Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
File:                     SqbchPRraQchSFpEBb_JOdolSWk.mft (raw, json)
Hash identifier:          70nvw9Sm/d9Vgn/wCLo5k/KslfuVt9fRjQ+9cmGh5is=
Subject key identifier:   56:65:7E:39:03:0B:CC:44:1D:C3:16:1C:E2:D0:8C:A9:B9:F8:B7:CC
Authority key identifier: 4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69
Certificate issuer:       /CN=4aa6dc84f46b690721485a4405bfc939da254969
Certificate serial:       0196759E698630CD8FE770D47B47D9750710
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
Manifest number:          64
Signing time:             Sun 27 Apr 2025 05:00:38 +0000
Manifest this update:     Sun 27 Apr 2025 05:00:38 +0000
Manifest next update:     Mon 28 Apr 2025 05:00:38 +0000
Files and hashes:         1: SqbchPRraQchSFpEBb_JOdolSWk.crl (hash: V+x6RX+FxRfVNVXum5zSIWG7R6ZXF2c6yG7CJZJdoM4=)
                          2: b__HqKu-AMKs2UTm6p-v2OEs7OA.roa (hash: f7396FR/6MUlNoG4o7cmoviarkI5X6EgtZeJr/g+J2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:9e:69:86:30:cd:8f:e7:70:d4:7b:47:d9:75:07:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa6dc84f46b690721485a4405bfc939da254969
        Validity
            Not Before: Apr 27 05:00:38 2025 GMT
            Not After : Apr 28 05:00:38 2025 GMT
        Subject: CN=56657e39030bcc441dc3161ce2d08ca9b9f8b7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c1:b5:d0:1b:2b:38:4d:c4:79:2e:46:a6:98:
                    ec:dc:f3:c7:87:05:c7:9a:a9:c7:3b:ea:f6:d9:e8:
                    34:f7:ad:e5:a5:dc:9f:40:5e:c7:35:29:c9:47:0d:
                    6f:29:53:fc:ef:44:cc:ce:16:63:55:5e:6d:88:c9:
                    87:2d:92:44:50:f7:3b:ae:51:0c:de:32:4f:26:37:
                    9e:04:86:25:55:77:e8:40:2b:5b:08:2f:5e:9f:d0:
                    97:36:fb:b6:cb:a7:63:56:20:57:d4:9d:87:d3:98:
                    58:01:22:72:fa:02:fd:95:70:98:3c:ae:81:83:57:
                    a0:50:56:84:6b:b1:7e:bc:cb:b1:78:09:b3:fe:f6:
                    73:33:27:7f:99:1c:96:1e:92:12:28:b6:af:2a:3c:
                    bf:cb:0c:3c:d2:20:c2:cf:83:78:89:82:31:1f:87:
                    87:84:a6:86:bf:15:94:43:f9:78:04:d8:a6:0c:a5:
                    48:9d:33:e7:25:35:bb:34:f7:9f:17:83:40:e5:c4:
                    9d:dd:ba:af:0a:1d:12:4f:62:da:50:06:0c:35:08:
                    5c:36:77:43:db:90:e9:28:88:7a:d0:e2:3e:d3:d3:
                    2a:0b:51:b8:6f:c2:3e:ed:3e:eb:bf:75:a3:d3:1a:
                    88:4d:6d:9e:d8:69:30:7b:53:d6:13:40:3b:5b:b7:
                    64:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:65:7E:39:03:0B:CC:44:1D:C3:16:1C:E2:D0:8C:A9:B9:F8:B7:CC
            X509v3 Authority Key Identifier:
                keyid:4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:92:e1:02:27:1f:90:be:89:9e:4a:51:3e:7f:ef:be:df:5a:
         fe:70:7e:95:7f:8e:3b:43:5e:ac:68:6e:9b:1f:2a:b9:ff:43:
         67:f3:2e:bb:4a:ba:11:05:77:52:6c:03:0e:ed:2d:0d:3b:2c:
         2e:b0:23:e4:d1:b5:74:2d:b7:6d:12:d1:3a:b8:5d:92:02:e0:
         26:a1:c2:ee:9b:d7:2d:59:6c:27:95:93:d3:2f:62:8d:63:cb:
         8e:56:8d:27:5b:82:92:54:28:98:64:b7:bc:5e:b2:1c:82:61:
         95:e1:99:69:9b:3e:96:27:b6:e2:96:81:b1:9f:95:87:f0:e2:
         e3:01:f8:b6:f2:ce:09:07:7c:09:90:41:8d:a6:8d:77:5e:ae:
         48:23:51:14:7c:13:95:91:b0:05:68:87:bf:0d:8e:d5:7f:51:
         a5:3c:47:46:09:7e:68:b9:93:7c:86:57:e0:06:0f:33:3e:08:
         58:13:ff:36:3e:9f:40:40:1b:d3:1e:7d:5a:ef:24:9f:cf:c9:
         9a:2e:b5:65:43:a6:af:9a:c8:62:e2:6e:62:39:be:f8:12:19:
         6e:fc:ff:43:87:71:ac:ae:0f:7a:3c:ca:0d:72:f5:f5:be:d3:
         b2:ef:ff:23:26:b1:e8:6b:81:7c:f2:bc:13:a5:bf:33:4a:1b:
         72:d7:97:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:32:28 2025 by rpki-client