Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
File:                     bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft (raw, json)
Hash identifier:          7JBKuhWSBhe910Jmh+R2h2zzpIknO5zkEsAKor5iLTU=
Subject key identifier:   2E:E2:4F:64:99:9E:32:F2:16:DD:B6:94:0E:E1:8C:4D:C7:ED:72:B1
Authority key identifier: 6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70
Certificate issuer:       /CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
Certificate serial:       019689CA1C23F7FE3C88EDE6CDF81020AB2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
Manifest number:          058E
Signing time:             Thu 01 May 2025 03:00:46 +0000
Manifest this update:     Thu 01 May 2025 03:00:46 +0000
Manifest next update:     Fri 02 May 2025 03:00:46 +0000
Files and hashes:         1: bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl (hash: fGQ40nxZC3ZWTuqJSTZWev1GWoJcBjIo5ZBwZNP+feQ=)
                          2: g4EaozYmC9YQ0a7L9CYiQ4ogRAk.roa (hash: xmryesaevMInujVcjkZCiYepzaYX2LiaZCMbhmPgvyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 03:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:ca:1c:23:f7:fe:3c:88:ed:e6:cd:f8:10:20:ab:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
        Validity
            Not Before: May  1 03:00:46 2025 GMT
            Not After : May  2 03:00:46 2025 GMT
        Subject: CN=2ee24f64999e32f216ddb6940ee18c4dc7ed72b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3e:21:ce:fd:88:d5:9a:fe:ff:79:85:1c:b3:
                    62:a3:f0:38:09:23:98:d5:fb:a2:6d:ca:90:c0:0d:
                    65:62:e6:66:82:c1:19:4c:c4:3a:13:ac:41:38:76:
                    eb:d3:80:e4:71:9d:d5:8d:30:be:30:f6:d8:e9:d5:
                    1f:74:c9:35:ad:ba:ac:1b:09:74:a7:8c:ea:5e:55:
                    39:79:dc:13:64:89:03:f9:ef:bf:f3:69:09:12:63:
                    1b:91:77:53:13:41:a3:ce:0b:f3:8e:be:1e:1d:71:
                    94:f5:ff:8e:19:51:bb:81:0d:55:56:e0:de:8a:ba:
                    19:aa:9e:e1:f6:63:2d:be:86:8d:b2:12:8f:76:8e:
                    67:32:c7:75:0d:02:d8:7b:c1:94:77:26:48:7f:dc:
                    dc:bb:5a:98:ec:5b:b2:63:59:db:7f:6c:d5:ec:8f:
                    35:8a:cc:02:93:64:b1:86:19:c8:78:1c:8f:be:4e:
                    70:05:aa:c5:f6:d4:d6:c3:80:8c:cc:64:dd:29:7b:
                    26:38:62:6f:ce:a3:c4:e2:12:35:b1:bb:62:31:46:
                    71:e5:18:e9:82:26:0d:be:5a:83:63:11:63:60:79:
                    93:5f:bd:f0:29:3e:e6:d2:37:e5:c5:02:ba:42:54:
                    00:58:fe:9f:ff:37:20:57:6c:00:95:b0:5d:2d:e6:
                    fa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E2:4F:64:99:9E:32:F2:16:DD:B6:94:0E:E1:8C:4D:C7:ED:72:B1
            X509v3 Authority Key Identifier:
                keyid:6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:b7:05:16:bd:3b:c9:18:25:78:09:6c:f0:ef:e6:a9:0a:a1:
         b3:ae:ff:61:81:6c:5f:f4:36:0a:82:58:6d:72:b6:99:61:cc:
         20:9f:20:41:96:1e:f2:23:38:33:e5:d3:24:74:e0:e4:3c:8d:
         d8:a8:09:33:51:66:cc:c9:12:75:5a:a7:32:d7:0b:2c:a4:f7:
         9d:61:c5:7d:ac:29:2c:47:29:44:cc:b4:f0:b5:ed:e0:2c:14:
         ea:28:20:ee:e7:df:2a:c7:a2:c8:ce:b1:b8:3a:a2:4e:dd:4c:
         b9:89:fa:80:41:bc:29:88:66:c2:58:28:98:ad:54:ff:c7:84:
         30:ed:fa:71:4d:99:27:0d:a9:8a:26:45:1e:7f:6f:2d:99:c0:
         eb:dc:38:6b:ca:90:53:52:54:ec:0f:bb:30:8f:49:2a:e8:86:
         62:43:1a:2c:f9:8e:1f:d6:b3:b9:d6:bf:d8:dd:92:76:9e:bb:
         de:de:d8:4d:77:1c:0e:81:bb:58:cf:2f:22:02:eb:6b:f5:c9:
         1a:76:d9:0d:6f:1e:de:a4:ac:cf:cc:92:09:2f:6b:c2:56:dd:
         4c:16:52:55:01:ba:a2:1f:63:32:de:26:c8:e8:16:0e:b8:a5:
         13:b9:9c:7c:73:79:70:85:91:a9:1c:42:70:50:f8:82:51:a9:
         cc:cd:58:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:58:31 2025 by rpki-client