Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
File:                     RNC2iz7BebNdz_XEZdwtBGGZJ24.mft (raw, json)
Hash identifier:          37Z2q+lgrb0rzqhaNrrSxnoFbQm0PkVsc+7TvBc8tEU=
Subject key identifier:   D4:47:D7:C8:26:23:72:18:89:B3:D8:13:AE:09:23:6C:C9:56:5A:00
Authority key identifier: 44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E
Certificate issuer:       /CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
Certificate serial:       019674C255A785CDAA9572FB1AB7A4B18366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
Manifest number:          150B
Signing time:             Sun 27 Apr 2025 01:00:15 +0000
Manifest this update:     Sun 27 Apr 2025 01:00:15 +0000
Manifest next update:     Mon 28 Apr 2025 01:00:15 +0000
Files and hashes:         1: RNC2iz7BebNdz_XEZdwtBGGZJ24.crl (hash: /yCAjH+B7sYS7UO6kS23F2GOnzI2jaGqfX2lEtfG2h8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:c2:55:a7:85:cd:aa:95:72:fb:1a:b7:a4:b1:83:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
        Validity
            Not Before: Apr 27 01:00:15 2025 GMT
            Not After : Apr 28 01:00:15 2025 GMT
        Subject: CN=d447d7c82623721889b3d813ae09236cc9565a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f0:12:a2:6c:71:8c:fe:6b:c0:c2:c4:5a:bc:
                    19:8c:4c:52:c3:2f:28:6b:60:a7:5b:5d:7b:a3:51:
                    e3:45:c7:88:a6:2c:53:14:10:ae:55:da:03:5b:27:
                    70:b1:34:12:d4:93:99:e4:36:76:02:b0:14:dc:e0:
                    b0:66:2b:81:f8:8f:14:8e:eb:e3:c7:f2:c9:8d:9c:
                    b4:89:56:59:02:c0:b1:99:fd:3f:d5:88:36:b9:54:
                    ce:30:13:a3:6d:1d:f1:f9:63:a1:69:a0:4e:0e:3e:
                    a1:85:88:dc:4d:6a:40:a1:3f:99:71:29:25:8c:0d:
                    73:36:6e:dd:96:1d:af:3a:87:26:b7:75:fe:00:16:
                    1e:87:a1:85:05:36:ff:3c:17:17:ea:65:08:1e:d8:
                    51:59:7d:47:81:4c:f0:e4:8b:49:da:a4:a5:70:3b:
                    e6:a1:3d:0a:f2:5c:ea:8d:b0:80:b5:73:8b:d5:9b:
                    72:f6:48:ca:d2:ed:d9:d8:7a:4a:76:05:12:35:1e:
                    40:b9:a9:46:e6:72:16:8c:05:ae:95:11:93:a2:b7:
                    0d:aa:dd:90:d2:95:26:e4:f7:81:e6:bb:4b:23:20:
                    6e:85:dc:d9:8d:a7:15:b3:d5:17:c1:d0:2e:74:d4:
                    01:0e:ef:4f:7e:e5:c2:ad:29:24:11:91:bb:ed:7c:
                    55:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:47:D7:C8:26:23:72:18:89:B3:D8:13:AE:09:23:6C:C9:56:5A:00
            X509v3 Authority Key Identifier:
                keyid:44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:95:9f:35:d5:ce:f0:08:c7:25:0c:5a:63:a5:aa:5b:89:c4:
         85:44:78:e7:f6:e6:8e:f5:da:68:b7:eb:a9:bf:cc:f2:c0:02:
         cf:c2:01:4f:bd:11:9d:b5:29:2b:fe:6a:e5:09:50:6e:fa:6d:
         54:b2:e4:75:1d:50:96:8d:8f:b7:4e:4d:25:b5:88:67:a0:0b:
         c8:38:dc:bb:5a:46:15:3b:e4:21:16:15:3f:54:5d:dc:50:1b:
         9d:83:ba:24:66:1c:5b:79:ff:76:66:11:e3:0e:90:ba:9d:a6:
         e3:33:c2:4f:2e:44:cf:57:b6:fd:41:c1:ef:58:34:47:4c:7c:
         c7:00:7e:be:43:40:71:e6:16:87:63:2c:fc:fd:c6:cf:cd:3f:
         f7:80:35:32:48:8f:9f:25:6b:d4:70:1c:16:1a:8a:58:34:67:
         73:b1:f7:8c:b1:eb:c2:54:d3:49:f9:58:48:b1:6e:0c:71:fd:
         28:0b:b2:80:63:91:91:8e:2f:36:86:77:54:64:82:cd:b9:c3:
         ba:02:d8:4d:26:fc:56:55:5c:39:27:2a:fc:c0:5f:2b:75:39:
         fa:9e:82:01:77:ec:1e:92:0c:54:a3:8b:af:34:82:68:8d:e9:
         47:86:6a:fc:e3:cb:a1:43:b5:8d:07:23:07:e0:cd:16:4a:09:
         37:9f:43:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:17 2025 by rpki-client