:8e:81:d6:a3:4f:15:43:28:2d:
                    a8:91:90:76:61:d7:3e:09:db:44:4b:3f:eb:77:cc:
                    54:87:16:43:99:08:6b:ce:24:8f:15:e0:1a:97:82:
                    62:e1:cb:8c:84:fc:61:fb:59:6a:6f:62:9e:89:10:
                    04:4c:26:05:a8:c7:19:ff:59:94:b7:1e:4e:a7:f4:
                    c0:b6:fa:0c:ac:73:31:b1:bc:98:13:96:e9:ae:64:
                    de:97:43:82:e1:d0:c2:ac:ce:5e:c1:77:c4:5d:8a:
                    3a:93:b2:6f:9d:22:1d:30:9e:46:5e:29:8c:19:72:
                    15:e6:d8:b3:41:6b:19:79:38:25:b9:23:45:46:7c:
                    4a:56:9e:60:35:ed:4f:44:34:71:0d:84:5b:c7:24:
                    05:79:e1:4a:f2:bf:b3:2b:36:a9:ba:32:25:f2:0d:
                    98:24:29:4a:c9:f6:85:d3:2e:42:cf:28:37:34:0a:
                    db:4d:62:b1:77:6a:65:9d:1b:af:46:ea:6c:2c:f2:
                    ca:27:c4:52:9a:e6:9e:63:25:10:12:d3:54:af:70:
                    94:1a:cf:88:83:2a:64:77:0b:24:df:dc:47:60:78:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B2:A9:49:8A:31:4A:7C:65:15:22:8F:E3:F4:1C:60:19:15:14:6B
            X509v3 Authority Key Identifier:
                keyid:D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:62:c2:dc:65:4c:67:7f:14:4b:26:08:e7:e8:bc:cd:79:8c:
         69:60:13:30:c3:7c:3d:85:a2:49:1f:a7:9f:76:59:fc:63:32:
         09:6d:da:c0:8e:86:f2:24:a7:ee:ef:47:57:14:f0:5b:db:e9:
         c6:af:8a:cd:f2:16:ab:23:69:5d:34:71:70:d8:30:da:c0:23:
         64:8f:1e:c9:0e:bd:4a:92:f0:d4:da:c8:de:26:65:af:32:2b:
         57:31:a5:80:fc:92:fd:c3:a9:0d:38:b8:9a:e7:58:25:c4:55:
         c2:f8:93:d4:e9:d4:e8:1b:11:c5:0b:d2:b7:54:a2:3d:68:d4:
         80:ea:e8:5d:f4:f1:23:1c:c4:f8:f4:ca:50:d9:1c:13:a5:e7:
         3d:cb:77:dd:09:ad:f6:b1:44:17:df:75:2d:04:4b:b6:e7:8f:
         8b:5f:c5:86:41:2d:a7:f6:e2:9c:8d:16:d3:70:52:4d:38:c5:
         76:7c:14:62:c5:ef:e7:c4:fe:cb:e9:ba:a1:4d:b9:ec:16:48:
         a5:72:dd:99:42:1d:c0:7c:fa:1d:4b:2b:64:c6:a9:21:2b:c3:
         d4:3c:df:f9:3e:e2:9b:72:29:82:64:2f:c3:c4:33:bb:5c:6c:
         80:94:14:4a:54:85:97:63:31:91:b3:38:ce:5e:fd:66:7e:c8:
         d4:4f:d6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:04:54 2025 by rpki-client