Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
File:                     DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json)
Hash identifier:          vYx79EjKbUa7KQAI0Wn/6LUGSlLznPHfymr/0R+cIpc=
Subject key identifier:   A9:51:87:86:5B:1E:AF:6C:4D:24:E8:46:4C:27:1B:2E:B6:F2:71:EF
Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
Certificate issuer:       /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Certificate serial:       019688EE41F192C31DCED91310D09A1B2ECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
Manifest number:          12EB
Signing time:             Wed 30 Apr 2025 23:00:37 +0000
Manifest this update:     Wed 30 Apr 2025 23:00:37 +0000
Manifest next update:     Thu 01 May 2025 23:00:37 +0000
Files and hashes:         1: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: wDkA+kmp/7Qa0gUJqxIdc0Dy8f4m9c2s9HhJpqTtuQ0=)
                          2: xjZ1XJhW_cFPR3oT-Y__-eT7BLU.roa (hash: iqLiaW6nsbh481RYQHU8cc/w97YkMP9DpENBWhWu8os=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:88:ee:41:f1:92:c3:1d:ce:d9:13:10:d0:9a:1b:2e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
        Validity
            Not Before: Apr 30 23:00:37 2025 GMT
            Not After : May  1 23:00:37 2025 GMT
        Subject: CN=a95187865b1eaf6c4d24e8464c271b2eb6f271ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:20:a4:11:54:96:d9:5f:fb:02:c5:98:fc:8e:
                    e1:23:ae:82:cc:d4:3c:64:01:9e:4a:e7:39:54:9f:
                    d4:e0:3c:9b:19:01:af:b7:d6:f2:81:d6:94:89:2e:
                    7c:1f:a4:1f:a7:f2:f0:58:ba:44:7e:12:bf:ee:b1:
                    34:4c:0f:7f:06:10:ef:af:a5:e8:58:90:d5:f3:ce:
                    cd:d5:a7:94:08:34:85:c9:f9:54:66:1f:0d:7f:b9:
                    60:72:2f:f9:7d:9c:86:ce:30:3d:9e:41:c4:5c:33:
                    92:53:64:c3:b4:a5:d3:4e:3e:1d:f2:63:4d:54:57:
                    72:5c:08:e1:b8:85:f3:e0:1e:34:1c:cb:77:1a:04:
                    71:da:19:1b:c4:59:99:95:31:61:19:4e:31:33:d4:
                    93:b9:c4:04:e7:d3:53:ec:c9:dc:ab:24:31:c6:ce:
                    c6:fe:90:73:2f:4d:58:2a:bc:5a:d5:e8:4e:a3:3e:
                    2b:1d:3b:cb:c0:5a:a5:47:0e:f8:77:3b:e3:35:71:
                    80:8e:bc:63:ff:d5:53:b8:af:38:b0:19:30:8f:7d:
                    66:f3:77:66:b6:fa:32:5f:49:52:67:f5:74:a5:3f:
                    f3:59:00:be:28:55:c0:c6:5f:01:e4:24:15:26:e4:
                    7e:10:8a:26:fb:a0:ab:46:8e:23:70:b4:2f:a4:7e:
                    13:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:51:87:86:5B:1E:AF:6C:4D:24:E8:46:4C:27:1B:2E:B6:F2:71:EF
            X509v3 Authority Key Identifier:
                keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:77:c2:5b:56:04:0f:e9:27:09:0f:cd:e2:31:62:65:ca:1c:
         28:fd:9a:b8:0e:fc:1d:6b:cf:3b:c6:47:27:4e:59:7d:ec:03:
         ad:26:ee:c1:df:8c:00:4b:4a:58:c4:b4:91:cf:50:a8:17:b5:
         6c:30:ca:f6:f6:cf:7f:4a:2e:c4:39:91:7c:8e:af:2b:fb:2c:
         9d:e1:f2:20:f3:fd:9b:10:55:72:1b:f7:76:8f:1d:17:17:75:
         2e:11:30:c5:ad:25:d5:b5:81:7a:c8:d5:58:37:4c:9b:a4:99:
         5d:5f:fd:29:13:76:dd:4e:9c:ad:03:f2:9d:67:99:2f:2c:9a:
         81:8d:2a:6b:55:e7:b4:91:34:72:08:ee:01:72:16:74:35:05:
         fe:f3:05:38:07:c9:5e:49:7d:aa:ce:d4:97:b1:b5:05:8b:f7:
         aa:c4:41:8d:34:2e:cc:2f:62:88:78:92:57:47:9c:29:8a:32:
         33:8d:40:e2:fb:77:66:7e:c2:76:7a:52:94:4c:43:88:ef:1f:
         90:da:1e:f7:0b:7a:c0:9e:bf:24:69:e3:b2:3d:4b:94:cf:23:
         aa:d9:74:f9:3b:f0:45:d5:7f:50:1a:2b:f3:fe:34:cd:e9:df:
         e3:d0:8d:d7:5b:5e:e8:7f:fb:b6:3a:11:8f:62:f5:53:2d:cb:
         68:c1:e5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:03:06 2025 by rpki-client