Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
File:                     O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft (raw, json)
Hash identifier:          utIjCgSBq65HHmfwMAnFg6GsZUjmKsSdfh5KACZBsu8=
Subject key identifier:   AF:1F:A0:A6:81:0F:76:C0:C3:FE:B6:31:8B:C0:54:CB:FA:DA:73:C1
Authority key identifier: 3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1
Certificate issuer:       /CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1
Certificate serial:       01968A0104E23EC76813E913180F71F79E46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
Manifest number:          1518
Signing time:             Thu 01 May 2025 04:00:44 +0000
Manifest this update:     Thu 01 May 2025 04:00:44 +0000
Manifest next update:     Fri 02 May 2025 04:00:44 +0000
Files and hashes:         1: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl (hash: uzJ+YmJ0H61MD/txd0qS/8xe4tYD3HFUp9Nqb0bWY/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 04:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8a:01:04:e2:3e:c7:68:13:e9:13:18:0f:71:f7:9e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1
        Validity
            Not Before: May  1 04:00:44 2025 GMT
            Not After : May  2 04:00:44 2025 GMT
        Subject: CN=af1fa0a6810f76c0c3feb6318bc054cbfada73c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d7:bf:2a:cf:33:4b:10:1c:d8:77:f6:05:d8:
                    b2:f8:d6:88:c5:1b:f6:b7:c9:4d:e2:ba:22:fd:63:
                    a8:14:06:4b:be:46:78:de:eb:a2:1a:99:82:c2:66:
                    9e:34:e3:14:35:96:c8:28:3b:1f:08:29:85:f9:49:
                    ed:da:12:8e:cd:9e:bb:a2:0e:08:5d:48:8e:7b:d4:
                    70:3f:a5:27:4b:b1:78:3d:e7:5f:c3:2e:d9:44:9c:
                    38:0c:2a:63:ef:1c:88:8b:5d:3b:ad:ad:6c:4b:2e:
                    2a:b9:9a:5f:7f:9c:ab:1e:cd:45:af:49:03:e5:6f:
                    cc:32:e4:3b:05:62:92:d7:45:4f:3f:13:ae:6b:fc:
                    6d:1a:a7:65:11:5f:c2:52:75:90:1a:7f:0d:4e:58:
                    ee:2b:cd:c5:7a:38:06:4b:21:7d:71:da:65:01:93:
                    75:99:e0:88:83:ab:43:44:f1:e5:55:90:b6:4f:06:
                    79:40:53:a6:a6:51:8a:13:16:99:91:ad:86:8d:fe:
                    35:48:68:6a:a1:48:7c:6e:9d:81:78:5d:05:30:e0:
                    a0:78:a1:77:d9:c7:36:30:0e:02:76:25:18:d6:57:
                    0e:84:df:ed:e8:27:a1:49:52:8e:55:39:0b:57:cf:
                    0b:ff:6d:0c:15:4b:dc:bf:a2:98:3d:ae:79:29:5f:
                    f7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1F:A0:A6:81:0F:76:C0:C3:FE:B6:31:8B:C0:54:CB:FA:DA:73:C1
            X509v3 Authority Key Identifier:
                keyid:3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e5:49:3f:cb:5a:61:36:11:56:b5:d0:3c:ff:7b:b8:78:ff:
         e3:32:46:ca:9c:08:16:89:66:c6:36:95:12:1c:a8:5c:68:6d:
         3a:9c:e9:73:7f:46:a7:72:ae:56:da:c8:1b:42:2f:09:eb:93:
         77:83:01:39:06:29:b1:81:7b:76:7a:11:70:28:98:7e:a5:e9:
         75:91:01:9d:30:ec:13:ca:bb:9d:d1:aa:b4:e9:b3:72:8a:cb:
         3c:b5:ae:b1:05:10:31:20:c7:24:f7:2a:ef:0f:f5:5b:3c:3a:
         74:aa:f2:3d:5d:89:3b:5d:49:45:cf:06:51:bb:fe:76:34:d2:
         bc:4b:aa:ba:05:9c:4b:9f:97:37:4c:a6:48:7f:05:9f:9b:9e:
         b4:53:c7:d2:e2:41:1d:63:6a:c9:c3:a4:d9:da:85:4a:f9:7d:
         6d:45:84:8e:47:dd:45:80:eb:a3:73:ed:4a:5e:0a:c3:a2:fb:
         7f:bc:3a:45:78:36:8e:9e:28:be:9f:1f:26:c5:b5:82:0f:37:
         a4:e7:83:f0:76:4a:88:f2:73:d6:16:fa:a4:99:c4:14:e0:9a:
         f8:ea:28:69:d5:32:32:0e:47:40:cf:e0:83:8f:44:52:0f:af:
         6a:7f:79:49:7c:e6:49:ee:23:6f:a6:1d:c4:97:c1:d1:6f:e3:
         89:26:3b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:28:02 2025 by rpki-client