Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft
File:                     ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft (raw, json)
Hash identifier:          B2T1lwWdF693WT/R8jbBqLNzBP0xoZ4IYqxzKiS7Iz4=
Subject key identifier:   27:BA:19:1C:62:E9:A8:D9:B2:E4:CD:BC:7B:9B:9A:F3:4F:3A:19:26
Authority key identifier: A2:02:D6:B1:52:7F:10:59:3A:B5:67:56:90:AF:EE:88:C1:3C:2F:2E
Certificate issuer:       /CN=a202d6b1527f10593ab5675690afee88c13c2f2e
Certificate serial:       01965680FF335EE1A919C21F1CBB974A5574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft
Manifest number:          1190
Signing time:             Mon 21 Apr 2025 04:00:16 +0000
Manifest this update:     Mon 21 Apr 2025 04:00:16 +0000
Manifest next update:     Tue 22 Apr 2025 04:00:16 +0000
Files and hashes:         1: ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl (hash: pJUEnzRshMOPPBD/x+5rGjEsMP9vBZ98XuqBn0L3Jf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:56:80:ff:33:5e:e1:a9:19:c2:1f:1c:bb:97:4a:55:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a202d6b1527f10593ab5675690afee88c13c2f2e
        Validity
            Not Before: Apr 21 04:00:16 2025 GMT
            Not After : Apr 22 04:00:16 2025 GMT
        Subject: CN=27ba191c62e9a8d9b2e4cdbc7b9b9af34f3a1926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:93:64:10:2d:96:6f:61:8e:45:b0:05:35:50:
                    57:4b:8d:1b:8b:ce:25:83:40:e6:1d:38:30:0a:6f:
                    88:61:7c:7d:44:8d:91:a0:fc:12:99:68:7b:cc:3f:
                    5b:00:cf:d2:e8:5f:ab:25:0e:6d:4d:08:88:0d:9c:
                    a1:7b:25:f9:b4:5b:7d:d9:64:9d:a4:e0:74:10:a5:
                    ff:f8:7b:78:ea:f9:11:63:8c:06:25:0d:48:2b:f8:
                    aa:f7:28:db:73:f2:d0:73:bb:a7:fe:9a:5e:e9:a8:
                    f2:4a:98:0c:41:96:b8:1e:c0:98:01:c3:37:b0:2f:
                    85:56:9c:c8:c7:45:78:96:f3:ff:68:67:4d:df:4a:
                    86:7e:b5:0d:22:85:c0:7f:0a:71:3c:05:87:88:7a:
                    ea:12:0d:97:50:62:b0:4e:89:c0:37:b7:54:da:51:
                    84:42:6c:54:bf:96:9d:43:fd:1c:87:96:13:13:ab:
                    25:29:f8:5e:2d:16:e8:06:19:f9:df:ef:9c:1e:0f:
                    3c:b4:e6:5d:e3:57:00:f9:a0:04:9a:f0:29:04:b5:
                    f0:9e:47:84:31:0e:7a:f9:b6:f2:09:e3:13:bf:7f:
                    5c:c4:08:ab:6f:5e:7f:b3:a3:24:d0:1e:3e:19:0d:
                    68:08:ee:09:84:6a:7a:0a:f0:17:dd:4b:18:b9:26:
                    58:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BA:19:1C:62:E9:A8:D9:B2:E4:CD:BC:7B:9B:9A:F3:4F:3A:19:26
            X509v3 Authority Key Identifier:
                keyid:A2:02:D6:B1:52:7F:10:59:3A:B5:67:56:90:AF:EE:88:C1:3C:2F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:4a:14:95:fe:49:0e:3b:25:24:2b:a4:2b:fc:1e:1e:80:9f:
         8a:9d:e7:35:3b:08:09:0a:cf:3a:81:a6:d1:c4:f4:73:eb:cb:
         1e:cd:d0:4a:81:bc:31:a4:2f:94:69:47:89:92:de:45:c6:ca:
         53:99:a4:c5:2f:1b:e2:17:ec:23:91:0d:0a:5d:ac:7e:d2:b7:
         41:8d:87:82:e7:37:1b:15:0f:8c:a0:1d:a7:98:7e:01:cb:38:
         e4:43:fa:8d:54:72:bd:2f:15:03:c1:5b:25:c8:4e:81:66:6f:
         7f:66:40:aa:8f:81:82:c5:49:6e:af:99:f4:9a:28:a6:d5:d1:
         48:c4:91:4a:11:2a:8a:cb:96:e0:fb:e2:03:28:8d:93:9f:d4:
         f3:12:3a:c6:38:25:35:2c:e2:f1:c1:95:11:44:20:94:a9:22:
         90:c8:18:1a:5f:59:31:9e:dc:ba:2e:06:0e:f9:31:ee:e9:25:
         9c:e9:0b:4b:98:34:0c:ae:6e:de:25:96:04:0a:c1:79:d2:ab:
         4a:1b:f0:e3:ea:16:40:ec:2b:d1:d4:eb:78:c3:aa:91:e5:7b:
         a7:21:2d:74:c5:b2:1b:85:3c:10:95:18:0f:02:bb:b8:cd:30:
         32:04:5b:99:d0:20:18:1f:c9:ea:52:fc:bc:c8:42:de:c3:64:
         04:fb:7a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:51:44 2025 by rpki-client