Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
File:                     jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft (raw, json)
Hash identifier:          E4L/CdTJ+W1AdZmS2tFDh6YK6/Rc85Nz8pla+k3fF4c=
Subject key identifier:   98:54:D9:79:07:67:57:9C:04:42:40:6E:DB:DF:91:5B:5C:CB:C8:23
Authority key identifier: 8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
Certificate issuer:       /CN=8e5661697da90b5800bc42adf9b45953219755d0
Certificate serial:       019696E0F8D0DFF807D6FE62A16F2A0549D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
Manifest number:          0E19
Signing time:             Sat 03 May 2025 16:00:48 +0000
Manifest this update:     Sat 03 May 2025 16:00:48 +0000
Manifest next update:     Sun 04 May 2025 16:00:48 +0000
Files and hashes:         1: jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl (hash: xTxN1jQdFJO7AOGQZrbtuDlyNgNwfUcqmtE2Vc1o/9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:96:e0:f8:d0:df:f8:07:d6:fe:62:a1:6f:2a:05:49:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e5661697da90b5800bc42adf9b45953219755d0
        Validity
            Not Before: May  3 16:00:48 2025 GMT
            Not After : May  4 16:00:48 2025 GMT
        Subject: CN=9854d9790767579c0442406edbdf915b5ccbc823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bc:d8:1d:50:7a:3a:a6:ce:89:43:c2:c4:a2:
                    01:55:d9:74:cd:16:35:62:16:cd:61:c2:c1:b5:67:
                    6d:f3:59:8f:f3:9d:c1:2b:e0:5e:3a:19:c7:25:dc:
                    fb:63:b7:a6:02:83:92:8e:87:33:84:f2:e4:4c:31:
                    92:b0:fe:c7:15:be:40:46:d8:0a:ee:ac:c2:a5:40:
                    c5:09:01:6c:48:7a:e4:5a:2e:02:b9:2b:f6:57:6d:
                    b8:f3:c9:56:d7:a1:3f:07:42:8b:bf:2d:19:e1:af:
                    b5:96:ad:8d:48:b5:40:5d:e0:c6:fa:8e:e4:0f:e1:
                    6f:17:73:04:a0:9a:8e:03:6a:22:24:88:33:0a:ae:
                    c0:6e:a5:20:32:dd:d2:16:e7:4d:fb:4c:73:da:35:
                    08:8d:bb:cb:8b:da:c6:cd:83:d5:f0:24:7e:59:33:
                    a3:2c:a8:3f:5f:99:23:f6:ae:ae:da:a6:6a:72:55:
                    20:dc:29:e3:5d:46:7a:a7:73:0b:b8:7d:40:85:7c:
                    73:e0:dc:ab:20:ce:50:1d:ec:5c:f7:82:f7:9e:22:
                    25:8c:1b:d3:f2:24:7a:92:ac:90:3a:4f:43:f6:0f:
                    d6:9e:b6:10:6e:5c:25:41:1e:18:0e:2a:58:da:76:
                    3f:79:09:fb:d3:ad:05:02:16:dd:b2:07:19:ce:d7:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:54:D9:79:07:67:57:9C:04:42:40:6E:DB:DF:91:5B:5C:CB:C8:23
            X509v3 Authority Key Identifier:
                keyid:8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:27:7a:c3:51:57:50:01:b9:15:2b:42:94:e6:6c:93:0f:f0:
         43:4f:82:63:63:ea:80:ab:9a:35:82:e7:b1:31:5f:c0:1d:dc:
         2b:07:33:6c:e3:4c:a5:9e:1a:53:e3:86:fc:27:ff:a9:63:20:
         45:a6:71:8c:24:2b:34:b7:dc:d3:b5:2f:e9:8c:fd:dd:2a:db:
         e3:19:33:aa:77:ed:a2:16:37:b1:a6:91:94:84:1d:7f:72:03:
         2e:81:ed:c9:ca:8c:43:41:3a:ae:38:2c:b1:2b:2c:e7:7f:ad:
         bf:89:38:f3:17:56:bf:f0:cf:db:d3:0c:80:be:da:82:8f:85:
         e0:d1:0e:95:f3:54:f2:aa:f3:a8:f7:ef:d9:fd:34:f9:6e:3f:
         ad:02:f6:b5:6f:f6:f1:c4:08:c3:ab:ec:70:5b:89:98:81:0b:
         13:33:60:fa:78:a2:8d:a3:d1:e1:b5:1a:18:db:36:98:cd:d1:
         a5:c0:4f:e2:fc:4a:09:60:94:a9:7c:7d:8b:d8:e8:b8:6b:b3:
         9c:f2:1c:46:09:b6:4b:46:f7:12:2f:06:d0:dc:63:28:c3:0d:
         33:fb:0a:9d:07:ad:de:f6:95:99:1f:e9:13:8f:c8:8e:ba:e0:
         10:6d:f4:ac:a6:02:17:b9:e1:b1:33:c6:e5:f4:5e:f5:3d:8f:
         cf:dd:07:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 23:31:30 2025 by rpki-client