Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
File:                     ItAo8bo877DevVG-naxoyc5Ww9U.mft (raw, json)
Hash identifier:          2E28IZdmoFoQ0cXwiSnodSUbO5kp7g4CUaf339R0jG8=
Subject key identifier:   63:2D:AC:66:49:E3:C6:DF:C1:FE:F5:93:DE:99:EB:C8:38:A7:E3:CA
Authority key identifier: 22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
Certificate issuer:       /CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Certificate serial:       01976C2ABC57B1024509F95311C54BE34F39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
Manifest number:          1300
Signing time:             Sat 14 Jun 2025 02:00:29 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:29 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:29 +0000
Files and hashes:         1: ItAo8bo877DevVG-naxoyc5Ww9U.crl (hash: SL/yFBraiOleWNAzZMjUPZXTLqiokDuEdymYUKiTK1A=)
                          2: oaSNmQwuRc13PpOWxQF_tD88Wuk.roa (hash: 6Dyr5RV9WiwC/4aDAUVY0pqnb50f1qBljbybKJ6z/iI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:bc:57:b1:02:45:09:f9:53:11:c5:4b:e3:4f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
        Validity
            Not Before: Jun 14 02:00:29 2025 GMT
            Not After : Jun 15 02:00:29 2025 GMT
        Subject: CN=632dac6649e3c6dfc1fef593de99ebc838a7e3ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:4e:4a:1a:73:26:99:4f:bb:55:b2:6c:16:
                    fd:84:a0:50:80:76:b9:70:1a:0b:4a:0f:4a:97:31:
                    61:c6:5e:04:cc:17:4a:cc:3d:cb:97:35:56:c1:c3:
                    29:de:32:2b:29:e9:54:b8:ac:0c:05:9b:5f:aa:87:
                    74:3c:28:07:39:3b:ca:2a:30:f3:20:92:29:91:23:
                    06:be:55:8c:56:d1:b0:18:28:aa:4e:ca:f7:38:6c:
                    c0:e9:c5:9d:c5:5a:6f:da:06:3c:04:c5:eb:c5:e0:
                    e4:9e:73:08:23:45:13:d3:f9:59:e3:30:7c:5c:73:
                    7c:42:5f:d2:bc:48:94:11:76:94:51:6a:5b:77:f1:
                    70:9b:03:22:9a:99:32:78:52:40:38:17:be:0f:91:
                    81:45:aa:e9:8a:42:91:68:8c:bd:81:35:2b:b2:94:
                    45:51:6f:95:a7:7b:e9:37:2f:bd:f0:67:98:b9:d9:
                    61:80:f4:f3:83:75:bd:03:70:09:e8:7d:10:00:64:
                    22:83:df:3b:de:97:5b:ed:58:65:a1:4d:a3:81:1a:
                    b4:20:3d:18:d1:6b:1a:d5:8d:e2:1d:15:78:bd:71:
                    20:b2:fe:57:1c:ec:07:49:41:a3:29:6f:1e:ef:84:
                    8a:e6:17:03:e3:e8:7f:75:8e:d8:ad:6e:b9:89:a5:
                    f7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2D:AC:66:49:E3:C6:DF:C1:FE:F5:93:DE:99:EB:C8:38:A7:E3:CA
            X509v3 Authority Key Identifier:
                keyid:22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:73:8b:4a:8a:15:04:20:5e:26:12:c4:08:b1:ed:14:99:2d:
         6f:10:91:05:e2:57:9a:0d:3f:70:b7:c6:cd:48:89:88:54:aa:
         3a:c0:ca:7e:9c:c6:41:95:28:9b:61:bc:ae:1c:8f:ba:45:90:
         f2:5f:b4:a8:fe:aa:df:ee:fc:48:d6:26:15:3f:af:cb:e4:33:
         4c:d4:a3:89:83:70:71:6a:28:43:a6:0e:2a:33:ac:0c:ce:6d:
         7b:23:dd:5d:b6:5f:f0:9c:2c:03:af:f3:84:2f:af:cb:03:ac:
         53:a2:ec:43:4d:51:a9:91:14:e3:a9:43:fa:0c:c7:f7:fc:e4:
         21:c8:dc:5e:be:1d:d3:b4:aa:65:77:eb:b6:ca:c1:fe:85:7d:
         b4:64:9c:18:50:6f:b9:1c:fd:79:6c:29:e1:08:87:1c:c4:03:
         b9:48:52:a4:3a:fc:ca:0c:79:9f:24:21:f4:eb:2c:80:b4:23:
         c6:71:8e:6d:1f:2c:97:0e:b1:a1:d2:e4:b2:da:f1:6f:a4:18:
         19:34:59:0e:77:91:a4:0a:4d:21:16:39:84:91:9c:a9:34:38:
         fe:c8:dd:e6:3e:39:a6:b7:39:c5:07:38:c2:a6:23:ac:71:f3:
         3b:d0:d1:da:30:1c:17:e1:e9:0f:20:a5:b4:67:04:25:f6:01:
         01:61:d5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:20:22 2025 by rpki-client