Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
File:                     odAxU3OwmwYapZ8SnVkuq_ezqu8.mft (raw, json)
Hash identifier:          KaiQ7WKF8JEO/QoaT5pzT8VjGJcX/LWDrBFpRSZuA4k=
Subject key identifier:   39:60:5B:54:8F:44:14:8C:B2:CE:60:66:61:BB:72:02:4E:C9:10:8C
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Certificate issuer:       /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial:       019676E84010B23B50BE78EECA9E3D4259AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
Manifest number:          1520
Signing time:             Sun 27 Apr 2025 11:00:54 +0000
Manifest this update:     Sun 27 Apr 2025 11:00:54 +0000
Manifest next update:     Mon 28 Apr 2025 11:00:54 +0000
Files and hashes:         1: H4Im8Swj1FSuJyYqN8JPK7UpVDU.roa (hash: jQUdvjp+XMu9RhMc9HBGBO2BWt37hObPuG6tYSQQ2Vc=)
                          2: NqcS3iBK8U8flvef0Nqw2TVfi60.roa (hash: j8yFbIlyMimvTa7T3CseeI21D35WgrPORHectZm7+m8=)
                          3: RoGTylsAvJ0kfUqQmOGMGPl4lMw.roa (hash: M6AyczLNwaE/pwZJ9qp9kSzxL5JgaMLnNyyEPKCm858=)
                          4: odAxU3OwmwYapZ8SnVkuq_ezqu8.crl (hash: IwbFttE1uZRCeAOe1nZR0wDjiHpMGtCpGMFVDzfzYrs=)
                          5: vzGcID_N34zQFrVI3nMugUoVewA.roa (hash: s5waq9wx34dg2rh+ta7n4AjQKU2ote6EQ3de9ofeRpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:e8:40:10:b2:3b:50:be:78:ee:ca:9e:3d:42:59:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
        Validity
            Not Before: Apr 27 11:00:54 2025 GMT
            Not After : Apr 28 11:00:54 2025 GMT
        Subject: CN=39605b548f44148cb2ce606661bb72024ec9108c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ce:91:3e:06:a8:c8:87:83:91:2b:ae:57:49:
                    4a:f1:4a:07:34:f6:2b:43:f6:04:4f:c2:fc:18:ee:
                    34:eb:13:38:34:03:24:14:43:93:24:f6:a3:e3:02:
                    19:2e:f9:23:b6:7f:02:96:80:33:25:49:ae:2b:75:
                    28:06:5c:6b:bc:da:24:8f:16:7a:38:3c:85:67:ab:
                    9b:12:6d:fd:76:7f:60:2c:79:42:39:5d:e8:2c:35:
                    c5:c4:dc:4b:d5:bd:c1:5e:d8:e9:f2:c4:15:dc:f2:
                    f3:77:e0:e0:5d:b1:20:df:f7:77:23:1b:76:99:ad:
                    91:06:13:01:27:9c:81:b3:da:d3:d1:22:1a:a5:08:
                    9b:b0:3f:e5:53:c9:c2:4a:cd:15:fa:24:e2:82:ed:
                    ee:1b:a7:ec:5e:85:0b:0f:fd:58:c8:5d:63:6a:ff:
                    49:45:a3:01:c1:9b:2a:79:92:fd:0b:cd:f1:28:8b:
                    1f:2c:6d:b9:99:58:b5:29:6e:46:5e:dd:f1:c5:78:
                    2c:83:05:2f:17:40:40:d1:c0:c9:bd:11:bd:7f:ce:
                    cf:3c:8a:de:5b:c5:0d:97:48:d0:24:7f:00:97:2b:
                    f7:e3:d2:ff:22:67:43:6a:4d:b2:a0:26:e8:4d:a6:
                    91:51:77:3c:e4:b9:3c:1b:b7:0f:1b:2f:a6:d1:93:
                    58:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:60:5B:54:8F:44:14:8C:B2:CE:60:66:61:BB:72:02:4E:C9:10:8C
            X509v3 Authority Key Identifier:
                keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:6a:c6:7d:0a:30:0d:52:51:0a:79:c1:4c:4d:fa:11:84:41:
         df:5e:53:77:33:33:96:50:25:c2:4c:91:3f:89:b2:9e:4b:5c:
         4b:a3:6c:3c:26:62:a3:ec:bb:1b:23:8b:ab:01:e6:37:3a:cf:
         be:ac:bc:d0:39:aa:fb:03:b1:d1:b4:d8:65:7f:1d:a3:12:d2:
         53:72:30:40:c7:83:25:64:19:e7:0b:dd:48:76:f1:ed:68:21:
         7b:e7:80:60:6d:16:e0:83:52:13:05:8a:b1:cf:36:4b:da:3f:
         33:42:6e:d9:8e:ad:87:d2:47:3a:08:fd:25:5a:3f:e0:cc:09:
         32:5b:63:c2:93:3c:aa:93:ba:b4:40:40:27:ff:aa:0a:99:52:
         f4:64:53:9b:86:12:63:a1:0d:6c:b6:34:f2:ea:fa:04:d1:22:
         3a:bb:19:9d:fe:0c:45:6d:14:4e:8b:3a:e5:eb:55:b5:a0:fe:
         56:16:50:91:b1:73:97:21:c7:47:2c:d5:79:27:f6:76:3e:de:
         b7:40:b3:83:fd:e6:89:d8:47:3f:84:53:a1:2b:52:0c:ca:3b:
         ce:d8:5e:bf:c9:26:18:92:32:74:bd:23:c3:67:59:e0:26:e5:
         3c:eb:6c:36:05:8f:70:f1:5d:1c:c3:9a:81:36:d4:ec:24:30:
         60:83:b6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:52:52 2025 by rpki-client