Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
File:                     ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft (raw, json)
Hash identifier:          eqq3l8xmOZWI2b3WpQqX2UPHUKOwrY3LPESCRnBA+Mk=
Subject key identifier:   4E:2C:B5:94:61:16:31:A9:DB:32:74:ED:3D:56:6B:FE:C1:02:04:D2
Authority key identifier: A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
Certificate issuer:       /CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Certificate serial:       0196748C3B598B257C8E39B9A3010C3BBAF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
Manifest number:          0EB1
Signing time:             Sun 27 Apr 2025 00:01:09 +0000
Manifest this update:     Sun 27 Apr 2025 00:01:09 +0000
Manifest next update:     Mon 28 Apr 2025 00:01:09 +0000
Files and hashes:         1: ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl (hash: XlbpaswaeAbRDRvQdSwzOW1meFVKYz+H6sI5jEG9uCA=)
                          2: thsd_2EivTS0FbZ7b83mqFkVBNo.roa (hash: Pv1XY8/swMxg7QqZhkFzX8BQKAWTTZrU7LwKowVl3tU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:8c:3b:59:8b:25:7c:8e:39:b9:a3:01:0c:3b:ba:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
        Validity
            Not Before: Apr 27 00:01:09 2025 GMT
            Not After : Apr 28 00:01:09 2025 GMT
        Subject: CN=4e2cb594611631a9db3274ed3d566bfec10204d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d9:8b:72:d8:b1:e1:6e:ac:34:8c:6e:62:ac:
                    95:8e:46:1c:d6:1d:1e:50:36:51:ec:81:95:12:ed:
                    96:f9:6f:2a:de:1f:47:28:d3:cf:1c:88:01:88:a1:
                    b1:4e:5f:96:f6:cc:b1:1f:10:08:91:ff:2c:3e:93:
                    b7:1b:3d:5a:5c:f5:5a:2b:23:28:f8:56:b1:6f:7c:
                    41:58:18:9c:29:b3:d3:76:d3:e4:b2:27:74:c6:09:
                    17:b0:74:42:ee:44:eb:47:c0:12:f8:a9:24:cd:26:
                    42:37:67:a2:8c:dc:8f:a3:09:1c:d4:13:67:e6:d9:
                    ee:fb:43:04:ac:e8:41:07:27:bf:45:6f:4c:f5:71:
                    9e:f5:6d:db:2c:78:49:5f:e0:20:11:91:55:68:bd:
                    90:5b:a7:29:6e:51:4b:58:a4:f3:42:23:95:b6:8c:
                    d8:b1:73:18:55:f3:bc:d2:cc:e6:5c:33:c8:38:e6:
                    3a:18:53:44:13:e2:6f:b3:8e:91:21:c6:0e:cd:de:
                    d8:95:bf:b3:d2:4c:5e:9a:3a:c5:0e:8f:46:e2:5b:
                    ce:12:07:5b:89:55:a3:6d:12:a6:ac:dd:db:f7:bf:
                    a6:89:0b:b5:8c:38:e5:b6:02:fe:44:c0:4f:ae:28:
                    e1:c0:8f:c8:05:f2:f0:c8:af:d6:77:8c:3b:7e:ce:
                    bd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2C:B5:94:61:16:31:A9:DB:32:74:ED:3D:56:6B:FE:C1:02:04:D2
            X509v3 Authority Key Identifier:
                keyid:A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f2:5e:c1:91:73:ad:00:36:f2:bf:84:6c:53:3b:b8:09:1f:
         7d:d2:2e:7a:bc:32:aa:30:77:dc:77:42:a9:12:80:18:09:5d:
         ef:a6:3e:cf:95:a5:c4:76:a3:81:5f:cd:1d:53:d1:e6:4a:31:
         8f:df:29:4f:22:2a:1a:2a:4f:66:36:98:2c:53:4c:77:5e:51:
         14:05:00:ed:23:1c:4c:8b:45:f2:83:3e:5b:78:3f:80:4e:4b:
         28:03:05:67:36:23:22:41:ff:6a:bb:f3:5f:9a:2f:a9:ed:a9:
         d7:99:98:fe:87:8f:2d:d7:76:6f:f6:62:19:c5:dc:7f:cc:9b:
         da:2f:4f:c5:d9:22:cd:dd:74:3e:6e:33:ea:8c:11:eb:a3:2a:
         f7:e5:87:58:26:d2:92:5c:1e:7a:e7:ec:f3:62:3c:9e:ce:a7:
         3d:52:d9:5c:27:49:c1:d2:55:3f:fc:9c:da:72:45:4b:9f:29:
         9a:5e:d0:73:12:4d:24:a4:d8:1b:18:f0:1d:23:7a:a6:e9:23:
         4f:a5:17:a1:8f:f3:ac:88:ad:bf:f6:9c:1e:38:02:44:80:05:
         a4:f7:89:e6:96:c2:af:16:28:c5:3f:02:5b:9a:1b:b9:85:6b:
         8b:17:b6:cb:6e:05:06:ea:c3:6a:3f:d7:aa:0e:c7:a8:ba:d5:
         91:5f:9e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:02 2025 by rpki-client