Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
File:                     DNwH_ab01Vt8gYLJKaPErDwKgv0.mft (raw, json)
Hash identifier:          e0dRXv8dUGC6kI9unWgFTNYGzpXAH4B2fmtAKCfCOvA=
Subject key identifier:   B4:77:A8:64:A4:3E:7A:4F:2D:30:43:BC:DF:89:AF:F0:B2:AB:76:9E
Authority key identifier: 0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD
Certificate issuer:       /CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd
Certificate serial:       01967567C74EEC5B3515C05BAD5006D5F7D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
Manifest number:          1241
Signing time:             Sun 27 Apr 2025 04:00:57 +0000
Manifest this update:     Sun 27 Apr 2025 04:00:57 +0000
Manifest next update:     Mon 28 Apr 2025 04:00:57 +0000
Files and hashes:         1: DNwH_ab01Vt8gYLJKaPErDwKgv0.crl (hash: hxQyz1kFW1uITL8ZUd47bvlZzgjMNlWBt3hg7B4ClOs=)
                          2: p1mXcIQxL77L_jQGXA_KIyns_RU.roa (hash: z0OqGXTq8kuCQJixhA0eSGU0mlbhHaHOLMCmElSbQgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 04:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:67:c7:4e:ec:5b:35:15:c0:5b:ad:50:06:d5:f7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd
        Validity
            Not Before: Apr 27 04:00:57 2025 GMT
            Not After : Apr 28 04:00:57 2025 GMT
        Subject: CN=b477a864a43e7a4f2d3043bcdf89aff0b2ab769e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:40:1f:00:32:44:28:2d:6b:a6:0e:31:33:71:
                    cc:95:fb:69:66:32:34:73:04:b8:a7:ce:36:5c:52:
                    18:fa:3f:1f:92:e0:85:94:a5:70:30:b7:9c:9c:20:
                    d3:f1:65:51:31:5e:ac:47:93:3d:60:19:1f:77:82:
                    53:78:b4:aa:96:25:35:d3:c6:fc:ce:a7:d4:33:73:
                    67:76:0b:87:f2:56:99:db:e8:e3:84:a8:6d:b0:2b:
                    3e:cd:76:eb:a7:ca:bd:5a:71:ab:98:b0:c8:e5:d2:
                    a6:96:51:18:79:2b:9d:e9:09:a4:26:58:09:31:64:
                    4e:76:dd:e5:19:9a:c2:9f:a5:d7:13:ae:98:ae:e2:
                    88:77:76:6b:74:02:06:39:8f:6c:fc:17:b9:54:90:
                    55:74:64:0a:fa:f7:66:27:15:9b:b2:32:9d:cb:c9:
                    43:44:79:25:84:43:e1:b9:15:ba:69:8e:60:23:bb:
                    1b:05:e9:b9:89:af:08:22:ba:2c:44:9a:1f:33:f1:
                    2c:60:0c:bb:bc:5a:cc:db:d3:41:9a:89:e9:1e:af:
                    db:47:c8:ed:1d:70:ea:ac:fe:0c:68:f2:0e:34:e8:
                    a2:07:8b:d9:a1:e5:67:51:15:e6:61:2b:06:c7:5c:
                    7c:a8:90:18:1b:1b:9b:b4:b5:29:34:69:30:b7:8d:
                    f6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:77:A8:64:A4:3E:7A:4F:2D:30:43:BC:DF:89:AF:F0:B2:AB:76:9E
            X509v3 Authority Key Identifier:
                keyid:0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:69:c8:7f:27:05:44:b4:b3:09:62:1f:2a:d3:2f:19:fa:d0:
         7f:9d:88:ba:fc:5c:a9:11:13:40:73:99:2b:04:2e:b9:be:8a:
         5a:9a:d4:09:78:52:75:37:0e:f0:9b:f5:9a:34:83:32:18:09:
         1b:5a:b7:15:0d:5e:5f:ad:2b:be:fb:fe:1c:87:27:e6:c9:90:
         3c:b1:7f:e9:2b:60:45:6b:56:b5:3c:41:2e:5f:e1:5a:e1:8a:
         d4:d3:6c:05:7d:ea:2f:39:4a:c4:d2:02:b4:0a:c8:c2:0b:12:
         a6:59:b4:cc:5a:c4:da:aa:a1:e5:be:db:d2:d2:3f:9c:45:3e:
         d4:b4:37:00:1c:ee:7f:00:d9:7d:bf:0c:b7:11:b8:c7:48:7d:
         42:39:f8:82:55:ac:97:df:f6:04:76:59:2c:f9:91:e6:c8:2d:
         6c:5e:74:a7:12:3a:38:cc:55:d2:f6:f4:cc:27:30:d5:d4:04:
         fb:cf:a5:44:fd:84:d3:ca:9c:bd:23:d2:6b:8b:50:78:c3:47:
         24:1e:63:c8:ec:29:26:59:90:32:0c:58:4c:92:19:44:27:20:
         a9:ab:48:83:e4:52:ed:2f:82:6f:79:eb:47:fc:dc:79:44:93:
         f8:25:8e:4d:de:6a:69:04:80:ce:95:8e:f2:ea:38:66:37:da:
         4d:b9:6a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:32:46 2025 by rpki-client