Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
File:                     aSmliG8vTpfb3V8J6IlmDDtuEzs.mft (raw, json)
Hash identifier:          c/5rxmEi3uhLw37iKOe/8ZyXAh4Kmbj2NdNavUKgKMk=
Subject key identifier:   3B:A7:2E:5B:EB:D9:2F:74:27:18:06:FA:A6:54:C8:3E:8B:E2:D8:CC
Authority key identifier: 69:29:A5:88:6F:2F:4E:97:DB:DD:5F:09:E8:89:66:0C:3B:6E:13:3B
Certificate issuer:       /CN=6929a5886f2f4e97dbdd5f09e889660c3b6e133b
Certificate serial:       01967FB451F9EED959D43106A859AE25EF0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
Manifest number:          1510
Signing time:             Tue 29 Apr 2025 04:00:45 +0000
Manifest this update:     Tue 29 Apr 2025 04:00:45 +0000
Manifest next update:     Wed 30 Apr 2025 04:00:45 +0000
Files and hashes:         1: aSmliG8vTpfb3V8J6IlmDDtuEzs.crl (hash: NHnf2vJoiOwKfTsIZiNFCZtdF1ccl47B76gwMReIwVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:b4:51:f9:ee:d9:59:d4:31:06:a8:59:ae:25:ef:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6929a5886f2f4e97dbdd5f09e889660c3b6e133b
        Validity
            Not Before: Apr 29 04:00:45 2025 GMT
            Not After : Apr 30 04:00:45 2025 GMT
        Subject: CN=3ba72e5bebd92f74271806faa654c83e8be2d8cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:24:cf:dd:3b:5c:58:ec:06:ca:f1:36:f3:50:
                    c4:49:e6:83:5f:67:14:ec:59:ef:a5:8d:1a:6c:c1:
                    6a:95:f7:da:23:e7:95:4d:04:b5:f5:d2:b0:7e:50:
                    8a:a2:9c:63:61:b8:2e:ca:9f:49:c9:d2:20:1d:7b:
                    8a:65:15:8b:2a:6d:8e:56:1f:8f:f8:20:1b:0c:16:
                    5a:91:24:d2:61:ef:46:ad:cf:f3:a8:ca:76:c4:c8:
                    e6:ba:71:d2:33:e3:76:a1:a8:c2:65:ff:b2:ec:8e:
                    45:8f:3b:d5:93:d7:c9:40:e0:f0:1b:25:62:94:6a:
                    12:05:bb:39:c5:bf:14:a4:49:f6:68:f3:f4:b7:86:
                    72:5d:39:db:e0:e9:2a:3e:48:c3:85:ab:55:b0:79:
                    b4:37:78:50:70:39:07:34:99:7f:f1:f8:d5:0c:e9:
                    f6:6b:2c:b8:7e:bb:2d:7f:63:1d:34:eb:21:fb:63:
                    64:a4:32:a5:e9:be:94:12:e2:f8:64:cb:cb:ff:a9:
                    d5:4b:ae:ae:b1:eb:12:d5:d3:15:fd:8a:1c:28:73:
                    9c:ab:ab:3d:84:f3:49:30:93:00:4f:a5:6f:93:0d:
                    ef:bf:96:80:aa:b8:37:b6:51:16:b3:3f:4f:0f:4b:
                    60:ca:fe:fc:b9:29:cd:b5:73:64:0d:b4:cf:98:a9:
                    f2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A7:2E:5B:EB:D9:2F:74:27:18:06:FA:A6:54:C8:3E:8B:E2:D8:CC
            X509v3 Authority Key Identifier:
                keyid:69:29:A5:88:6F:2F:4E:97:DB:DD:5F:09:E8:89:66:0C:3B:6E:13:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:de:b7:4b:4f:45:8b:92:74:c7:2f:75:af:81:67:be:cb:ad:
         41:58:4d:47:9d:eb:b1:52:4d:52:2a:77:4c:35:13:c6:21:2b:
         4a:14:5c:8b:6a:7a:88:46:f3:c9:93:46:1b:de:c8:59:4c:38:
         c7:93:12:8d:99:d8:88:38:d3:78:2a:be:a3:f8:ed:01:d7:8f:
         06:4a:bd:55:79:1b:42:6c:aa:34:ee:03:8e:a6:36:e5:50:c4:
         52:04:13:3b:09:6f:8d:f5:ff:0c:88:ef:5b:a5:3c:12:23:1d:
         ce:a0:dd:86:46:09:1f:cf:df:4a:c5:e2:48:65:6a:76:7c:6e:
         33:81:2b:5f:df:81:cb:07:99:b8:f1:3f:21:35:e5:65:c3:ff:
         01:e1:43:36:ea:97:fc:b5:1d:9c:fb:80:31:7d:48:3c:36:50:
         3b:49:24:49:f2:15:8b:38:a7:43:7c:ca:81:e3:13:1e:cd:fd:
         39:66:be:74:77:04:ab:f0:b0:3b:a3:e5:a4:87:db:3b:92:5a:
         ca:45:4a:d8:d2:ce:85:7b:e1:5f:4a:2d:56:fd:0d:5a:92:c4:
         5e:a1:c7:58:e4:fb:cb:f0:62:fa:59:ce:e9:72:0c:95:03:45:
         93:e3:90:3b:8b:8f:00:9c:06:cd:f5:ba:00:0a:d0:c0:39:b0:
         a8:51:21:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:35:09 2025 by rpki-client