Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.mft
File:                     U_tSQvmM_53qm6qMiuRmpCtTfFw.mft (raw, json)
Hash identifier:          7alUgi0p42IHUgIMwE0xsyDNaljRLDTDhiwfZXKmZNE=
Subject key identifier:   18:60:10:07:32:BF:FB:4E:C3:63:21:97:9B:FB:AD:12:85:5A:05:8F
Authority key identifier: 53:FB:52:42:F9:8C:FF:9D:EA:9B:AA:8C:8A:E4:66:A4:2B:53:7C:5C
Certificate issuer:       /CN=53fb5242f98cff9dea9baa8c8ae466a42b537c5c
Certificate serial:       01965915159D46055CA86346CE24F1E88FD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_tSQvmM_53qm6qMiuRmpCtTfFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.mft
Manifest number:          14E5
Signing time:             Mon 21 Apr 2025 16:01:16 +0000
Manifest this update:     Mon 21 Apr 2025 16:01:16 +0000
Manifest next update:     Tue 22 Apr 2025 16:01:16 +0000
Files and hashes:         1: U_tSQvmM_53qm6qMiuRmpCtTfFw.crl (hash: nkgl22cSwE8guwqocWK1mpC2Jq20q0lB+zk51evoyQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_tSQvmM_53qm6qMiuRmpCtTfFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 16:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:15:15:9d:46:05:5c:a8:63:46:ce:24:f1:e8:8f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53fb5242f98cff9dea9baa8c8ae466a42b537c5c
        Validity
            Not Before: Apr 21 16:01:16 2025 GMT
            Not After : Apr 22 16:01:16 2025 GMT
        Subject: CN=1860100732bffb4ec36321979bfbad12855a058f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:fc:f7:2e:a8:63:f8:3f:87:bf:1d:9d:37:
                    95:d2:6d:35:a6:e5:5c:ed:ef:cd:03:dc:87:be:74:
                    50:16:ce:bc:a1:52:06:2d:65:2a:48:7d:59:d6:32:
                    9d:63:d7:e1:e2:2b:a9:4b:ea:11:f9:8c:05:34:a5:
                    9c:84:2d:21:0b:f7:18:f3:61:13:bb:07:23:8a:be:
                    12:d9:eb:7c:3b:44:83:82:16:5e:37:17:44:75:b6:
                    85:10:19:80:2e:2c:33:c5:9c:11:fb:bc:b0:1e:10:
                    df:3e:4f:95:3b:85:c9:d2:71:51:d5:e9:37:6f:a6:
                    ca:8e:b0:f3:39:ba:42:f6:84:fd:0c:fa:dc:5a:28:
                    69:c8:db:57:ee:a1:dc:6f:47:77:65:8a:c8:e2:04:
                    8c:b8:55:5f:69:1b:a1:09:b8:31:94:ae:04:c3:f8:
                    72:83:ec:86:04:3d:37:0b:d5:aa:e7:39:b3:7d:b4:
                    59:9e:ca:4c:c1:29:c9:42:2e:21:4c:6b:dc:03:76:
                    47:13:97:4c:d7:3f:e5:8f:a8:3b:74:2c:1b:12:8d:
                    d7:0c:b0:38:85:69:65:23:b8:a4:82:2b:b4:f1:ea:
                    5d:73:f1:3d:ad:9d:d6:2a:fc:8b:ea:ac:29:da:6d:
                    dc:c5:08:e7:2f:03:33:2a:c0:82:1f:36:a4:8c:ce:
                    5c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:60:10:07:32:BF:FB:4E:C3:63:21:97:9B:FB:AD:12:85:5A:05:8F
            X509v3 Authority Key Identifier:
                keyid:53:FB:52:42:F9:8C:FF:9D:EA:9B:AA:8C:8A:E4:66:A4:2B:53:7C:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_tSQvmM_53qm6qMiuRmpCtTfFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:3f:f3:54:6e:5a:68:bf:4d:5a:37:94:e2:64:91:b3:3f:7c:
         79:e9:3c:37:9a:d9:70:03:d8:91:80:05:bc:90:7a:c1:ed:c8:
         b0:f4:dd:d2:09:b1:b2:4b:ff:84:32:d5:a5:79:a5:38:84:9d:
         6c:fc:15:94:96:2e:85:e2:d0:c3:82:f7:ff:f7:82:6f:0d:d1:
         9c:e5:18:ab:f1:a7:fb:23:79:53:a0:f3:1c:0c:4c:4f:00:be:
         37:82:52:a8:cc:d0:b5:6b:d8:23:cb:b9:53:d3:57:88:ed:7b:
         c5:c7:ca:ad:19:0a:cc:c0:92:1b:65:aa:3c:cc:ac:f7:59:35:
         05:04:5b:80:98:53:15:a5:46:a6:aa:69:cf:28:02:d1:70:0f:
         13:55:8e:73:21:bc:c1:07:de:91:22:71:e5:02:1d:f6:8b:c4:
         78:3b:1d:e4:90:68:85:2e:d2:4d:91:9b:5e:a9:c4:7b:37:7a:
         ce:8f:73:91:c1:99:6c:11:fa:e1:72:e2:26:97:aa:43:99:9c:
         54:3e:e5:da:4f:3a:66:eb:74:f2:37:6a:2d:b5:f0:09:33:44:
         34:0b:d8:92:c6:ac:17:c0:07:f0:2f:78:3d:e3:fc:a3:68:94:
         b8:da:ee:64:2f:21:cb:b8:9d:75:d2:eb:19:0f:6b:bd:6b:b0:
         d8:d5:7a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:29:41 2025 by rpki-client