Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft
File:                     pUiu2QpeI7SnNpVgjztleL_exhU.mft (raw, json)
Hash identifier:          qj/Qhw2AN7Xe85R1M1lWkt0uQSAFyhvFwaRZ+WnCqkg=
Subject key identifier:   7F:D3:79:3C:86:22:E4:D2:86:22:F0:11:09:84:20:8F:B8:2C:60:8A
Authority key identifier: A5:48:AE:D9:0A:5E:23:B4:A7:36:95:60:8F:3B:65:78:BF:DE:C6:15
Certificate issuer:       /CN=a548aed90a5e23b4a73695608f3b6578bfdec615
Certificate serial:       01968F94E26F1591C91F05988FB85F8D79B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft
Manifest number:          0DE3
Signing time:             Fri 02 May 2025 06:00:21 +0000
Manifest this update:     Fri 02 May 2025 06:00:21 +0000
Manifest next update:     Sat 03 May 2025 06:00:21 +0000
Files and hashes:         1: O4HPjKtfYNvc1lksPI1mIC2KoZE.roa (hash: G5jnz6Oa7fbgHp+PjYrqWRfRXq38tvNWQ9FfwitWKvo=)
                          2: pUiu2QpeI7SnNpVgjztleL_exhU.crl (hash: EVpzypOkYrL31Kvnird7c9H4Xo2qx8o5CuXh6FQ5O3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 06:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8f:94:e2:6f:15:91:c9:1f:05:98:8f:b8:5f:8d:79:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a548aed90a5e23b4a73695608f3b6578bfdec615
        Validity
            Not Before: May  2 06:00:21 2025 GMT
            Not After : May  3 06:00:21 2025 GMT
        Subject: CN=7fd3793c8622e4d28622f0110984208fb82c608a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:58:20:81:44:a4:f8:8f:7a:45:74:88:f3:01:
                    fa:f5:8a:3b:6c:bf:6d:df:62:6e:2d:da:ea:8d:2e:
                    49:1c:bd:89:36:ab:2f:42:29:f0:1e:40:32:ed:2d:
                    bf:53:90:7f:b0:a6:1a:6d:f7:6c:bd:2a:7c:f2:21:
                    56:9f:8b:12:93:21:41:01:90:37:5d:a3:31:0a:2f:
                    a3:da:8b:6f:55:1d:a7:0d:58:ff:8e:d9:68:85:24:
                    08:c4:99:5f:f1:35:f1:55:b5:e0:3d:48:96:18:6e:
                    03:de:06:d9:44:aa:29:57:31:c0:cb:ff:89:9d:73:
                    67:a4:85:dc:4e:89:0e:c5:42:fd:cb:8e:a6:24:80:
                    09:13:6a:56:c6:44:d7:ba:5e:2a:67:ad:a8:85:68:
                    25:a3:40:31:33:d8:c2:80:a7:b7:56:20:b9:3f:da:
                    83:3f:b9:94:e7:41:b8:10:3b:b7:44:61:9f:12:bc:
                    f8:8d:10:ae:14:98:29:2b:b5:e6:ad:12:51:00:5c:
                    35:4a:a7:ba:c5:b9:86:08:c9:7c:10:dd:ad:fd:51:
                    d1:2a:48:8f:0a:29:83:a5:3e:7f:17:49:88:7c:4c:
                    42:25:07:b7:e8:3a:44:52:c0:fa:21:51:3b:bc:70:
                    69:95:18:7c:22:7d:20:f0:56:31:ba:81:54:00:8c:
                    b8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D3:79:3C:86:22:E4:D2:86:22:F0:11:09:84:20:8F:B8:2C:60:8A
            X509v3 Authority Key Identifier:
                keyid:A5:48:AE:D9:0A:5E:23:B4:A7:36:95:60:8F:3B:65:78:BF:DE:C6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ff:a9:04:91:0e:2f:e5:65:25:e0:05:21:35:ae:30:c2:c3:
         7b:bd:90:c2:46:4e:17:bb:94:be:0d:19:de:2a:4e:76:d5:d4:
         63:0a:c2:e6:79:09:0a:f9:cb:70:66:75:46:a3:2d:47:ea:2e:
         05:7d:fe:b9:f6:dd:61:91:03:10:de:c2:d3:e0:ea:92:53:c0:
         b6:4f:a9:54:b4:6b:5e:25:bf:11:9a:17:b4:8e:1f:78:5b:8d:
         4f:52:04:e5:f4:31:40:91:ee:5e:66:19:5a:c8:b0:eb:55:8c:
         0d:e8:6b:85:cd:76:1d:9f:4d:81:d0:ce:42:4b:2e:e7:cc:09:
         f3:33:d5:fb:1a:6a:3b:0e:03:22:c9:3d:f3:f2:30:19:6d:05:
         19:51:1e:13:96:69:1e:de:31:2e:a3:e4:4c:54:93:c9:d4:87:
         22:1e:d3:ac:7f:17:45:4e:b1:69:40:c9:39:c9:c2:99:ee:20:
         5c:61:58:ff:33:c6:28:59:d3:65:6e:54:9f:79:b7:14:37:e3:
         ff:0f:4d:d4:10:61:d3:fd:8d:00:56:c1:47:4c:9d:6d:c5:a0:
         c5:df:d5:7e:0a:50:b6:03:f1:3d:d5:e7:d8:6e:3b:55:bf:8d:
         11:43:83:c0:71:fe:6f:81:3e:24:14:c8:70:2c:ec:95:a0:0e:
         c7:86:75:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:27:57 2025 by rpki-client