Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
File:                     vdI1_DzDTEVIxqhONeSVMyhTm-E.mft (raw, json)
Hash identifier:          sRoElITPxCf/maJ7eqdXCiDyQ2mVtciDNSdKYGBCUDQ=
Subject key identifier:   7C:93:45:91:D1:D4:4A:96:9E:D6:99:EF:DB:E3:CE:AA:4A:57:5B:1F
Authority key identifier: BD:D2:35:FC:3C:C3:4C:45:48:C6:A8:4E:35:E4:95:33:28:53:9B:E1
Certificate issuer:       /CN=bdd235fc3cc34c4548c6a84e35e4953328539be1
Certificate serial:       0197703F1E35BC7BF1DED262846BFBA02C41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
Manifest number:          0F9A
Signing time:             Sat 14 Jun 2025 21:01:14 +0000
Manifest this update:     Sat 14 Jun 2025 21:01:14 +0000
Manifest next update:     Sun 15 Jun 2025 21:01:14 +0000
Files and hashes:         1: vdI1_DzDTEVIxqhONeSVMyhTm-E.crl (hash: 91hyUN37ySR5UtJYjfJRnISlYz5VtTj6AUzwcSvIbi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:3f:1e:35:bc:7b:f1:de:d2:62:84:6b:fb:a0:2c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd235fc3cc34c4548c6a84e35e4953328539be1
        Validity
            Not Before: Jun 14 21:01:14 2025 GMT
            Not After : Jun 15 21:01:14 2025 GMT
        Subject: CN=7c934591d1d44a969ed699efdbe3ceaa4a575b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:c9:80:47:20:52:7b:65:3e:26:a3:4d:52:
                    06:b8:d6:4d:5b:a5:70:ea:c7:dc:97:46:7b:ff:07:
                    cb:a5:a6:b9:0e:58:38:52:18:a3:87:18:aa:e6:1e:
                    d8:91:9e:82:08:b2:b2:38:b1:dd:b1:f9:af:71:d5:
                    a6:cb:ca:c5:b0:bc:ee:b9:f3:5e:18:6d:bf:b6:31:
                    68:8c:04:74:fd:05:43:f5:b4:4a:92:73:12:64:0e:
                    cd:66:ac:a5:d3:94:a2:f9:9a:cc:7c:19:7a:4d:15:
                    ed:4a:d2:d6:e9:78:a5:42:7d:93:a2:22:fb:cb:58:
                    4d:fd:18:67:4d:37:0f:75:44:7f:05:73:23:37:a8:
                    df:a1:b4:09:d3:47:f4:ec:f5:46:3b:2b:20:1c:a9:
                    4c:62:38:01:9f:96:bc:93:fc:3d:92:a1:85:8f:74:
                    ed:5b:fe:38:48:0c:d0:1d:20:51:bd:57:66:f5:21:
                    72:64:e0:1c:8f:78:4a:70:fc:60:8d:48:72:0e:29:
                    9c:64:74:59:70:fc:ae:93:fd:90:e8:c0:9f:ca:1e:
                    52:06:f9:1f:1c:9e:7b:26:35:ff:ef:7c:5d:cb:a0:
                    f2:2d:2a:fb:b3:4b:2f:29:0a:7e:2c:4f:cd:69:b5:
                    cf:cb:c9:ae:b5:d8:d9:78:be:07:2e:b7:0c:36:07:
                    fe:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:93:45:91:D1:D4:4A:96:9E:D6:99:EF:DB:E3:CE:AA:4A:57:5B:1F
            X509v3 Authority Key Identifier:
                keyid:BD:D2:35:FC:3C:C3:4C:45:48:C6:A8:4E:35:E4:95:33:28:53:9B:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e1:11:e7:a6:ef:2b:19:7a:15:7d:3f:c7:bf:86:21:d1:9f:
         ad:ac:64:70:94:dd:ae:95:17:35:91:5a:bb:6b:ef:2d:45:99:
         ed:ea:25:5c:02:15:c5:24:4c:0c:14:d6:5f:0a:d9:14:9e:9f:
         8d:5f:6f:42:c8:76:03:9e:55:e2:91:e2:f7:9f:42:00:24:a4:
         24:24:1c:4e:e7:27:ac:35:73:1c:f0:5f:9c:8c:30:b1:d8:55:
         ea:2e:f9:e3:f0:74:c0:13:f7:05:8d:34:11:c6:1c:a9:45:bc:
         48:97:c3:60:f7:95:a8:53:3a:18:62:4d:46:f8:91:bc:cc:b6:
         9d:f5:36:b9:90:89:a9:b9:d7:d8:8f:95:67:9c:ed:d9:2c:b4:
         81:80:3f:d7:42:e7:44:72:96:e9:ef:9f:8f:ba:a8:c7:ea:c3:
         0e:3b:6d:9c:66:5e:22:ad:4a:28:bd:10:b4:a6:85:5e:a3:f2:
         ee:f6:60:98:98:67:af:3a:00:ca:0a:d5:56:5e:a7:e0:7a:72:
         b4:0a:f1:00:e5:b7:17:f4:f0:17:cd:b3:e3:3d:fd:3f:ed:84:
         7d:79:0c:b3:bd:d8:e3:6a:62:be:54:be:21:28:1b:9c:0f:68:
         a9:fa:71:3b:21:09:84:25:fb:84:28:59:54:23:40:b6:d4:b6:
         e7:36:b9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:02:26 2025 by rpki-client