Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
File:                     AW5eMfqHFqqlThj83P7T_JTbkLU.mft (raw, json)
Hash identifier:          ckPfiUEwbcWMfV10A7SnVzE/BsFUi/Gb1MvXcUeKfhE=
Subject key identifier:   76:69:89:B9:C3:7E:6C:95:61:18:20:EC:E3:17:B9:3B:01:2A:0A:AA
Authority key identifier: 01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
Certificate issuer:       /CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Certificate serial:       0196760CF69DC1977FF6CF141827961C4609
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
Manifest number:          1512
Signing time:             Sun 27 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 27 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 28 Apr 2025 07:01:23 +0000
Files and hashes:         1: AW5eMfqHFqqlThj83P7T_JTbkLU.crl (hash: n8hFayFStXQvC1lkY5gZhwpTwT07D74nAT3OcVokWrI=)
                          2: Rgcekkes1KhkPm-geec6ef8_SvQ.roa (hash: 0N6GYLdc56+kVBGDj5O5jPTIUR3nKttL77HbNqyqtCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:f6:9d:c1:97:7f:f6:cf:14:18:27:96:1c:46:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
        Validity
            Not Before: Apr 27 07:01:23 2025 GMT
            Not After : Apr 28 07:01:23 2025 GMT
        Subject: CN=766989b9c37e6c95611820ece317b93b012a0aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e9:73:b9:fa:c6:03:22:0f:74:55:49:18:d3:
                    b8:2e:33:42:04:6e:ef:12:09:45:86:5e:df:5c:a4:
                    c8:4d:ef:8d:50:6f:82:e5:f7:77:54:72:72:e3:42:
                    10:fa:86:d0:1f:eb:63:1b:53:b0:23:8b:b0:50:fe:
                    9b:6e:a2:a3:2b:9d:8d:9d:1b:0b:4f:02:6b:2d:ee:
                    6e:e0:a4:7d:56:74:7a:49:cf:56:cc:6c:95:89:b3:
                    60:27:7d:4e:03:9a:73:f5:84:63:3f:0f:15:70:d6:
                    aa:bb:8f:65:5a:c6:a2:16:a9:f6:54:ce:c2:51:ea:
                    e4:3e:84:a7:60:0a:e8:54:bc:f4:23:67:9f:3e:4f:
                    6d:58:aa:08:35:91:89:04:65:7f:51:04:ae:9a:f4:
                    69:fa:b3:1f:bc:00:c7:b4:99:ee:00:97:20:3a:ab:
                    46:2f:83:44:08:d9:58:14:b6:d3:9a:ee:a8:b4:36:
                    f4:67:2f:20:08:09:f8:81:a0:76:2a:c3:e8:9e:b5:
                    79:4a:f3:42:7d:83:69:93:4c:ae:4b:d3:a9:84:97:
                    68:47:70:88:4a:de:da:51:58:73:14:4e:86:d9:b3:
                    31:25:05:68:54:a7:90:97:30:44:91:39:f7:65:1c:
                    d8:59:e9:7c:9d:8b:9f:86:d3:b6:ac:b8:26:93:15:
                    42:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:69:89:B9:C3:7E:6C:95:61:18:20:EC:E3:17:B9:3B:01:2A:0A:AA
            X509v3 Authority Key Identifier:
                keyid:01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a5:77:99:fa:e0:6a:e8:59:c0:2b:78:26:f7:8e:e9:3e:cb:
         da:f9:ad:95:c6:b0:81:4e:1b:56:36:98:d5:10:67:77:f6:7a:
         2f:5e:b2:50:4e:97:13:ed:b7:8f:9b:8a:01:3b:bb:fa:0c:6c:
         fe:ff:ba:cf:4e:d4:c9:43:c5:a5:80:75:bb:3d:24:dc:dc:aa:
         6b:7c:54:8a:e9:6e:87:6c:eb:4a:da:62:f5:56:e2:cd:e9:67:
         09:70:44:7e:67:75:99:3f:5e:fa:8b:6d:e8:96:6b:ab:23:f6:
         49:1a:6f:db:c4:b6:d5:41:88:74:e2:7d:e6:9e:6a:cd:7b:cd:
         92:20:64:f7:07:31:46:f4:98:7d:54:5e:fd:c4:cc:59:34:1c:
         77:2a:cb:a9:de:2f:65:a1:60:ef:48:92:51:20:88:4c:34:da:
         72:9e:cf:00:7c:43:f1:49:08:f1:28:89:b9:63:98:25:23:d7:
         41:9e:ec:f5:32:f3:72:40:1b:52:f1:df:4b:eb:a6:60:85:da:
         f8:c2:2a:97:18:f5:d9:68:11:93:91:71:eb:1b:b6:83:74:98:
         c9:c1:15:e2:cd:b5:24:b6:24:9e:4f:a9:7b:67:c2:47:08:0c:
         33:7d:a0:52:48:98:0a:91:a0:b2:65:b3:ce:cf:36:eb:15:8e:
         a3:7b:17:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:12:31 2025 by rpki-client