Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
File:                     5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft (raw, json)
Hash identifier:          CLfEuUv2B/HoKNbnOzXhet+1FKXKqDx4c7GuEH5sW5U=
Subject key identifier:   CF:B5:6C:C2:BD:3B:C2:0A:C2:DD:FB:77:5F:14:B7:A7:BE:1D:AC:6C
Authority key identifier: E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94
Certificate issuer:       /CN=e6157528a9cce92518f36bf0a81b7901a650ae94
Certificate serial:       01964A46212D6B10CABB2647DE0670DB1326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
Manifest number:          1487
Signing time:             Fri 18 Apr 2025 19:00:31 +0000
Manifest this update:     Fri 18 Apr 2025 19:00:31 +0000
Manifest next update:     Sat 19 Apr 2025 19:00:31 +0000
Files and hashes:         1: 5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl (hash: VuA/EjQlXmIshn7fRF54X5YDPTX9kzuh3/doPeVMXvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:46:21:2d:6b:10:ca:bb:26:47:de:06:70:db:13:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6157528a9cce92518f36bf0a81b7901a650ae94
        Validity
            Not Before: Apr 18 19:00:31 2025 GMT
            Not After : Apr 19 19:00:31 2025 GMT
        Subject: CN=cfb56cc2bd3bc20ac2ddfb775f14b7a7be1dac6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cd:c9:87:6d:d3:34:0c:a9:8e:93:d5:09:b7:
                    e3:f6:90:ef:8c:05:a4:4a:f8:d0:c5:31:2e:8f:8b:
                    84:10:70:77:9b:94:6c:ec:f2:f2:61:3a:9e:4c:cc:
                    02:99:ff:a5:cc:43:b5:ea:9f:0f:4a:9d:4b:d5:25:
                    f8:20:91:ae:4a:a2:c6:b9:cf:61:97:71:36:5c:4a:
                    8b:5b:06:09:ef:7f:7f:03:03:13:18:a4:cb:2b:95:
                    e0:66:9f:25:f2:60:c7:a2:a7:e3:07:48:85:25:14:
                    0b:99:0f:3d:14:4f:21:a6:3b:f9:ca:c0:e3:fb:91:
                    4e:fb:61:e1:80:5c:24:bc:cb:f5:a2:15:72:72:83:
                    4a:94:48:42:f7:5d:23:76:a6:e4:1a:99:f8:21:86:
                    e9:1b:45:c3:b9:c1:8b:a2:c2:81:1c:3a:be:6d:90:
                    cb:64:33:a2:89:ae:d7:68:c4:3b:05:c2:da:5b:16:
                    0b:f1:af:9e:25:4f:b0:7c:6d:a2:35:74:f7:08:79:
                    0a:e0:74:3b:19:bc:2d:d8:cd:7f:29:06:22:f0:6a:
                    f1:c7:92:8b:86:6b:a4:d7:32:77:3a:8c:d9:00:66:
                    eb:b0:ed:d5:a4:0c:3e:8c:50:a9:63:e9:df:ed:13:
                    c3:79:fe:f5:6d:4a:75:02:46:f5:46:6b:40:71:2d:
                    12:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B5:6C:C2:BD:3B:C2:0A:C2:DD:FB:77:5F:14:B7:A7:BE:1D:AC:6C
            X509v3 Authority Key Identifier:
                keyid:E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:46:86:a1:29:c1:41:b6:bc:34:ce:07:5d:b0:4e:5f:22:27:
         23:7c:b5:79:ae:23:25:0e:bb:db:6f:67:a5:bd:92:60:ee:95:
         f8:eb:95:a6:f1:aa:52:b1:41:c7:99:cd:e7:cc:ca:62:02:c2:
         64:7c:58:1f:2f:52:51:c4:d2:ac:09:ec:88:a5:d6:0f:8d:03:
         f7:37:4d:8a:28:9f:3a:a9:f4:08:b4:cd:28:b9:70:dd:97:79:
         93:42:fe:b5:e9:29:b2:00:84:7b:ca:b7:d5:c4:09:c9:e8:9c:
         5f:d1:d9:66:c6:e2:c5:41:74:7d:ad:f1:7b:8a:7e:18:67:03:
         ce:ad:db:97:4d:04:cf:89:5e:6d:3f:aa:c9:cd:d8:6f:a5:2f:
         71:7b:1c:7a:4a:55:8c:91:d8:ed:e8:25:9e:e0:4a:52:77:90:
         5e:79:ce:e9:66:49:a9:1f:cb:12:fa:fd:25:d8:42:67:02:d7:
         88:ad:be:4e:d3:00:5b:45:55:36:33:c7:e6:01:50:56:38:e3:
         08:6c:72:dc:fb:49:9d:76:9c:04:ea:a4:f1:90:16:29:ba:b9:
         1e:6d:2e:bc:09:9c:1e:c3:1d:e9:fd:1e:4a:51:a0:0f:b0:a5:
         1a:cf:39:e7:72:6f:fc:56:05:b9:5b:fa:e2:98:a0:95:03:95:
         ea:9b:95:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:09:01 2025 by rpki-client