Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
File:                     71j4Vyvdd9mBQRGA4u-aioAsdqw.mft (raw, json)
Hash identifier:          3PJ0cjujUUlojnSn+s8eL7pIfhrLRWcopJm/c2YOV88=
Subject key identifier:   B7:E7:A4:4D:FB:AA:8A:C6:57:AB:0E:1E:96:2E:BC:11:4F:EC:FF:E5
Authority key identifier: EF:58:F8:57:2B:DD:77:D9:81:41:11:80:E2:EF:9A:8A:80:2C:76:AC
Certificate issuer:       /CN=ef58f8572bdd77d981411180e2ef9a8a802c76ac
Certificate serial:       0196549310339E93391CF244446C275F3F54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
Manifest number:          79
Signing time:             Sun 20 Apr 2025 19:00:46 +0000
Manifest this update:     Sun 20 Apr 2025 19:00:46 +0000
Manifest next update:     Mon 21 Apr 2025 19:00:46 +0000
Files and hashes:         1: 71j4Vyvdd9mBQRGA4u-aioAsdqw.crl (hash: IR8Ufg9nWnU4QpPJHr9G8tuA5JHT7AaeQEqrYPRFU30=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 19:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:93:10:33:9e:93:39:1c:f2:44:44:6c:27:5f:3f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef58f8572bdd77d981411180e2ef9a8a802c76ac
        Validity
            Not Before: Apr 20 19:00:46 2025 GMT
            Not After : Apr 21 19:00:46 2025 GMT
        Subject: CN=b7e7a44dfbaa8ac657ab0e1e962ebc114fecffe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2e:1a:cd:17:40:a5:90:74:db:81:a0:23:34:
                    44:b5:1b:c6:08:e0:0c:3e:3c:15:f1:e3:ca:0a:1e:
                    d6:27:de:89:f0:b4:47:82:ec:23:ab:46:68:ea:58:
                    48:47:a4:d7:f2:d8:d3:3a:9a:32:e4:c2:30:6d:46:
                    1b:29:ef:ea:20:52:95:79:eb:a9:dd:41:99:6e:d6:
                    e0:c8:c0:c4:0a:0b:29:b1:ee:af:47:da:91:e8:7f:
                    ca:13:6b:67:56:4e:58:69:2e:ad:08:11:5e:65:72:
                    e4:33:0f:1c:c3:fa:d8:99:b5:d8:d0:2a:a6:32:b0:
                    c6:e1:12:3e:96:29:57:b7:14:f2:8f:bc:c4:96:4f:
                    07:72:b0:48:15:8f:9a:8f:07:a4:30:a0:cd:46:7b:
                    c2:b9:f4:33:53:8d:e4:db:78:c5:96:4b:1d:c7:14:
                    b1:d9:3f:81:8c:08:1e:5e:b9:04:26:f3:d3:d7:71:
                    ba:e9:9a:53:df:2f:ef:d3:29:71:d6:ce:7e:b5:47:
                    be:83:ed:b4:9d:68:55:dd:88:ab:be:30:c8:67:1c:
                    6a:fb:84:67:1d:03:a5:b9:d2:a3:f5:a5:a4:05:5d:
                    2b:a1:b9:e2:50:c4:ff:60:38:0f:8b:6d:19:b5:fd:
                    4e:98:28:eb:01:fe:7c:84:4d:9a:6a:f5:4c:92:59:
                    27:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E7:A4:4D:FB:AA:8A:C6:57:AB:0E:1E:96:2E:BC:11:4F:EC:FF:E5
            X509v3 Authority Key Identifier:
                keyid:EF:58:F8:57:2B:DD:77:D9:81:41:11:80:E2:EF:9A:8A:80:2C:76:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:18:b7:7f:fe:4c:90:49:85:a1:cc:4c:e9:1f:7a:ec:9c:2e:
         15:99:ee:88:c9:80:45:0a:1e:a0:0a:b6:b6:b9:c4:48:d0:14:
         31:33:8f:8b:cc:74:46:59:f0:0d:14:46:4a:39:cb:69:2d:ed:
         72:79:1a:96:4d:f8:62:b4:6c:c1:36:c7:38:32:d0:09:b5:e1:
         77:bd:dd:3f:27:3a:ec:89:1e:c4:c2:51:6b:27:99:05:0b:19:
         e6:f0:19:47:75:09:70:d1:27:25:59:82:b2:c8:30:b5:49:9c:
         a0:a7:d3:4e:7a:cc:6f:2e:44:15:90:ff:5d:8b:11:a2:d4:56:
         45:0d:20:88:78:84:c7:a2:4b:ce:59:a2:0d:04:e5:aa:15:0e:
         3a:2e:1b:34:d7:75:88:23:c3:c7:c0:bb:ff:91:ab:06:65:33:
         dc:6e:08:72:5f:a4:89:7a:1d:b3:3b:9b:4c:e7:0d:1d:bb:5f:
         4f:9d:0e:c4:52:a7:20:45:46:16:91:c5:e9:8e:1f:07:c9:b5:
         4d:21:52:76:88:50:02:8d:71:3b:87:c0:4b:23:7d:47:92:9c:
         fe:6f:ec:f5:13:5a:7b:e2:cb:29:a4:e7:cb:25:7a:38:4e:90:
         96:9c:26:5f:7e:69:75:f8:fd:73:e7:ab:92:a2:cd:0b:af:48:
         b4:ad:10:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:50 2025 by rpki-client