Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
File:                     F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft (raw, json)
Hash identifier:          r4UPI6FA3raUl8+QAsr4DVyYidxdwZ+NUCwkM3NXDU0=
Subject key identifier:   4F:1C:E3:A9:EC:11:DC:C8:88:5A:FE:BD:5E:D2:97:A0:C8:6F:EA:E1
Authority key identifier: 17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72
Certificate issuer:       /CN=1792582aa0b18d6073592f121a6e563fec424672
Certificate serial:       019659F02B317005935766CAE81D14CB23E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
Manifest number:          059F
Signing time:             Mon 21 Apr 2025 20:00:34 +0000
Manifest this update:     Mon 21 Apr 2025 20:00:34 +0000
Manifest next update:     Tue 22 Apr 2025 20:00:34 +0000
Files and hashes:         1: F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl (hash: sk1BQ1xT4WN7TZHotfzelz9kZMX906LOZnCNOdCPT2o=)
                          2: X1Hk6Afe1QrSetXg0Fl8YXsPzIQ.roa (hash: XOR8QJ4EQ0MnwLrp2DnXgyEFhnN9pPQ9poUD3LAPUHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:f0:2b:31:70:05:93:57:66:ca:e8:1d:14:cb:23:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1792582aa0b18d6073592f121a6e563fec424672
        Validity
            Not Before: Apr 21 20:00:34 2025 GMT
            Not After : Apr 22 20:00:34 2025 GMT
        Subject: CN=4f1ce3a9ec11dcc8885afebd5ed297a0c86feae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:42:72:31:df:51:b9:a7:c2:9a:d5:d1:0d:14:
                    ee:47:24:d0:35:32:eb:68:3b:ec:f0:7b:b3:e3:c4:
                    62:e7:02:e8:71:a8:fc:f3:13:51:81:8d:54:ed:fb:
                    61:62:71:e7:f4:e1:30:40:95:ef:8d:53:8e:71:15:
                    da:26:7f:a8:4d:2e:70:55:c9:49:35:37:78:3d:19:
                    40:e5:c1:ae:d8:cc:bf:70:06:61:f4:23:c1:ef:af:
                    fd:4e:f1:2b:81:18:ab:cc:a4:7f:74:ef:59:b2:e6:
                    5c:68:5a:d6:f1:00:30:b7:d8:41:57:19:50:e1:29:
                    da:b9:91:c7:1d:3a:f0:03:ce:82:60:91:a6:23:24:
                    ff:a8:1e:ed:a7:1e:ff:7f:41:82:24:12:92:e7:dc:
                    5c:08:47:00:9e:10:89:31:a6:fd:e0:91:c2:5b:a6:
                    57:4a:44:82:bf:1d:df:1c:83:f6:82:fe:78:ea:3b:
                    0b:ee:55:bf:ca:11:4b:bf:90:26:81:d3:58:a1:6e:
                    b9:3f:f5:14:75:62:08:e9:a5:15:ed:22:ff:8a:90:
                    6a:79:b1:fa:a0:3b:4f:49:6b:ec:37:1c:cf:c1:c9:
                    1a:5e:d7:84:74:21:ee:3f:ff:7b:24:cb:19:61:81:
                    86:fb:f5:fd:80:3e:0e:ef:b8:35:c1:fa:df:e0:7c:
                    5b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1C:E3:A9:EC:11:DC:C8:88:5A:FE:BD:5E:D2:97:A0:C8:6F:EA:E1
            X509v3 Authority Key Identifier:
                keyid:17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:7a:32:78:ad:cd:28:2b:5f:4c:19:42:2f:32:2f:60:42:4e:
         ea:34:dc:81:f4:84:a7:4b:0e:75:f3:8a:19:45:ae:1f:de:41:
         46:aa:25:95:d2:1d:29:8f:c3:f3:14:45:64:cd:f4:45:99:5d:
         45:6b:5f:8d:66:05:ac:56:f5:60:a2:12:58:9c:52:55:da:c1:
         a4:58:7f:d8:68:9b:ee:fb:6b:b6:d3:55:2c:a2:35:85:db:d3:
         87:80:95:21:9b:a8:8d:ac:31:56:20:6e:35:56:17:85:09:4e:
         a9:86:b0:bb:ef:71:3c:90:72:11:a5:43:a7:f2:1b:3b:12:c8:
         d1:6c:9b:2e:b7:ee:40:94:17:e3:b9:28:78:9b:67:1d:0d:a4:
         a7:d2:b2:f8:86:09:89:48:cc:ff:28:9a:dd:bc:97:54:51:a7:
         60:b8:55:a7:7d:36:ba:98:16:a6:fe:6b:c4:bd:e6:5d:7e:9f:
         6e:ae:a2:47:ba:ff:79:1b:82:4e:46:e2:9f:ce:c5:34:08:91:
         4c:ed:a7:62:ae:7e:b6:db:7e:f7:a2:bf:37:39:76:13:2b:df:
         b8:8d:a1:13:38:3c:34:c9:5b:7a:1e:72:50:ae:e4:50:0a:1f:
         83:57:f7:67:5b:ce:da:8a:03:60:e0:0f:e7:7a:7c:76:ff:09:
         0f:57:6c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:35 2025 by rpki-client