Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft
File:                     FvAucKZVP_DGZROe5VZxyGBlgIE.mft (raw, json)
Hash identifier:          xAABk70Oo/PG93lBhmZT+N+ysh4HL9q+efhkTZ7BJrg=
Subject key identifier:   FF:73:E4:BB:9B:63:86:AE:1B:C5:45:C3:5B:E1:60:38:BC:1B:CB:40
Authority key identifier: 16:F0:2E:70:A6:55:3F:F0:C6:65:13:9E:E5:56:71:C8:60:65:80:81
Certificate issuer:       /CN=16f02e70a6553ff0c665139ee55671c860658081
Certificate serial:       01967530AB25280FD3E05029BD4A94001543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FvAucKZVP_DGZROe5VZxyGBlgIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft
Manifest number:          150A
Signing time:             Sun 27 Apr 2025 03:00:45 +0000
Manifest this update:     Sun 27 Apr 2025 03:00:45 +0000
Manifest next update:     Mon 28 Apr 2025 03:00:45 +0000
Files and hashes:         1: FvAucKZVP_DGZROe5VZxyGBlgIE.crl (hash: 69jydsFJ31SiWQprRNLDU0JuvThPPmj2RMvj1XNO0Fo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FvAucKZVP_DGZROe5VZxyGBlgIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 03:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:30:ab:25:28:0f:d3:e0:50:29:bd:4a:94:00:15:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f02e70a6553ff0c665139ee55671c860658081
        Validity
            Not Before: Apr 27 03:00:45 2025 GMT
            Not After : Apr 28 03:00:45 2025 GMT
        Subject: CN=ff73e4bb9b6386ae1bc545c35be16038bc1bcb40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:b3:9d:ad:a5:b8:b6:2a:ca:81:c7:dd:57:
                    67:71:b4:b4:d5:68:ef:fd:d4:b5:0b:42:77:82:79:
                    13:20:e9:cf:17:0d:94:76:b9:66:2a:e2:9e:e7:68:
                    de:1e:34:a3:ce:83:bd:43:e7:2c:f7:51:4b:8a:f1:
                    b9:57:41:5f:0f:d2:e4:bd:ce:c3:ab:17:d0:c8:27:
                    54:6e:da:da:2b:41:f7:42:e6:e5:6c:9b:bc:27:fe:
                    aa:77:78:58:be:04:78:86:c5:a9:ac:9d:10:13:8f:
                    0e:f0:81:25:09:8c:29:e9:95:d0:93:c8:30:95:be:
                    23:b1:fb:41:f5:b5:7d:6b:98:4c:53:11:12:90:b8:
                    0d:39:14:d1:f9:11:d5:94:22:b2:95:71:08:48:ba:
                    d3:08:10:0e:3b:12:83:dc:a1:6f:0f:70:a3:6e:3a:
                    f0:18:77:44:b2:a8:9b:09:b7:cd:25:1c:cd:f5:43:
                    0d:40:08:9e:af:a3:1c:a2:ec:be:46:9b:b1:8c:a1:
                    cd:6a:46:c5:fb:3a:be:dd:a1:39:cf:d2:04:c2:3f:
                    21:ef:ed:52:79:f2:a6:97:06:5d:48:c8:82:8f:6f:
                    5e:b3:dd:53:f0:01:bb:b3:e2:a3:1e:22:12:a0:ab:
                    1b:3a:3e:ce:d9:ca:98:31:80:d0:52:15:46:30:51:
                    31:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:73:E4:BB:9B:63:86:AE:1B:C5:45:C3:5B:E1:60:38:BC:1B:CB:40
            X509v3 Authority Key Identifier:
                keyid:16:F0:2E:70:A6:55:3F:F0:C6:65:13:9E:E5:56:71:C8:60:65:80:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvAucKZVP_DGZROe5VZxyGBlgIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:5c:13:06:99:ef:30:4f:b7:d1:7e:f1:f9:1c:66:eb:d7:6a:
         51:94:1b:01:e1:87:6c:2c:27:02:6d:5c:2c:fd:65:18:a7:8b:
         a3:ab:5d:66:97:63:ee:6b:12:b8:ad:41:dd:7a:5e:70:95:c8:
         b9:42:a8:c3:93:bd:fe:76:80:19:ac:43:b4:bc:f3:4a:a4:b2:
         7b:9a:a1:c0:a6:50:8f:d4:7e:5e:33:c7:0a:66:3b:28:0c:b3:
         42:ee:f5:7d:f6:e2:1d:68:68:71:04:49:cf:c6:67:4b:3e:75:
         db:48:d4:8e:ee:cc:07:e7:2a:be:f3:09:48:bb:52:6e:0d:4b:
         3d:0d:b1:cd:95:51:82:b5:89:68:b5:e4:98:fc:30:f4:a6:8b:
         71:c7:2f:9d:f1:70:00:0f:49:bf:fa:60:f4:7c:1e:ce:c1:b3:
         11:1b:bf:c0:85:d6:f8:92:d4:00:ec:56:67:82:20:9e:35:e9:
         52:78:fe:6e:73:5d:87:96:bd:91:32:85:d6:68:81:1a:0f:11:
         e8:e5:db:f1:33:c1:47:66:98:eb:0d:b2:a9:11:f5:99:ec:8a:
         84:9e:9c:4a:f1:f7:df:71:9a:09:d9:fd:da:4f:16:c9:4b:e9:
         67:a0:c6:90:f8:e1:9b:9f:c4:b9:f0:2e:49:e6:b2:27:5a:0a:
         39:ce:be:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:19:45 2025 by rpki-client