Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
File:                     28FEzhVO7p27NWLOTNMigzhkEzM.mft (raw, json)
Hash identifier:          B+vsod5rnn31OKKN+8n4zWzowKClKmpwYauRWID6x+w=
Subject key identifier:   55:F9:48:BA:32:A1:70:80:47:10:97:10:F3:E4:A5:BD:A4:4E:16:F5
Authority key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
Certificate issuer:       /CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Certificate serial:       019685EDDBB6D22E88F32776EE9339C568FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
Manifest number:          1502
Signing time:             Wed 30 Apr 2025 09:01:19 +0000
Manifest this update:     Wed 30 Apr 2025 09:01:19 +0000
Manifest next update:     Thu 01 May 2025 09:01:19 +0000
Files and hashes:         1: 28FEzhVO7p27NWLOTNMigzhkEzM.crl (hash: f5KJRGq2wjBRiun1fMc3tgpsWGRH0cexDDLr2k7y9pc=)
                          2: GYQEfAUHW7dZgctfSOEiK9IcuBg.roa (hash: Km85w7FHDGWwEv7yzqhkKLXi+TpyoQCcyxITiEoHCDY=)
                          3: VK2lkpPJSWNvcFm_VI7rxrLDgwg.roa (hash: OVrxxsaCYNK3a6LSw5LlCrrYQ6BsGkALeDXQ/cBmiLI=)
                          4: neolYGdLKpBXHmNej6CjSGJo33s.roa (hash: rdeL6tzNKDLvJGPaZiOq6jxc0q10y5ECjhYex4TDkLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:ed:db:b6:d2:2e:88:f3:27:76:ee:93:39:c5:68:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc144ce154eee9dbb3562ce4cd3228338641333
        Validity
            Not Before: Apr 30 09:01:19 2025 GMT
            Not After : May  1 09:01:19 2025 GMT
        Subject: CN=55f948ba32a1708047109710f3e4a5bda44e16f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:92:f4:fb:81:7b:52:33:bb:af:33:46:bc:62:
                    c0:c9:b7:30:59:2d:0a:0d:8b:69:d9:fc:24:3d:03:
                    bb:6a:71:2e:36:4d:78:dc:c3:f2:49:e7:73:5c:65:
                    b6:ad:10:07:17:94:a9:d8:b0:76:e1:16:10:0b:63:
                    e5:8c:fd:23:dd:83:5c:b9:3f:32:1c:f1:1c:f0:69:
                    08:e2:f2:83:e3:69:d2:0f:f1:a3:c3:73:d5:f2:3c:
                    ad:dd:a3:23:cf:8c:51:c1:15:0c:ac:0f:b7:63:97:
                    54:97:b1:d8:35:0f:27:fd:4a:e0:7e:01:b7:5e:ac:
                    7d:c7:c5:1e:48:b9:e9:35:4a:19:a8:75:73:ae:ed:
                    fb:8e:ce:97:46:c1:17:79:1e:df:7d:bb:80:ef:65:
                    9c:5c:34:fd:a0:70:60:34:cf:6c:5d:54:70:a4:be:
                    dd:3c:58:37:9b:5b:60:71:36:eb:c8:a8:19:b4:1f:
                    d8:76:4b:e5:48:62:b8:27:0c:22:7a:25:ae:1d:86:
                    b0:e2:74:20:9f:9d:21:14:4f:d5:31:ef:5a:78:93:
                    2c:53:b8:18:95:de:c7:a3:8d:1b:ec:1f:eb:b6:7f:
                    fd:54:35:f4:c7:61:72:49:08:4b:04:28:93:1c:11:
                    19:00:81:b2:5b:a9:21:75:c7:8e:ec:c9:91:37:57:
                    be:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F9:48:BA:32:A1:70:80:47:10:97:10:F3:E4:A5:BD:A4:4E:16:F5
            X509v3 Authority Key Identifier:
                keyid:DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:8d:ab:e6:e6:9d:59:ad:59:78:e5:6b:9d:37:ac:07:b0:79:
         8c:4f:e1:60:63:02:6c:18:29:51:58:3c:c6:c5:f6:4e:a6:5d:
         ee:0c:b7:74:44:18:5c:eb:b9:b5:1d:31:cd:30:39:5e:05:51:
         59:16:da:74:e7:28:6b:64:40:58:6b:e9:23:52:93:ce:89:73:
         bc:04:8a:77:78:73:a5:a1:5c:15:1f:cc:49:47:6b:cc:af:56:
         33:fc:1a:30:d1:49:3d:8d:ec:f2:6a:51:2b:d8:cf:8c:56:30:
         ee:b2:42:df:b3:b5:1a:25:c8:d4:cf:b0:3e:5d:c7:ee:0e:6d:
         87:89:e8:f0:67:81:a3:4d:d4:40:12:b1:b9:17:97:28:07:55:
         61:ab:8e:dc:bb:f6:c2:8b:f4:08:6e:a1:73:43:df:03:ff:5e:
         27:47:a8:ab:41:7c:87:b9:b9:fb:80:8b:c5:97:69:d3:55:d8:
         72:f7:ce:18:3d:d6:9b:2e:e4:18:61:04:de:0d:aa:b8:43:35:
         39:ee:26:ae:8b:e8:6b:d2:c6:0e:fa:62:17:e5:3d:85:6e:91:
         98:bf:24:84:7d:39:70:8b:56:21:58:a4:28:18:d0:55:87:47:
         5d:f1:63:d4:0a:d7:ea:f8:0a:c0:7b:9a:65:36:b8:d1:9f:a5:
         8f:60:e6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:34:22 2025 by rpki-client