Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
File:                     EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft (raw, json)
Hash identifier:          zZwsxeFXdtog1uHE3h017te2J8kM0SxS55xOsfWutbw=
Subject key identifier:   AE:C6:65:A3:7F:CD:E4:9A:1C:D1:A1:6B:96:43:1E:49:B1:B9:E0:8C
Authority key identifier: 12:A6:28:50:1A:F6:5C:F5:FF:39:70:F3:12:34:14:C6:B8:0C:C0:A9
Certificate issuer:       /CN=12a628501af65cf5ff3970f3123414c6b80cc0a9
Certificate serial:       0196857FEF82298CA1D342F3A97E28C2113B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
Manifest number:          1513
Signing time:             Wed 30 Apr 2025 07:01:15 +0000
Manifest this update:     Wed 30 Apr 2025 07:01:15 +0000
Manifest next update:     Thu 01 May 2025 07:01:15 +0000
Files and hashes:         1: EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl (hash: QsPucY1UwqZN62gb+94mMy+Nm8fOdgGHyNMEmv/w+Ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 07:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:7f:ef:82:29:8c:a1:d3:42:f3:a9:7e:28:c2:11:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12a628501af65cf5ff3970f3123414c6b80cc0a9
        Validity
            Not Before: Apr 30 07:01:15 2025 GMT
            Not After : May  1 07:01:15 2025 GMT
        Subject: CN=aec665a37fcde49a1cd1a16b96431e49b1b9e08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:d4:7a:2c:b6:56:06:68:ae:39:e3:35:a9:
                    ad:be:ba:6d:e1:b3:06:a1:23:73:f6:96:4e:88:23:
                    9b:83:11:ea:b6:c3:2a:50:ac:eb:5b:94:f9:7a:7f:
                    79:9a:a8:c9:2e:9d:8b:7b:db:ca:c3:1a:2a:aa:33:
                    3e:3e:1d:94:51:66:03:f1:ad:08:62:c9:c1:43:dc:
                    5f:b8:c1:be:7c:ee:9c:2b:6b:68:4f:9c:2b:41:36:
                    bd:b0:1b:67:30:d3:25:3c:54:40:5d:e3:3f:f3:0a:
                    6d:1b:35:b0:74:15:57:3e:84:29:0a:6a:b0:20:bc:
                    f4:38:77:3b:3d:0b:9e:71:77:01:2f:a6:3b:9e:bb:
                    91:87:0a:59:50:1d:ad:83:fc:e9:e8:92:f7:69:8f:
                    5c:f2:13:9f:2f:4c:7e:31:4f:b5:ca:3b:e0:01:25:
                    94:93:12:e3:4a:36:56:3e:d7:42:43:a4:ec:35:34:
                    d5:2b:e6:a1:e9:ec:1e:cd:04:0a:9d:30:76:63:59:
                    d3:75:67:50:ad:3b:2a:26:28:5b:0e:bc:3b:01:4d:
                    62:96:e9:1f:9c:f3:e5:9f:cc:28:3d:41:f8:d3:c6:
                    66:a9:bf:22:98:b4:5f:45:1e:02:2e:f9:c4:4f:cc:
                    d8:7f:80:bf:b9:ed:ed:f9:fc:2d:cd:2e:b6:28:b9:
                    81:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C6:65:A3:7F:CD:E4:9A:1C:D1:A1:6B:96:43:1E:49:B1:B9:E0:8C
            X509v3 Authority Key Identifier:
                keyid:12:A6:28:50:1A:F6:5C:F5:FF:39:70:F3:12:34:14:C6:B8:0C:C0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:2f:c9:dc:b4:cc:96:89:e9:da:31:f9:18:39:7c:5e:2c:78:
         df:c2:39:be:12:48:68:fa:a4:1c:48:74:c5:e8:e4:e2:62:7b:
         0e:df:22:5e:53:d7:d0:20:90:93:8c:9f:81:d4:2c:84:58:7f:
         79:3c:b8:95:84:73:9a:5a:1c:13:79:39:10:c2:35:23:ad:e7:
         0d:39:bc:96:2e:e8:73:3f:43:08:d5:d3:93:5c:e9:e0:5f:16:
         d6:cf:a7:df:d8:5f:e4:64:0a:99:4c:b8:1f:12:c5:dd:3c:ce:
         d2:ca:e2:6e:1c:29:dc:44:1f:ab:fa:b7:c5:5e:e2:0a:91:fc:
         42:54:e8:fb:cd:db:92:11:be:d6:65:2c:df:87:41:13:6e:7b:
         d4:d5:cb:31:80:c5:ad:fc:df:0c:5e:f9:21:95:5f:f4:c1:92:
         de:aa:87:cd:d4:26:10:d2:a0:d7:bc:6b:89:c9:73:5d:63:e6:
         3c:b6:4d:53:86:ef:97:5f:4d:21:c7:98:2c:01:56:35:22:a3:
         f3:a3:ee:41:1c:76:b4:17:d9:7f:3d:1d:27:b7:c2:a5:94:e8:
         8a:a9:f7:db:2f:b9:09:bf:e6:a1:e3:38:ea:8e:66:53:8f:b7:
         c8:55:39:b4:20:04:15:d5:bb:c3:87:60:7e:8a:5a:7f:e8:6e:
         df:88:57:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:26:02 2025 by rpki-client