Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
File:                     oU6-xYG-93sycD2LRtMnjBkaKz0.mft (raw, json)
Hash identifier:          sCfi67PSVIHs1dD5kbLNzsv3HljEKIxcpBk/VwM7vuU=
Subject key identifier:   15:A0:17:78:CE:74:FD:42:EC:28:CB:8D:60:BB:92:C1:95:1C:41:A6
Authority key identifier: A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
Certificate issuer:       /CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Certificate serial:       01969039F8EFA154E70F93C38AC9449C68AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
Manifest number:          1518
Signing time:             Fri 02 May 2025 09:00:40 +0000
Manifest this update:     Fri 02 May 2025 09:00:40 +0000
Manifest next update:     Sat 03 May 2025 09:00:40 +0000
Files and hashes:         1: oU6-xYG-93sycD2LRtMnjBkaKz0.crl (hash: V1JRZ26ZhzWhu7jc/l58RynyHetrGCmWxY8XvWF2lcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:90:39:f8:ef:a1:54:e7:0f:93:c3:8a:c9:44:9c:68:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
        Validity
            Not Before: May  2 09:00:40 2025 GMT
            Not After : May  3 09:00:40 2025 GMT
        Subject: CN=15a01778ce74fd42ec28cb8d60bb92c1951c41a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:44:19:35:9b:9f:b4:c2:3b:cd:d9:c1:3d:71:
                    b5:fb:5c:3d:40:82:2e:5a:5d:a9:b9:bc:01:a5:32:
                    24:a7:92:e9:94:b6:dc:79:80:da:37:a5:bd:af:1b:
                    0d:95:ae:c1:9d:d1:53:de:c2:89:d7:fc:03:be:d0:
                    d4:57:c8:33:d2:8e:62:db:d9:f7:81:47:1d:26:a9:
                    14:54:3c:32:46:0b:47:27:cf:6d:98:48:e8:6a:dd:
                    e9:4f:2f:42:72:37:47:8f:92:6e:83:de:f2:9a:8a:
                    dc:17:ec:71:20:1e:1b:e7:16:6e:36:09:1a:26:19:
                    62:b2:67:89:19:b4:84:21:b0:b3:53:68:ca:e1:75:
                    c9:cc:e7:a6:b4:3f:59:32:cc:96:8f:4a:48:78:80:
                    7e:2f:fa:3e:28:93:98:f5:2e:a4:a7:62:33:3a:9a:
                    65:2b:32:bf:c0:27:c7:c9:8a:b5:e6:ee:09:e4:a2:
                    8d:7a:f1:d0:8f:a1:68:0d:98:66:ed:0c:d0:10:a7:
                    93:7d:6b:f6:dd:f7:cd:23:76:d5:7f:27:fa:d9:4d:
                    18:37:cb:c2:03:1f:0b:d8:48:9a:76:96:84:90:9d:
                    9b:db:0b:64:ce:ff:60:03:bf:ee:33:b2:5c:ef:37:
                    2c:75:9a:d8:da:43:50:37:fc:26:92:c2:f0:e6:ed:
                    27:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A0:17:78:CE:74:FD:42:EC:28:CB:8D:60:BB:92:C1:95:1C:41:A6
            X509v3 Authority Key Identifier:
                keyid:A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:93:df:10:8f:91:00:9e:e7:ef:fd:4e:5c:e5:a8:16:3e:d6:
         40:fb:bd:46:9f:8a:ee:44:4f:1e:38:43:d5:98:6f:44:59:8a:
         4d:d7:8a:5c:85:39:5d:9f:cb:5d:0a:8b:36:cd:8a:bd:63:f9:
         7c:99:f5:cc:06:ec:19:ef:82:95:58:09:85:66:37:2a:a6:67:
         cb:16:bf:a5:50:ad:8f:92:cf:5a:52:d1:f0:94:36:e0:1f:03:
         99:72:88:9d:ee:50:d6:b7:b2:f4:02:73:77:ea:ba:ca:a0:6a:
         c2:b9:e3:ad:70:c6:00:f6:bf:84:24:86:e0:dd:d3:74:5c:84:
         fc:4e:83:4f:4f:57:70:41:64:97:ca:8b:3c:e2:ea:40:d7:23:
         b5:f5:55:95:d6:62:50:f5:a8:63:42:73:d0:3b:1b:1b:37:ee:
         17:a5:72:39:70:c3:1b:9b:27:8a:02:bf:3a:f8:f1:66:54:25:
         51:a1:56:a9:36:e7:9d:70:a7:21:a4:e3:d5:87:91:5c:d7:14:
         f4:2e:8d:d4:1a:2a:1d:f8:f4:cf:00:e2:ce:37:48:bb:d4:63:
         b3:ef:33:8d:b2:89:50:d7:be:96:cc:87:0a:ed:fc:1c:42:b5:
         12:af:eb:44:96:3b:ae:27:2f:4e:ce:dc:f6:4b:09:83:41:fb:
         71:90:0e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:01:40 2025 by rpki-client