Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
File:                     Tle6dst9bSrsBSA89BuOZxbufqA.mft (raw, json)
Hash identifier:          5tjnpz2zZOQXv1U0JJcfwh4xWzlHJ026v4SHxZHJmQg=
Subject key identifier:   6B:15:61:E1:A4:8D:59:03:9B:EF:AE:2B:9C:98:CC:A8:5C:D3:48:C8
Authority key identifier: 4E:57:BA:76:CB:7D:6D:2A:EC:05:20:3C:F4:1B:8E:67:16:EE:7E:A0
Certificate issuer:       /CN=4e57ba76cb7d6d2aec05203cf41b8e6716ee7ea0
Certificate serial:       0196760C1F0390F3C7C698C06B0C1C16C99A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tle6dst9bSrsBSA89BuOZxbufqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
Manifest number:          0E34
Signing time:             Sun 27 Apr 2025 07:00:27 +0000
Manifest this update:     Sun 27 Apr 2025 07:00:27 +0000
Manifest next update:     Mon 28 Apr 2025 07:00:27 +0000
Files and hashes:         1: Tle6dst9bSrsBSA89BuOZxbufqA.crl (hash: EnIipTiBJfPLGJ7zlVrPRQxGPz9pcgQOcJNSJEqn934=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tle6dst9bSrsBSA89BuOZxbufqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:1f:03:90:f3:c7:c6:98:c0:6b:0c:1c:16:c9:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e57ba76cb7d6d2aec05203cf41b8e6716ee7ea0
        Validity
            Not Before: Apr 27 07:00:27 2025 GMT
            Not After : Apr 28 07:00:27 2025 GMT
        Subject: CN=6b1561e1a48d59039befae2b9c98cca85cd348c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:7e:54:8e:29:b7:37:15:b2:85:5f:a5:f3:
                    6a:f9:32:8e:2d:37:09:e5:1f:87:c1:84:a5:5e:82:
                    c5:9b:00:19:5c:4b:b7:c1:d5:70:7d:f1:45:ad:b5:
                    25:26:25:cf:c4:c7:41:54:1a:1b:61:66:ff:5d:d2:
                    2f:7f:ad:cd:23:30:a2:dc:a6:0e:64:25:f9:af:1a:
                    d7:f1:d0:23:61:49:2f:d6:69:87:53:21:02:7a:de:
                    0a:51:65:8a:76:a3:15:5c:0c:91:5f:f4:97:dd:74:
                    24:58:39:f7:4c:3f:61:ee:bb:7c:6f:cf:3c:77:6e:
                    54:ca:1c:47:3a:b7:36:e1:e0:31:02:21:a1:3b:14:
                    e0:b9:61:a8:33:94:5e:13:30:53:ad:69:7d:b5:50:
                    91:82:30:f7:16:35:7b:49:6f:ab:84:f1:3c:83:e5:
                    c3:fd:a9:22:92:78:e1:ac:c7:24:78:fc:7f:6e:35:
                    5e:35:6e:84:9e:10:bf:91:25:b1:7b:5b:71:53:d3:
                    6a:99:d6:b3:51:c2:7d:4f:b1:8b:37:87:0c:8b:e0:
                    81:22:21:67:c0:68:4a:06:f5:99:e9:42:65:55:87:
                    ea:50:b0:9f:2e:7c:3e:93:f5:a3:e0:7d:b1:ba:76:
                    c5:a7:9b:d0:de:9c:ee:93:60:5b:ce:ef:a0:81:ff:
                    fc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:15:61:E1:A4:8D:59:03:9B:EF:AE:2B:9C:98:CC:A8:5C:D3:48:C8
            X509v3 Authority Key Identifier:
                keyid:4E:57:BA:76:CB:7D:6D:2A:EC:05:20:3C:F4:1B:8E:67:16:EE:7E:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tle6dst9bSrsBSA89BuOZxbufqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:f2:9b:4f:40:9f:b2:ad:78:e6:4e:af:fd:fb:35:a4:56:c3:
         b6:a4:18:04:d4:a2:a2:29:68:82:c5:d8:b0:72:6d:e4:58:b8:
         86:d2:1b:36:0a:77:5b:58:32:1d:2d:6c:e9:64:f5:e5:86:48:
         90:c1:2e:98:8a:da:43:78:8e:8d:7f:95:09:f1:64:84:74:b0:
         b4:28:cd:77:3b:cb:90:bf:48:6c:f2:6f:3b:52:4b:5e:b3:c3:
         a4:3a:51:1b:88:4a:cc:84:ac:37:e1:bb:dc:49:f4:c1:5e:52:
         e9:fb:47:5e:6f:18:8d:1b:e1:31:f5:b5:77:5d:0b:ef:2e:fe:
         45:94:b1:d5:f6:3e:71:f7:06:27:47:d2:07:c5:fc:69:f6:dc:
         85:34:45:51:f6:11:25:db:a4:c2:9f:be:0e:4d:53:5d:b5:81:
         ea:24:17:01:fb:5f:d3:90:f9:67:79:79:4e:08:54:3c:9d:9c:
         83:08:b0:57:77:ab:36:37:b4:36:b9:a5:9c:2a:f4:f7:94:c6:
         96:78:7a:b9:fa:a5:df:cf:bb:0b:28:92:c6:8c:b4:00:16:84:
         73:61:87:b9:5e:06:a2:33:7c:63:80:cf:d3:f5:a0:9b:18:97:
         59:e3:46:3f:a7:83:e0:5b:d7:3a:ed:28:ad:b5:95:f8:61:6b:
         b3:b3:6a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:47:15 2025 by rpki-client