Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
File:                     NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft (raw, json)
Hash identifier:          ZL++OWrgUNH/ysFto+crn0+XcoGg46aVc541rxW1DTY=
Subject key identifier:   35:B9:94:05:1E:9B:C6:A5:40:A2:84:01:0A:64:5B:99:BF:BB:0B:D6
Authority key identifier: 36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
Certificate issuer:       /CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Certificate serial:       01965D5F06ADC0EEFDD8282127E75C65DD6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
Manifest number:          1501
Signing time:             Tue 22 Apr 2025 12:00:30 +0000
Manifest this update:     Tue 22 Apr 2025 12:00:30 +0000
Manifest next update:     Wed 23 Apr 2025 12:00:30 +0000
Files and hashes:         1: NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl (hash: Q1BjqYCEslRZBO2kVVE3SvKm46ak5mThZraSJqyLkc8=)
                          2: jyQjff39PkjIcb2c4y6sicxo6PU.roa (hash: NTGQ8Vsi7SBxb0wiOjPR2Eb0JAGTh/a1kL30gt2n6ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5d:5f:06:ad:c0:ee:fd:d8:28:21:27:e7:5c:65:dd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
        Validity
            Not Before: Apr 22 12:00:30 2025 GMT
            Not After : Apr 23 12:00:30 2025 GMT
        Subject: CN=35b994051e9bc6a540a284010a645b99bfbb0bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:ef:63:29:72:d2:04:d9:17:91:52:0d:ae:
                    fb:10:af:83:b0:65:e7:8a:9c:56:8e:9e:32:08:ee:
                    18:fd:a2:05:64:49:95:9e:da:9c:fd:db:38:7c:2e:
                    04:3e:ad:78:6d:0d:f6:ce:ea:eb:8a:a6:83:26:b4:
                    d3:94:8a:cf:4f:51:45:1a:62:61:94:ef:84:52:a0:
                    8b:c7:0f:52:1d:98:10:cc:b2:37:42:15:64:7a:7f:
                    fa:32:e0:19:d9:9b:5e:a9:68:4c:05:7a:be:fd:06:
                    cb:50:0f:a5:5c:d7:9e:aa:9f:a9:ba:f1:f9:9b:4a:
                    6e:5b:0f:8d:d6:e8:b1:a8:de:8d:d0:e2:df:3c:63:
                    45:6b:4e:86:98:20:f4:83:f4:8f:91:af:98:7d:f1:
                    be:24:1b:32:b9:95:31:d9:64:2c:14:cc:c7:14:be:
                    1e:2e:ce:f9:9f:85:55:69:fd:fe:71:b2:55:05:0d:
                    b0:45:d1:df:ad:c2:77:eb:1a:c1:53:ad:aa:df:7c:
                    f7:0c:fc:1e:78:2a:c0:07:fd:8b:b5:a1:b3:5d:43:
                    3f:b8:99:7e:54:93:f9:2f:26:88:36:d4:15:93:fe:
                    5d:53:29:c6:e8:b0:91:45:e1:d2:60:f9:fe:2d:c5:
                    64:ef:07:be:82:26:2c:0f:29:3a:36:d8:b0:e6:a0:
                    cd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B9:94:05:1E:9B:C6:A5:40:A2:84:01:0A:64:5B:99:BF:BB:0B:D6
            X509v3 Authority Key Identifier:
                keyid:36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:67:60:af:14:8d:34:7f:ed:f5:ee:08:b6:69:61:6b:24:1b:
         5f:11:62:fe:5a:d4:32:70:e8:40:f9:6e:ad:4e:66:bf:a6:5f:
         ed:da:9e:38:f8:78:8f:a0:bb:a2:ed:36:13:45:71:61:f3:9f:
         dd:cd:19:23:0e:7c:61:f5:c8:22:f6:25:61:80:0e:68:89:cf:
         09:4c:f8:d7:99:26:e7:87:95:f9:70:06:d0:a7:21:1e:e8:57:
         32:61:02:9b:5c:e4:72:00:ed:4f:fb:07:75:23:cc:cf:37:a1:
         30:7a:85:79:f5:b6:c3:d6:ce:1a:eb:9e:80:30:40:74:61:9c:
         c7:3f:2d:58:8d:69:1d:b7:fb:45:8f:12:9a:45:7f:71:f4:c5:
         55:3b:44:53:ee:30:85:29:1b:9a:5a:f8:3c:42:d1:8d:7a:53:
         d6:d0:91:a3:74:27:32:2f:b7:9c:fa:ac:6d:5d:f0:8c:99:6b:
         5b:00:1a:c7:54:83:0e:f1:a5:c6:cf:72:58:4f:95:7f:c3:b9:
         65:03:54:9e:6a:7e:0e:2a:69:89:68:db:5d:18:e7:0e:f8:9f:
         7f:15:fb:cf:fa:ca:b6:5c:2b:4a:6e:dc:bb:1c:68:79:c2:a5:
         dd:9d:5e:e0:2d:9e:8c:cd:8d:63:ff:05:e2:af:c1:b8:83:6f:
         fc:2d:84:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:06:06 2025 by rpki-client