Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
File:                     lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft (raw, json)
Hash identifier:          bGLZxQ1prNix39FsIVx+lrYl3z+0rIvKNAdaQuueDGI=
Subject key identifier:   C6:D1:04:F5:22:E9:17:A5:BE:F2:0F:E4:F9:91:90:3C:4F:92:E1:97
Authority key identifier: 94:6A:7A:AE:15:FF:3E:83:1E:38:03:FD:98:C1:06:3C:CC:4B:F3:EC
Certificate issuer:       /CN=946a7aae15ff3e831e3803fd98c1063ccc4bf3ec
Certificate serial:       019674FA01E90F070789B0321BF7C942A4D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
Manifest number:          0AD4
Signing time:             Sun 27 Apr 2025 02:01:03 +0000
Manifest this update:     Sun 27 Apr 2025 02:01:03 +0000
Manifest next update:     Mon 28 Apr 2025 02:01:03 +0000
Files and hashes:         1: 16kn1Yui-A_EBGj4QWkGxZZcGwg.roa (hash: i1VuKfGGE7dB/E5cr7UTL1VmRkbv0jvZukhFgJcLQKs=)
                          2: lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl (hash: 0kga/oAdtVOr7pxg2G8HHF0nbjy1aL6LKSMTQsjWISY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:fa:01:e9:0f:07:07:89:b0:32:1b:f7:c9:42:a4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=946a7aae15ff3e831e3803fd98c1063ccc4bf3ec
        Validity
            Not Before: Apr 27 02:01:03 2025 GMT
            Not After : Apr 28 02:01:03 2025 GMT
        Subject: CN=c6d104f522e917a5bef20fe4f991903c4f92e197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fe:84:61:b9:ab:88:fd:52:79:41:72:e3:b9:
                    ff:06:7b:4d:85:de:78:63:84:3f:b2:86:7a:f7:40:
                    d2:6a:45:30:0c:0f:42:85:ab:d0:f8:54:81:67:88:
                    94:81:56:b0:42:c0:b0:63:65:8a:a9:22:8c:c4:89:
                    bf:8b:87:d1:d4:28:d2:15:ec:68:ec:70:1c:d3:18:
                    fd:b0:74:6f:b2:2e:1a:99:eb:e0:e8:8c:6c:47:e2:
                    6d:83:67:28:9e:84:d1:84:05:dc:01:65:21:e5:fa:
                    21:09:23:d9:ca:69:46:c2:5c:ec:8d:f6:b7:07:b2:
                    86:ed:fb:7e:07:52:82:a7:39:10:42:a3:e5:53:35:
                    e8:47:70:b0:a6:4b:d4:88:06:7a:39:c4:d4:81:5c:
                    20:36:bb:b1:f6:06:a4:47:c9:d2:cd:28:cb:e3:aa:
                    e3:78:eb:da:84:7f:40:2c:dc:f7:57:1a:ce:18:33:
                    06:5d:2e:90:13:2b:97:f2:6d:40:3e:ac:ad:c5:91:
                    4c:80:0a:50:d4:df:e3:f2:85:fc:3d:f5:d6:aa:b8:
                    8a:56:4d:f5:0e:13:93:78:9c:db:a2:19:d2:38:43:
                    67:10:06:c4:42:b3:b7:6f:ff:a2:95:db:27:57:58:
                    f2:f3:56:67:d0:93:86:fd:dd:9b:a2:c6:b4:ba:31:
                    20:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D1:04:F5:22:E9:17:A5:BE:F2:0F:E4:F9:91:90:3C:4F:92:E1:97
            X509v3 Authority Key Identifier:
                keyid:94:6A:7A:AE:15:FF:3E:83:1E:38:03:FD:98:C1:06:3C:CC:4B:F3:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:4b:7d:b8:c7:ef:51:b5:ca:07:01:5f:15:ee:18:a4:1a:29:
         5b:9a:4f:f3:bc:d7:9a:a5:48:85:c2:21:4a:9d:4d:b1:a7:ff:
         3c:f1:4d:58:40:e0:fd:1e:b7:35:c5:b4:37:d8:c3:d4:15:82:
         0d:66:ac:89:0f:7a:d7:28:28:d0:a1:87:c9:b5:59:77:15:07:
         78:2a:e9:d5:87:4e:39:68:93:8f:12:1e:c4:bd:73:f8:00:db:
         ec:61:d9:04:ae:49:4f:7f:2a:08:40:00:fc:64:82:71:ae:85:
         93:fa:65:17:ff:57:05:ac:0c:7c:52:de:ca:99:e3:2a:24:63:
         62:56:b6:f8:5b:c3:07:97:ae:71:61:06:6c:54:f0:81:2e:5f:
         63:83:08:8a:88:40:d9:e1:94:31:4e:e2:57:c4:3b:37:ca:ef:
         cc:c9:fb:b9:88:a6:b9:51:2d:f0:8f:4d:26:30:a8:b4:5f:bb:
         a9:20:67:24:22:13:53:ff:df:6e:77:da:77:b8:5d:bb:0d:46:
         fb:96:62:84:19:3d:7b:a2:7a:81:d4:c8:83:9d:e1:8e:93:3c:
         99:9d:22:c7:be:78:24:86:03:32:2b:ce:89:80:a8:69:ec:0c:
         76:73:d9:05:f5:d0:c8:31:5b:d3:62:cd:a7:ed:e4:c5:98:bf:
         e4:9d:16:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:16 2025 by rpki-client