Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
File:                     AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft (raw, json)
Hash identifier:          Zr8g1rCFPsuOElhzkERDJlQWbCppNQi78Bau/HXEsp8=
Subject key identifier:   60:54:E2:8C:CB:32:46:B3:E8:5F:F9:1B:7D:3E:BD:EA:BA:BC:70:3E
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Certificate issuer:       /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial:       019675D524EAD1AEA4ED1B39D4262ECD9055
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
Manifest number:          12CD
Signing time:             Sun 27 Apr 2025 06:00:24 +0000
Manifest this update:     Sun 27 Apr 2025 06:00:24 +0000
Manifest next update:     Mon 28 Apr 2025 06:00:24 +0000
Files and hashes:         1: 05RxvRBbBF0K0L7oHhPtWLGcLm4.roa (hash: lHxh82AwcxG+P9d7k0EW3lrACdc9GnkC9jNymgDYTBo=)
                          2: 0b2d1c0eIhfqUzknxCXBbc29sBw.roa (hash: fTb/wFQGtnvJhJADby3asBVLbaL6u2JGK1hNUrDdfSE=)
                          3: AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl (hash: UdwciBod8TzAhbV4MGajrue06FcvSc8OvD9Od/SwDAs=)
                          4: HWBncZpe-QUdI-UjKtD3KOuOa6Q.roa (hash: aEH99KCRztr3umg4l/8dfloLoZWlqbFbSYPxZ1bxlgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:d5:24:ea:d1:ae:a4:ed:1b:39:d4:26:2e:cd:90:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
        Validity
            Not Before: Apr 27 06:00:24 2025 GMT
            Not After : Apr 28 06:00:24 2025 GMT
        Subject: CN=6054e28ccb3246b3e85ff91b7d3ebdeababc703e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5b:0f:bc:82:ed:76:53:a2:ea:1f:a8:6a:68:
                    77:30:30:e0:13:eb:09:58:63:5a:9b:d2:5d:06:a6:
                    96:67:74:3f:9c:30:9a:5f:4b:38:30:84:5b:39:60:
                    03:78:66:31:fa:bf:c2:ba:d6:b4:1c:59:6f:8a:bd:
                    76:52:a1:5b:54:f0:ed:28:9e:a5:17:ee:57:2e:12:
                    42:ac:2d:83:07:9a:37:c4:3b:a2:3c:88:0f:6d:68:
                    7a:85:24:1c:7b:ab:59:c8:a4:fb:c8:de:02:e3:15:
                    33:b4:39:cd:73:4a:bf:0d:ce:4c:c4:93:cc:3c:2e:
                    d7:9b:79:82:ad:1b:d8:e5:11:58:cb:ce:78:26:bb:
                    8c:58:bd:b0:d2:73:01:ac:e0:89:68:16:da:ce:e0:
                    eb:3d:a3:d6:0c:6a:fd:5a:87:d0:4c:35:cb:8a:0f:
                    06:a9:1b:e6:f0:15:3b:8f:71:8b:f8:b0:20:47:7f:
                    79:de:c3:04:30:a1:65:bf:84:48:8e:b8:56:38:12:
                    6a:61:2a:7d:74:0f:c7:1c:d7:12:7f:11:1f:c8:07:
                    13:57:0e:c0:e7:ad:58:ca:18:ac:52:41:84:76:a6:
                    7f:46:dd:42:c0:03:36:56:ea:6c:09:2e:06:1a:b9:
                    4c:d2:b6:91:18:df:e0:f0:42:ff:6c:93:b9:23:dd:
                    de:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:54:E2:8C:CB:32:46:B3:E8:5F:F9:1B:7D:3E:BD:EA:BA:BC:70:3E
            X509v3 Authority Key Identifier:
                keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:4f:c2:1f:d3:f9:21:1e:26:e7:0a:43:99:b8:fd:5a:9a:53:
         9f:13:10:a7:37:59:fa:82:2f:1b:4e:00:48:fc:08:f4:41:09:
         d7:e6:99:11:13:56:70:22:e7:04:03:de:ef:81:2d:f2:14:2a:
         20:80:c9:8c:bd:93:36:99:88:05:5b:c0:ec:11:4a:cd:17:d8:
         9a:e6:83:55:63:4d:31:33:09:33:eb:30:d1:27:97:e3:79:91:
         7c:47:ad:e6:a0:e7:1a:5e:2a:d7:fb:f9:0c:82:1b:c5:ac:54:
         0c:bd:a4:86:bf:8d:03:4d:e3:67:32:07:3d:71:55:13:02:b0:
         b8:de:11:b0:f5:1e:3a:b8:d5:ea:3c:6c:4b:7c:5c:1b:58:03:
         09:bb:c5:86:82:a5:5f:9c:fe:31:58:10:ed:02:91:7d:92:65:
         4d:45:2a:a7:50:bd:92:d5:5b:0f:32:97:2b:f3:94:f4:7b:ef:
         9b:17:77:e5:b6:4c:e5:ea:6d:03:92:c4:de:60:f0:3d:89:80:
         e0:13:83:c1:9f:33:17:cc:98:ea:41:f1:76:8c:06:45:2b:44:
         62:84:9c:27:14:42:a5:ba:43:40:62:dd:6b:de:15:38:c6:81:
         79:9a:48:b2:3d:24:e5:9b:65:5e:31:c2:31:ba:d8:55:f6:3b:
         ef:51:f6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:26:28 2025 by rpki-client