Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
File:                     l2U-VqlPj_3pS15PKKeeRffvDNw.mft (raw, json)
Hash identifier:          OhqB06EDFBxxQwJ3H5xM/+4pCuc+1CDBJxCBDWDq7zU=
Subject key identifier:   DA:44:94:55:84:DB:15:98:B5:C9:3D:AC:99:05:94:2A:AD:75:88:47
Authority key identifier: 97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC
Certificate issuer:       /CN=97653e56a94f8ffde94b5e4f28a79e45f7ef0cdc
Certificate serial:       0196741EDA7E158990EF57B8EB10DABC4DF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
Manifest number:          14F4
Signing time:             Sat 26 Apr 2025 22:01:41 +0000
Manifest this update:     Sat 26 Apr 2025 22:01:41 +0000
Manifest next update:     Sun 27 Apr 2025 22:01:41 +0000
Files and hashes:         1: l2U-VqlPj_3pS15PKKeeRffvDNw.crl (hash: NvgTIQ+PkCSEbMidgGg1bffCOQOywrM5mBMQjiiIyao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1e:da:7e:15:89:90:ef:57:b8:eb:10:da:bc:4d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97653e56a94f8ffde94b5e4f28a79e45f7ef0cdc
        Validity
            Not Before: Apr 26 22:01:41 2025 GMT
            Not After : Apr 27 22:01:41 2025 GMT
        Subject: CN=da44945584db1598b5c93dac9905942aad758847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e3:9b:13:50:67:55:07:54:c8:90:e7:9d:7c:
                    1f:d3:4a:12:32:17:4e:e2:4b:ca:c8:6e:7f:60:11:
                    8d:e1:ae:a7:c9:70:60:e3:c3:c5:53:8c:2b:79:ff:
                    96:b3:cf:b5:f2:a1:b9:6b:4b:a0:c9:f1:8e:78:a4:
                    75:ac:3f:18:9f:d4:3c:ab:80:90:0e:1f:a2:82:30:
                    4f:0a:72:5a:db:ca:20:42:6b:83:54:2f:e4:e2:20:
                    34:6f:da:69:56:f0:c3:56:ba:5c:6b:06:1c:68:37:
                    93:1f:39:80:fd:06:b4:c6:ec:5f:24:ad:36:03:f2:
                    d2:e5:93:4b:58:84:2c:3c:38:86:ca:ce:62:3a:44:
                    f2:8f:03:3c:3e:db:78:97:81:b2:29:49:7e:35:dc:
                    75:cd:8f:b1:dd:0d:b1:15:93:bd:60:96:59:1c:ce:
                    d5:1a:34:09:12:34:de:cd:f5:86:74:1d:2b:0a:8b:
                    d0:dc:f8:6c:79:31:4f:d3:f9:b9:41:76:9d:07:21:
                    37:c9:78:dc:4d:2c:5e:00:03:f0:dc:d7:01:6c:0d:
                    3e:ba:cd:af:f4:6a:b2:a9:d8:07:66:cd:80:d9:05:
                    48:ad:85:64:67:9c:7c:1c:a1:dd:39:af:2c:56:bc:
                    fa:61:70:b8:14:af:29:9f:78:4f:c9:73:d8:2d:b8:
                    a9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:44:94:55:84:DB:15:98:B5:C9:3D:AC:99:05:94:2A:AD:75:88:47
            X509v3 Authority Key Identifier:
                keyid:97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:4c:2a:2b:65:67:e9:68:87:de:85:89:d5:bd:03:cf:85:90:
         23:c2:0e:99:a9:d2:11:47:ff:f1:62:67:1e:09:c0:14:9e:65:
         7f:38:a7:4c:df:b2:87:3a:32:19:0c:ae:a4:d3:10:0f:73:53:
         66:6d:56:70:ac:f1:dc:e8:33:e0:cf:0f:18:09:0d:57:ca:e4:
         7f:54:38:6f:09:f8:03:42:6f:75:63:77:d1:10:cf:4a:c8:a3:
         1e:19:f4:e6:5f:02:f7:9b:04:5d:b0:ec:92:9f:3a:4d:16:d8:
         4d:d3:fa:b5:4e:8f:55:b0:b5:f1:28:ef:0c:99:18:d0:f9:9d:
         48:5c:5e:20:ae:a4:35:2e:7d:62:cb:42:bf:ea:c4:45:0e:89:
         6c:f2:d5:a0:1b:58:33:c8:e5:54:91:6a:3f:c9:51:aa:75:98:
         52:de:d2:7e:ef:c3:9b:5c:fd:51:34:02:9e:91:59:5e:9e:fd:
         5b:b6:d8:e1:d4:ad:d4:cb:36:db:f0:45:31:45:33:a3:87:50:
         cb:81:75:82:2a:4e:f5:06:6a:40:fe:69:3c:33:f0:3f:8b:22:
         4d:12:96:b4:17:9d:2d:01:ac:08:0f:e0:7a:98:46:2f:c8:e8:
         af:8a:41:3a:75:82:55:80:5f:79:9a:fc:64:0f:6a:70:22:6f:
         8f:50:08:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:44:41 2025 by rpki-client