Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1df143-7caa-4934-b076-f8bd004c3089/1/dV-du8Al_uzgcje-wLvQXiAchL0.mft
File:                     dV-du8Al_uzgcje-wLvQXiAchL0.mft (raw, json)
Hash identifier:          W9ZfqbR4x7x8WA4hL74xO3HS20mldOBVlp1hy+b1OkU=
Subject key identifier:   9F:89:D0:4D:8E:15:F5:7D:08:0E:6F:F8:BE:F7:69:80:F9:02:54:E1
Authority key identifier: 75:5F:9D:BB:C0:25:FE:EC:E0:72:37:BE:C0:BB:D0:5E:20:1C:84:BD
Certificate issuer:       /CN=755f9dbbc025feece07237bec0bbd05e201c84bd
Certificate serial:       01967868C537230B0E748CB6B78B90D76304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dV-du8Al_uzgcje-wLvQXiAchL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/1df143-7caa-4934-b076-f8bd004c3089/1/dV-du8Al_uzgcje-wLvQXiAchL0.mft
Manifest number:          0CEB
Signing time:             Sun 27 Apr 2025 18:00:54 +0000
Manifest this update:     Sun 27 Apr 2025 18:00:54 +0000
Manifest next update:     Mon 28 Apr 2025 18:00:54 +0000
Files and hashes:         1: dV-du8Al_uzgcje-wLvQXiAchL0.crl (hash: JnLo/lUkhxBPGj/hKXvi0fIsKgO/X3qPEly6UQq7Glw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/1df143-7caa-4934-b076-f8bd004c3089/1/dV-du8Al_uzgcje-wLvQXiAchL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/1df143-7caa-4934-b076-f8bd004c3089/1/dV-du8Al_uzgcje-wLvQXiAchL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dV-du8Al_uzgcje-wLvQXiAchL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:68:c5:37:23:0b:0e:74:8c:b6:b7:8b:90:d7:63:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=755f9dbbc025feece07237bec0bbd05e201c84bd
        Validity
            Not Before: Apr 27 18:00:54 2025 GMT
            Not After : Apr 28 18:00:54 2025 GMT
        Subject: CN=9f89d04d8e15f57d080e6ff8bef76980f90254e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:75:77:ee:5d:18:a5:ca:d9:b1:c1:45:3a:c9:
                    29:b6:f6:9a:17:4f:29:9b:81:7a:0e:87:77:e2:59:
                    80:09:cc:01:52:24:36:60:f4:3c:27:11:13:41:f2:
                    bf:29:82:de:6c:65:60:0a:89:81:79:00:52:93:6d:
                    58:c5:8f:8a:9c:e6:3c:ff:93:ad:0c:98:d9:61:52:
                    9e:11:52:10:38:22:b1:25:1b:68:df:99:5d:28:2f:
                    41:fb:a8:77:6f:f0:44:35:e6:98:64:ba:5d:ea:9a:
                    e3:6f:95:a1:8f:12:be:12:c1:fb:c4:1c:28:2b:fe:
                    9b:ec:62:c6:f3:8f:05:d4:eb:d0:1b:1f:e1:be:da:
                    87:07:4e:c8:0f:fc:2e:92:08:8d:68:e8:b7:ea:b6:
                    2a:f4:b4:3e:cf:43:2f:a4:23:ed:69:2b:a7:8e:70:
                    93:15:1e:90:fd:30:e9:34:60:05:a0:14:d0:1f:39:
                    14:84:fd:29:e9:ad:71:3e:7b:14:40:6c:d3:0e:38:
                    a8:98:7e:11:e5:a5:2d:a6:e3:e6:7e:7d:be:75:73:
                    ec:54:75:33:e9:6f:50:33:5f:ca:9d:da:00:dd:26:
                    05:ec:5a:1d:c5:c6:99:fa:60:4d:5f:7b:bf:9f:f2:
                    4f:0c:11:10:83:3a:ac:59:1b:c1:2b:7a:4e:37:d2:
                    f2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:89:D0:4D:8E:15:F5:7D:08:0E:6F:F8:BE:F7:69:80:F9:02:54:E1
            X509v3 Authority Key Identifier:
                keyid:75:5F:9D:BB:C0:25:FE:EC:E0:72:37:BE:C0:BB:D0:5E:20:1C:84:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dV-du8Al_uzgcje-wLvQXiAchL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1df143-7caa-4934-b076-f8bd004c3089/1/dV-du8Al_uzgcje-wLvQXiAchL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1df143-7caa-4934-b076-f8bd004c3089/1/dV-du8Al_uzgcje-wLvQXiAchL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:74:09:e1:22:43:61:5a:b5:7a:77:b5:f1:6c:12:38:2b:a6:
         62:11:bd:ca:bd:45:cc:90:fd:29:1c:7b:da:85:b0:d8:e1:b8:
         cb:89:b6:fa:4d:95:6e:29:09:78:2e:7d:21:08:68:1e:05:73:
         f8:b7:77:25:83:bc:84:f5:c2:3f:40:63:31:03:13:08:b5:47:
         37:eb:1f:f6:84:8d:d6:e0:d5:b2:97:7d:e9:1b:23:30:39:4f:
         7d:f0:50:40:aa:07:b0:11:93:30:12:07:70:b2:a6:70:03:29:
         a8:07:1b:b4:00:8a:31:25:5b:2b:f3:38:5f:65:9f:a5:3c:a5:
         d3:57:c0:17:ea:a4:2c:a0:b5:81:b6:55:c5:b5:4d:00:34:7b:
         39:e9:f8:88:15:27:c1:cf:ba:d8:ea:df:02:d5:f4:3f:36:4a:
         26:d2:18:e3:10:43:c0:3a:9e:53:84:bc:a4:e3:6a:b8:67:b1:
         7e:c8:5c:7d:c1:25:89:67:27:85:0d:66:6c:4b:26:a2:7b:e9:
         32:98:a7:04:0b:59:14:91:31:d0:60:2f:b7:c9:ce:21:80:80:
         db:43:cc:7d:02:ca:47:1a:d9:b4:8f:fd:ad:4d:94:36:b9:6e:
         0b:2a:d7:bb:9a:6b:e3:ea:24:13:57:08:46:fe:72:7a:27:d3:
         6f:48:a5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:22:23 2025 by rpki-client