Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft
File:                     6WR3bOxi7xOoKiFl5vjUeJDXc00.mft (raw, json)
Hash identifier:          KVEt+4+dGOH9xuIanqSLYMJJSPDV1SMxjGN0lx38PZA=
Subject key identifier:   86:6E:99:43:74:F3:0F:69:E3:0A:B6:CC:EA:8E:05:0D:4C:59:BF:DB
Authority key identifier: E9:64:77:6C:EC:62:EF:13:A8:2A:21:65:E6:F8:D4:78:90:D7:73:4D
Certificate issuer:       /CN=e964776cec62ef13a82a2165e6f8d47890d7734d
Certificate serial:       01965B39932CAD250ED0198A7693EA356323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WR3bOxi7xOoKiFl5vjUeJDXc00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft
Manifest number:          02B4
Signing time:             Tue 22 Apr 2025 02:00:21 +0000
Manifest this update:     Tue 22 Apr 2025 02:00:21 +0000
Manifest next update:     Wed 23 Apr 2025 02:00:21 +0000
Files and hashes:         1: 6WR3bOxi7xOoKiFl5vjUeJDXc00.crl (hash: n2cn3Z3XIfo6mzq7YwAPTIgEjS+FshYiy+N9eX5po9Y=)
                          2: gULVBnS6_qNHU7cQ0dkYMIuUayU.roa (hash: g1yDTdtovs95F32kLsCVnbkwBNkiMceKZcm5mTyCkJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WR3bOxi7xOoKiFl5vjUeJDXc00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 20:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5b:39:93:2c:ad:25:0e:d0:19:8a:76:93:ea:35:63:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e964776cec62ef13a82a2165e6f8d47890d7734d
        Validity
            Not Before: Apr 22 02:00:21 2025 GMT
            Not After : Apr 23 02:00:21 2025 GMT
        Subject: CN=866e994374f30f69e30ab6ccea8e050d4c59bfdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:30:38:6b:21:ab:fe:06:d6:96:8d:1f:02:d4:
                    d9:1f:af:15:69:8d:7b:f2:9d:8c:bb:0a:1e:7d:f9:
                    bc:53:9f:6d:89:6a:b3:39:a8:90:44:6c:68:29:ba:
                    56:3a:85:64:55:b3:cc:36:a8:19:d4:96:0b:a6:cf:
                    2f:9c:35:da:50:de:61:3f:03:a0:46:f1:36:fc:af:
                    d8:9e:cc:e2:6b:65:d8:74:69:32:1a:48:a0:bf:38:
                    84:51:7d:80:12:15:bb:c3:d6:29:3e:d0:e7:8d:e9:
                    a3:e0:1b:bb:a1:d2:94:94:dd:15:d3:92:53:e4:7c:
                    64:22:68:c9:e9:5e:a7:5d:c2:f8:d9:8f:3d:01:ee:
                    b2:4a:9e:c8:c1:ed:f8:3c:3c:96:f0:c7:0e:cd:27:
                    8b:a4:de:47:ec:ba:af:15:c6:8d:5f:69:a9:0c:5c:
                    ec:42:78:00:12:a0:cb:8c:74:47:67:4d:0a:ac:45:
                    dd:8f:eb:92:21:88:08:7f:98:a3:0f:7a:9e:54:1e:
                    51:e7:e1:51:0d:42:56:0e:5c:46:f0:4b:5f:6f:f0:
                    73:9c:65:52:13:56:84:70:6f:95:f5:84:5c:95:79:
                    97:43:40:28:96:67:da:48:56:7e:4b:1f:6b:a1:03:
                    fd:ba:f4:87:7e:38:19:b6:bb:d3:8b:64:c7:cc:36:
                    2f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6E:99:43:74:F3:0F:69:E3:0A:B6:CC:EA:8E:05:0D:4C:59:BF:DB
            X509v3 Authority Key Identifier:
                keyid:E9:64:77:6C:EC:62:EF:13:A8:2A:21:65:E6:F8:D4:78:90:D7:73:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WR3bOxi7xOoKiFl5vjUeJDXc00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:fd:04:79:8f:b2:f3:95:6d:91:98:65:a8:1a:39:d2:d2:6e:
         d9:a8:96:cf:48:8b:76:9f:75:29:c7:08:b5:25:5e:6a:35:27:
         9a:67:80:82:19:17:c2:0b:75:b6:47:3a:2d:a9:41:9a:34:b9:
         12:dd:99:60:26:e9:73:aa:5a:d8:bb:35:be:6f:6f:0d:1d:a6:
         0f:e8:e0:b9:6a:51:af:61:3e:09:8e:c2:52:75:9e:76:a0:33:
         fd:41:19:53:6c:79:25:03:6e:a2:88:00:61:08:8d:f8:2f:94:
         40:bf:a9:f6:95:01:3e:c6:7c:4d:64:c5:00:4c:5f:cc:cf:bb:
         d2:ba:7c:d9:ae:38:78:d4:a3:3d:11:32:07:12:d0:d7:3b:90:
         fc:03:ad:52:85:d8:c8:64:9e:af:f9:c9:27:5a:64:31:8f:82:
         f5:c2:43:e8:f3:31:ca:e6:3c:8c:19:f0:f8:55:71:f8:ee:04:
         b9:35:c0:ff:31:98:43:85:b1:6e:7f:83:90:ca:e4:23:8d:39:
         5d:72:e7:3f:0f:d7:e2:06:08:29:f1:6d:fc:26:67:d7:83:00:
         61:ec:85:84:cb:be:c3:ec:35:a6:8d:56:39:d3:fb:ba:4b:b7:
         8e:25:16:15:ff:fc:58:86:ed:1d:d5:c1:6b:50:9d:28:0a:c9:
         47:6b:1b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:40:06 2025 by rpki-client