Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
File:                     1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft (raw, json)
Hash identifier:          zLcw4G1uOVNOCULqc9veYxYMKADBIR3/Rhrh36HNbGw=
Subject key identifier:   C5:4B:4C:8A:6B:F5:4F:8A:A0:A9:EC:A0:1C:74:F4:B5:79:19:1B:5C
Authority key identifier: F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
Certificate issuer:       /CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Certificate serial:       019691159D14BBC191120DB39EB3E59C5BE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
Manifest number:          084C
Signing time:             Fri 02 May 2025 13:00:34 +0000
Manifest this update:     Fri 02 May 2025 13:00:34 +0000
Manifest next update:     Sat 03 May 2025 13:00:34 +0000
Files and hashes:         1: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl (hash: AB/YWJ5O1sKxe6JOOCCnYSJ8jzCIxlHySRaDD0oVeCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:91:15:9d:14:bb:c1:91:12:0d:b3:9e:b3:e5:9c:5b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a6b79b0397eb45ee827a4d63dca74769552956
        Validity
            Not Before: May  2 13:00:34 2025 GMT
            Not After : May  3 13:00:34 2025 GMT
        Subject: CN=c54b4c8a6bf54f8aa0a9eca01c74f4b579191b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:32:97:33:db:8e:5c:b8:75:6a:11:7f:2f:45:
                    b2:64:d4:22:42:27:41:b1:b1:74:8e:8e:92:88:f4:
                    34:ce:c3:f0:07:50:b0:eb:e2:89:6a:ea:76:9b:e7:
                    82:ac:6b:e6:ae:fe:a7:96:73:f6:0f:95:17:cb:4e:
                    a1:c3:3a:05:a6:52:2a:0c:92:d8:be:a0:38:bc:12:
                    51:94:2e:6b:0d:c2:e7:4f:70:e0:08:15:93:68:fc:
                    16:40:84:e1:d6:dc:bc:7b:39:c6:b9:c7:17:45:a3:
                    30:2a:d9:91:e9:ca:69:80:b5:3e:10:6e:47:d0:d7:
                    a0:99:b1:83:b8:9e:f1:4a:3f:76:63:55:ea:4e:52:
                    ef:49:e3:0a:0d:51:c6:74:dd:6e:57:9f:49:68:15:
                    bf:63:72:a6:9c:80:ec:f6:d4:25:97:c4:e9:e2:36:
                    13:77:6c:b2:71:ec:9f:6a:cf:f8:6d:db:c9:a5:d9:
                    6e:34:d6:b6:07:0d:00:b0:8c:e7:f0:4f:53:37:fa:
                    a6:ee:de:bd:98:d8:88:40:09:25:9c:6a:0f:53:47:
                    aa:a7:93:39:8b:a6:0b:b6:59:98:1f:b3:1b:3a:b0:
                    ae:00:a6:d2:0b:e9:94:c2:ff:3f:69:aa:18:f2:03:
                    83:ee:44:1f:d9:69:dd:29:8b:c3:76:af:eb:0a:17:
                    61:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4B:4C:8A:6B:F5:4F:8A:A0:A9:EC:A0:1C:74:F4:B5:79:19:1B:5C
            X509v3 Authority Key Identifier:
                keyid:F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:9f:20:e9:65:77:d6:65:fe:eb:ac:98:a6:65:53:98:75:85:
         08:09:e8:86:ff:67:c1:71:7c:1c:c6:af:ae:e9:06:e8:f7:4a:
         c5:1c:66:40:24:a5:08:6b:7a:b4:a5:ef:26:31:6b:ad:cb:e8:
         c0:a0:e3:ca:01:f2:48:22:22:7c:d1:a7:bf:5b:5c:08:6f:de:
         e4:c6:bc:74:00:17:ef:6c:ae:3b:f2:05:96:0e:77:98:15:5e:
         a0:6f:73:29:6a:8c:75:ea:7b:ea:05:4c:a7:98:51:81:07:76:
         fa:6b:70:9d:6d:12:42:b3:bd:90:92:63:cb:83:e2:2d:46:2a:
         03:04:64:ef:0c:7f:8c:fe:0a:1a:59:15:c0:e3:8d:1b:d6:bb:
         57:57:cd:80:80:35:97:75:d2:c7:a4:7e:b1:8b:f4:4b:44:4c:
         72:f8:8d:61:23:9d:76:86:7c:4f:ca:7b:91:21:7b:6f:26:ad:
         2f:0e:e7:17:08:5a:ff:a5:9b:12:ad:22:7b:3e:47:98:aa:7e:
         3d:ae:80:9d:6b:4c:99:2f:e2:d5:56:fc:05:c9:98:7b:a0:a2:
         d8:11:af:75:da:53:2f:40:01:fa:f5:21:af:6f:b3:20:93:f6:
         22:9c:55:07:d5:b2:14:72:ce:7e:e1:3e:fe:a2:47:b8:4d:ea:
         94:24:1d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:49:30 2025 by rpki-client