Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
File:                     EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft (raw, json)
Hash identifier:          07ADW8Kam623lPgFmzkt7ZohDeDOqKzpOhoVNO1mo9I=
Subject key identifier:   99:15:D5:53:E5:21:32:95:3F:97:F8:E0:B2:1B:25:87:C5:37:08:0F
Authority key identifier: 10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D
Certificate issuer:       /CN=1003cd25315330350d73f2a3579aa95e052b718d
Certificate serial:       01965613D3693D90186EFD8A8FD7A07FB65B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
Manifest number:          0932
Signing time:             Mon 21 Apr 2025 02:01:01 +0000
Manifest this update:     Mon 21 Apr 2025 02:01:01 +0000
Manifest next update:     Tue 22 Apr 2025 02:01:01 +0000
Files and hashes:         1: EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl (hash: //gBP1rZ+grcIfduvw1HDb5TDLgaUsyYLOrBeE7USnA=)
                          2: m05UFQfMUkm8RmzIuHOsksJMdP0.roa (hash: yGsV8HL3U4MAtVDLG2EGnsRjRnklyUH2zR9pUN6kEek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:56:13:d3:69:3d:90:18:6e:fd:8a:8f:d7:a0:7f:b6:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1003cd25315330350d73f2a3579aa95e052b718d
        Validity
            Not Before: Apr 21 02:01:01 2025 GMT
            Not After : Apr 22 02:01:01 2025 GMT
        Subject: CN=9915d553e52132953f97f8e0b21b2587c537080f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5f:b3:b4:8a:98:b2:48:2d:97:40:54:d4:f5:
                    5f:68:4d:2e:40:74:b0:c1:5f:2a:4d:9e:7b:a1:f1:
                    09:bd:67:b7:4d:72:10:b5:7f:99:ca:f4:29:45:83:
                    53:ef:0f:7d:d0:ab:4d:3a:65:42:4d:0a:e1:8d:7b:
                    d3:61:e5:b3:a8:26:6e:e3:ed:d5:67:58:60:05:7c:
                    dc:f8:64:84:a4:c5:4f:7a:20:2e:3c:d9:bf:1e:d9:
                    30:0d:8f:92:cd:45:c3:e5:b7:e1:76:d5:7a:4d:3c:
                    ad:7e:69:5d:24:f5:73:8e:15:bc:38:99:62:74:c9:
                    d6:dc:44:fd:d2:cd:e8:81:e7:d9:b6:c2:95:f1:2c:
                    f5:3b:ed:f5:a8:96:29:e8:70:d2:73:af:eb:b3:99:
                    1a:62:c9:ac:63:42:a1:bf:8a:32:0f:08:b5:74:40:
                    94:e7:79:8e:be:47:86:9d:87:3a:af:41:5f:da:77:
                    4a:41:7a:bd:e8:7f:53:b1:3e:0b:00:fc:2b:80:cc:
                    de:cd:93:52:ea:44:1b:61:9d:f2:a2:c2:87:a9:7e:
                    e8:9e:ab:01:a4:cd:bd:51:6a:df:b0:33:07:f3:f5:
                    bb:71:ea:d1:fc:33:5f:7d:6c:1a:dc:a1:5d:32:37:
                    0a:e3:8d:5e:6a:5b:1c:2c:23:8f:10:d7:ca:1d:ed:
                    22:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:15:D5:53:E5:21:32:95:3F:97:F8:E0:B2:1B:25:87:C5:37:08:0F
            X509v3 Authority Key Identifier:
                keyid:10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f6:b4:44:34:86:71:b5:48:55:d2:a0:16:32:0e:28:bb:0a:
         63:62:b3:46:61:37:d0:cd:0a:8f:d5:ec:93:5f:94:ec:59:0c:
         b4:d5:69:b2:d3:4f:fc:04:7a:48:72:dd:d0:fc:e9:95:6f:f6:
         47:60:86:1c:53:df:83:31:8e:87:fd:d0:eb:53:0d:08:19:23:
         00:cb:29:58:86:d3:01:af:68:ee:0a:20:40:df:ea:f3:40:a8:
         7b:7b:6a:0d:d3:aa:d0:7e:1c:b4:43:21:25:86:1a:84:21:14:
         c0:0e:4a:58:36:d4:a1:3e:5c:91:40:26:c2:d0:46:ee:c9:3e:
         15:fe:1f:df:e1:13:6a:05:0c:bc:50:a8:97:97:50:64:b3:e4:
         5f:8d:9b:98:72:94:e2:8d:02:cd:7a:bc:72:11:87:61:7e:b8:
         35:15:54:96:d8:1c:3b:c1:2b:87:fd:99:89:39:b5:1b:62:94:
         8e:e5:b8:6f:84:55:78:e8:e5:e2:97:13:57:1e:2f:5a:2b:31:
         f9:e5:7d:00:44:1a:64:4d:38:de:7a:cc:1d:a8:53:27:b5:af:
         a4:52:96:30:4a:87:f9:fa:8d:2e:07:a2:0d:5e:f9:2d:7b:de:
         0c:27:2f:c2:0a:2b:25:d8:56:1b:43:2c:bc:3f:89:cf:c9:af:
         49:48:bc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:07 2025 by rpki-client