Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.mft
File:                     mPt_CPlW06-VcZxTf7P5t-MwBrM.mft (raw, json)
Hash identifier:          09pzWXBBQsUB65lvAF9P5hf+OIhcwaGJ8Y2+plRzfyw=
Subject key identifier:   0A:AA:76:78:2D:18:CB:A5:D3:6A:8C:2A:36:DE:A3:4C:E6:18:0A:46
Authority key identifier: 98:FB:7F:08:F9:56:D3:AF:95:71:9C:53:7F:B3:F9:B7:E3:30:06:B3
Certificate issuer:       /CN=98fb7f08f956d3af95719c537fb3f9b7e33006b3
Certificate serial:       019654C9D9E80DB9CADEE10B1EF5188EE5C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPt_CPlW06-VcZxTf7P5t-MwBrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.mft
Manifest number:          13F0
Signing time:             Sun 20 Apr 2025 20:00:36 +0000
Manifest this update:     Sun 20 Apr 2025 20:00:36 +0000
Manifest next update:     Mon 21 Apr 2025 20:00:36 +0000
Files and hashes:         1: Gum0-ybT6aoZemudCmaifFQGsX0.roa (hash: tO7PeSt79NFtj/4Lv+NwzjV3s5CAU+KQ/tU9PE+OMpQ=)
                          2: mPt_CPlW06-VcZxTf7P5t-MwBrM.crl (hash: Y0h7glb7DKSZpn+Hfhc3bsEbdGvagI1ZEu6aK2pAPg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPt_CPlW06-VcZxTf7P5t-MwBrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:c9:d9:e8:0d:b9:ca:de:e1:0b:1e:f5:18:8e:e5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98fb7f08f956d3af95719c537fb3f9b7e33006b3
        Validity
            Not Before: Apr 20 20:00:36 2025 GMT
            Not After : Apr 21 20:00:36 2025 GMT
        Subject: CN=0aaa76782d18cba5d36a8c2a36dea34ce6180a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:be:39:05:c2:f4:e8:1a:89:31:40:b2:4d:3c:
                    de:e7:c0:a3:6e:09:f9:43:4a:2b:e5:52:84:9f:d1:
                    70:14:74:94:6e:82:f8:45:22:c5:de:cc:b0:a3:06:
                    3d:fa:fb:64:f3:81:c6:49:e1:14:1b:aa:1b:d7:1d:
                    f4:2c:32:47:69:46:e1:ab:51:3a:1c:7b:f2:0a:89:
                    df:de:a1:83:3c:9b:ea:7c:a3:7e:4c:41:02:5a:b3:
                    ae:d0:ec:ff:52:17:35:c4:19:e7:7a:d6:90:c6:0a:
                    17:25:2d:a6:82:96:aa:22:bd:a0:79:d7:f8:bb:1b:
                    20:61:bd:74:53:8e:21:4c:dc:47:41:44:2a:7a:11:
                    35:2c:7a:91:12:8f:23:8d:b2:64:75:ec:11:cd:8c:
                    60:ac:23:37:0c:8c:36:5c:aa:bc:78:3c:0d:69:4e:
                    c8:fa:aa:65:71:f6:d7:4f:c2:25:42:19:ea:98:e5:
                    4b:40:de:be:13:97:1c:ed:20:3f:b8:d7:18:da:03:
                    b2:fb:49:47:b3:58:ba:87:ed:31:a7:3c:b0:19:1b:
                    98:d7:80:0c:c6:d4:16:f2:92:60:67:b2:88:f3:19:
                    af:e6:4d:b7:67:6e:72:92:14:56:e6:97:77:a2:80:
                    11:f9:de:47:71:fb:fa:23:cc:8d:1b:fa:1c:62:1a:
                    f5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AA:76:78:2D:18:CB:A5:D3:6A:8C:2A:36:DE:A3:4C:E6:18:0A:46
            X509v3 Authority Key Identifier:
                keyid:98:FB:7F:08:F9:56:D3:AF:95:71:9C:53:7F:B3:F9:B7:E3:30:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPt_CPlW06-VcZxTf7P5t-MwBrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:cb:11:57:44:35:dc:1a:5d:40:e9:4b:21:ac:15:ae:7e:ad:
         6f:9e:6e:16:24:7e:03:d7:86:d3:82:df:38:fa:da:f2:df:9f:
         3f:58:00:ea:6e:a5:db:7d:bb:7f:f9:61:6c:3b:63:5e:24:cc:
         94:a6:d9:a7:10:0a:55:cb:4a:8a:10:ab:c7:35:6e:ac:94:a9:
         43:dd:4c:dc:e3:c4:f9:e8:fd:22:21:4b:a9:97:b5:15:4c:50:
         65:d7:45:b2:42:16:c2:e0:6e:a4:1a:e8:ae:ba:0f:a0:48:68:
         34:c4:c9:7f:48:f8:0b:f0:64:b0:c0:49:ce:0d:12:ab:48:87:
         ec:5e:eb:4d:0b:13:e1:d8:d7:06:28:43:87:2b:48:8f:56:0b:
         59:c0:f3:7d:69:f6:7c:fb:c3:59:48:7e:01:f4:3e:71:e6:90:
         84:92:8a:64:09:33:69:18:25:3f:d7:a2:80:9f:7c:c2:98:11:
         34:2f:54:20:bc:9e:32:b8:6e:1c:55:77:8a:ae:e6:42:51:2b:
         f6:76:1d:e9:d4:f5:ec:19:83:7b:dd:90:e1:4a:81:99:89:c9:
         54:9a:07:8d:7e:e9:5e:e9:0f:fd:90:c9:99:6d:83:b3:4a:78:
         61:0a:7c:42:a5:6a:07:48:c6:5a:a8:e6:45:7c:d3:e2:f8:aa:
         03:33:2a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:01:08 2025 by rpki-client