Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
File:                     0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json)
Hash identifier:          BwSz35GoEloZb6vCXcAiepyFuJ9RDPO05uQy0fBwAYs=
Subject key identifier:   C4:CE:1F:CC:E9:79:DD:DF:8C:38:9E:89:BF:32:17:62:F4:1B:A6:95
Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Certificate issuer:       /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Certificate serial:       0196895C38B29303615E34750EAD80CD84BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
Manifest number:          1515
Signing time:             Thu 01 May 2025 01:00:44 +0000
Manifest this update:     Thu 01 May 2025 01:00:44 +0000
Manifest next update:     Fri 02 May 2025 01:00:44 +0000
Files and hashes:         1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: i41jjtNo54mPOtAYE3b0iZ5WLZsTufX+ewEr99tkdBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 01:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:5c:38:b2:93:03:61:5e:34:75:0e:ad:80:cd:84:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
        Validity
            Not Before: May  1 01:00:44 2025 GMT
            Not After : May  2 01:00:44 2025 GMT
        Subject: CN=c4ce1fcce979dddf8c389e89bf321762f41ba695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:64:52:ef:27:f9:ba:88:10:90:33:35:74:ef:
                    3d:98:43:2b:72:cb:b2:7e:88:18:bd:25:94:b2:89:
                    26:70:af:41:d9:d0:96:40:e0:21:3c:e0:96:d4:4a:
                    17:c8:bd:6e:07:c6:20:a8:a8:83:7e:78:62:7a:2d:
                    24:eb:6e:a4:09:b1:88:c8:00:47:d1:20:f7:52:89:
                    5e:ac:1e:b2:d3:ca:2c:1c:32:31:06:ed:17:07:ea:
                    f7:fb:1b:8f:e9:42:c0:68:43:41:72:70:2f:f6:0e:
                    3e:4d:23:96:42:5f:ea:ce:e4:4c:ff:0b:a8:06:2f:
                    a1:8f:c9:3b:3c:3f:e4:84:cb:b9:66:97:d0:53:05:
                    8c:06:52:8f:fe:a0:86:eb:a8:73:6b:6f:9c:ae:c8:
                    bf:e8:3f:20:9c:3d:a2:b3:d0:e2:1b:0a:96:22:e6:
                    11:4c:c7:e5:fa:ec:af:27:04:fb:0e:57:39:49:5a:
                    25:cd:6a:82:e3:a6:8b:94:86:b2:6b:1c:fe:ce:fd:
                    de:f1:9b:0f:5d:b1:72:05:42:ff:7b:26:03:61:21:
                    e7:da:ad:a6:ce:d4:b4:3f:9d:2c:32:ae:fd:0d:01:
                    6c:e0:52:d7:0a:9b:f4:eb:fc:39:04:96:c1:2f:44:
                    28:22:f2:75:08:03:77:4a:0f:89:09:f8:9a:2e:36:
                    e0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CE:1F:CC:E9:79:DD:DF:8C:38:9E:89:BF:32:17:62:F4:1B:A6:95
            X509v3 Authority Key Identifier:
                keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:35:8d:87:28:e8:15:c0:2b:86:a9:f1:b9:a9:91:a3:9b:02:
         08:65:16:05:d9:db:f9:f5:1d:61:a5:3a:ab:02:da:e7:c1:5c:
         69:55:91:3b:08:5a:f4:fd:81:08:f9:ad:78:09:52:75:7d:1f:
         d4:a7:ff:c2:a6:20:f4:c7:58:8a:5a:05:ee:6c:1b:21:32:0f:
         c3:d0:47:c7:ac:fb:59:6d:23:9c:61:29:5e:c5:aa:28:d0:78:
         2c:fe:ae:30:a1:b1:24:cc:2e:59:de:6b:9c:9f:47:58:ee:ce:
         2d:3d:1d:94:ab:21:95:c1:ad:4f:40:12:1d:69:ae:e2:ab:58:
         5e:fb:a2:bd:da:f1:3b:31:01:b7:aa:e6:39:e2:20:ef:00:b6:
         b8:85:2f:ad:08:d4:bf:b4:ef:18:a2:60:8d:37:4a:a4:a4:ff:
         a5:98:a2:08:21:f0:ae:44:de:72:38:6c:0d:a5:73:e8:17:6f:
         eb:e4:bf:98:25:dd:94:4f:1e:51:6f:51:e7:04:00:e6:a6:32:
         9e:23:8b:2b:65:98:1a:1c:db:9e:8d:17:7f:0e:c2:97:71:4b:
         87:c6:64:43:fd:0c:cc:75:55:50:b6:56:3a:88:d6:c1:82:2f:
         4c:bc:e1:71:01:d7:46:6b:63:bf:0b:55:3d:f5:04:56:e4:0a:
         58:1b:7a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:14:51 2025 by rpki-client