Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
File:                     jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft (raw, json)
Hash identifier:          1SuNKaM7/SZa75IGBxO7wpXS3kATlE6waqV64QOf0SQ=
Subject key identifier:   49:86:7C:82:00:09:07:F0:EA:DC:9A:C4:B0:4A:30:7C:DD:83:78:1E
Authority key identifier: 8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F
Certificate issuer:       /CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
Certificate serial:       01968A00D75C223C7777B11FF528AD56DBAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
Manifest number:          0350
Signing time:             Thu 01 May 2025 04:00:32 +0000
Manifest this update:     Thu 01 May 2025 04:00:32 +0000
Manifest next update:     Fri 02 May 2025 04:00:32 +0000
Files and hashes:         1: jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl (hash: ee67fbkDk+6CEz0F+1/6M0V9Rpi4rSVlbBSDCjT1mGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8a:00:d7:5c:22:3c:77:77:b1:1f:f5:28:ad:56:db:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
        Validity
            Not Before: May  1 04:00:32 2025 GMT
            Not After : May  2 04:00:32 2025 GMT
        Subject: CN=49867c82000907f0eadc9ac4b04a307cdd83781e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:eb:6f:c2:6e:4e:c1:f1:87:b1:4c:1c:9f:a3:
                    fd:a1:a7:f1:c9:ce:e8:13:be:88:84:57:dd:ee:de:
                    35:2d:46:9f:7a:9c:a1:77:4b:c8:71:51:98:d8:f1:
                    c2:b5:af:d4:e7:fb:49:02:d3:66:43:d3:0f:67:6a:
                    4c:c4:68:e3:e7:51:07:ba:c9:98:b7:cd:ff:be:70:
                    37:e5:b8:46:92:fe:a2:89:93:d8:98:d6:58:a5:7f:
                    b8:1a:28:02:3f:e0:77:ba:63:15:56:85:02:ea:4b:
                    82:8f:c1:c1:1c:80:a7:a4:fa:7d:61:a1:62:92:21:
                    f8:1f:0d:24:dc:0d:fe:46:a5:d6:81:94:22:c6:31:
                    4c:d3:17:93:ac:be:67:a3:01:14:98:d9:4d:68:b8:
                    26:ab:d7:f2:7f:1b:24:f5:35:16:58:1f:41:a2:f9:
                    0c:22:7e:a9:2a:02:c9:b4:37:68:c6:1c:ed:6b:40:
                    35:49:e9:d8:7b:e7:d8:c8:fe:57:af:ba:db:f5:a5:
                    47:a2:46:d4:6d:cd:08:19:51:ec:0b:58:ae:23:68:
                    0c:7b:6b:e2:8a:73:84:90:1d:a1:1c:26:ad:03:2d:
                    9c:26:98:0d:b4:c8:4d:22:80:db:fd:63:fd:67:d1:
                    35:f6:5d:fc:7b:b2:3e:2e:b7:b0:84:76:05:4e:bc:
                    46:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:86:7C:82:00:09:07:F0:EA:DC:9A:C4:B0:4A:30:7C:DD:83:78:1E
            X509v3 Authority Key Identifier:
                keyid:8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:22:40:6f:50:a1:85:d3:02:d8:6f:90:b2:3f:73:6c:de:cd:
         26:6b:55:4e:1e:a0:88:68:32:0a:03:c9:b6:58:c6:39:5d:99:
         00:19:9e:b7:d4:7b:7f:3e:ed:84:e5:9a:f2:c7:4a:ef:67:9a:
         31:f6:0b:3e:c7:f0:61:e5:84:80:cb:52:c0:24:a5:c1:f8:50:
         b0:8b:68:b3:87:8e:79:72:b0:58:02:dd:36:6c:0a:40:e6:8d:
         78:60:78:e9:13:d1:cb:a4:9b:0e:da:15:37:e5:7a:ae:c7:78:
         4d:1d:35:a9:f8:c3:67:e2:8a:c1:dc:1b:be:78:74:1f:32:cf:
         49:26:ab:9a:16:a4:93:d8:0b:1d:7c:19:8c:25:9f:6b:8e:b8:
         aa:18:f3:49:ce:03:9a:cb:f8:6b:95:c9:3b:a3:74:ae:51:7f:
         91:6b:83:f9:f8:7c:dc:8d:48:e5:2e:5e:ac:bc:aa:4a:f3:68:
         56:85:0c:58:c5:cc:bd:dc:70:53:b5:62:b7:c0:45:1e:2b:3b:
         46:69:0f:4e:6d:46:7e:04:61:07:02:31:71:66:54:86:a9:a8:
         c2:9d:fc:39:00:86:2b:1b:39:06:91:d3:14:6f:ef:ee:84:92:
         bc:78:d4:10:25:0a:7e:8a:3c:f5:4d:31:f8:6d:ee:5b:4e:e7:
         58:bd:32:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:37:33 2025 by rpki-client