Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft
File:                     VRy0WKT6JZKw_GZGRuJzws9HgkY.mft (raw, json)
Hash identifier:          070GhWFaXMjJG2rKgfTf8vuGFR/zdJCtsAVk7AECD98=
Subject key identifier:   4E:BA:52:54:48:5F:0D:99:3D:60:59:73:3E:1A:FB:CF:94:1A:30:AF
Authority key identifier: 55:1C:B4:58:A4:FA:25:92:B0:FC:66:46:46:E2:73:C2:CF:47:82:46
Certificate issuer:       /CN=551cb458a4fa2592b0fc664646e273c2cf478246
Certificate serial:       019649A244EDC2345A0E5B6B61F59ABF5A62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRy0WKT6JZKw_GZGRuJzws9HgkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft
Manifest number:          046C
Signing time:             Fri 18 Apr 2025 16:01:33 +0000
Manifest this update:     Fri 18 Apr 2025 16:01:33 +0000
Manifest next update:     Sat 19 Apr 2025 16:01:33 +0000
Files and hashes:         1: VRy0WKT6JZKw_GZGRuJzws9HgkY.crl (hash: NJYQcCuINVQHzKTPPZo5daylhUK576qYKUitp/Wpi+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRy0WKT6JZKw_GZGRuJzws9HgkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 16:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:a2:44:ed:c2:34:5a:0e:5b:6b:61:f5:9a:bf:5a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551cb458a4fa2592b0fc664646e273c2cf478246
        Validity
            Not Before: Apr 18 16:01:33 2025 GMT
            Not After : Apr 19 16:01:33 2025 GMT
        Subject: CN=4eba5254485f0d993d6059733e1afbcf941a30af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3c:36:bf:7e:71:46:14:72:3d:c6:50:e9:16:
                    73:46:ac:3c:9d:47:a1:d5:e0:ac:17:a2:6a:e0:ec:
                    c9:01:4d:90:f3:d6:48:2d:cf:77:11:10:c1:f6:76:
                    fa:67:6c:84:b3:36:bf:1a:b2:a8:19:82:98:c9:e4:
                    45:5e:a1:e3:ed:9f:cb:ba:11:75:e2:f3:5c:e8:ce:
                    25:b8:f2:db:c3:6c:e7:7a:3c:d1:6a:ac:59:b8:4c:
                    de:c6:6d:46:0b:a3:26:0e:25:4b:ba:d7:27:4b:ad:
                    2e:5e:16:2b:d4:0d:a4:28:55:f1:e0:2c:91:42:5b:
                    84:68:14:d1:b6:62:9f:dd:87:58:83:10:e5:45:3e:
                    29:53:b8:53:bf:c0:81:40:8d:00:ed:e7:11:4a:ea:
                    12:6f:3c:eb:e2:b6:24:08:c0:35:4a:93:dc:00:65:
                    62:ec:5b:07:fd:67:f6:2b:ea:27:e1:97:26:5c:d3:
                    97:73:78:1e:e3:7e:e2:7c:ef:2b:d3:e4:b9:48:06:
                    f8:30:f4:36:20:8a:a7:d3:62:fa:a4:17:5b:d1:4e:
                    74:a8:8e:7a:be:a2:f0:29:c6:7a:c3:07:7a:72:bb:
                    92:02:31:8d:df:2c:77:ac:7f:5f:97:31:94:54:58:
                    15:ed:76:e5:1c:18:6d:eb:15:b2:d0:1c:df:d6:bf:
                    11:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BA:52:54:48:5F:0D:99:3D:60:59:73:3E:1A:FB:CF:94:1A:30:AF
            X509v3 Authority Key Identifier:
                keyid:55:1C:B4:58:A4:FA:25:92:B0:FC:66:46:46:E2:73:C2:CF:47:82:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRy0WKT6JZKw_GZGRuJzws9HgkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ab:46:68:66:ac:cb:15:34:48:4f:1c:48:e8:fd:dc:26:6f:
         80:5f:4b:7a:05:fe:9f:de:e6:c6:b4:90:d7:75:0d:88:2f:49:
         db:95:dd:38:50:a8:9d:73:02:45:5f:2b:7e:bf:d5:b7:9e:ab:
         56:76:ee:a2:cd:f1:93:72:8a:c2:36:d9:00:c9:77:98:62:f4:
         c8:c1:4d:47:bd:48:85:35:b0:c4:4a:9a:f4:06:54:4a:3e:c1:
         6f:20:d3:07:2f:cb:af:89:cd:f4:e3:3e:59:bd:fc:bb:2d:4d:
         38:ce:e5:fe:e6:fc:e3:4a:69:64:bf:2f:dd:06:61:b2:01:a1:
         ff:fb:8d:d9:33:7c:2d:29:88:5e:15:bc:c7:5d:51:ba:1f:9c:
         67:bf:e0:02:b6:ab:ee:55:9a:58:64:a0:18:65:7a:cf:78:74:
         93:a9:29:67:98:65:6f:d7:66:82:93:d8:9e:be:fd:1c:d1:07:
         18:61:d8:fc:90:15:f0:8c:4b:5b:d3:74:de:77:bd:a4:fa:49:
         e2:d3:15:6f:5e:58:41:00:0e:33:fa:16:1e:31:c0:0a:78:8e:
         45:55:fa:6c:57:30:dd:cc:13:08:54:f4:db:c8:59:37:a3:21:
         83:46:78:f2:2e:d2:1c:a5:c2:0d:18:e9:f3:b8:c4:19:c5:01:
         38:5b:0b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:39:43 2025 by rpki-client