Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft
File:                     fuKac7j6u65GDnkk_nZoR13LmmM.mft (raw, json)
Hash identifier:          S/g2K1vpS0+Cvk7haTY5wDoLH0if/xi9PPzlcW2lmOs=
Subject key identifier:   17:33:93:EF:01:5A:2C:C8:15:C8:73:3A:E7:F4:05:5B:E9:C1:2F:F0
Authority key identifier: 7E:E2:9A:73:B8:FA:BB:AE:46:0E:79:24:FE:76:68:47:5D:CB:9A:63
Certificate issuer:       /CN=7ee29a73b8fabbae460e7924fe7668475dcb9a63
Certificate serial:       01965914DE54A787193FA1B71D04807E3DF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft
Manifest number:          047A
Signing time:             Mon 21 Apr 2025 16:01:01 +0000
Manifest this update:     Mon 21 Apr 2025 16:01:01 +0000
Manifest next update:     Tue 22 Apr 2025 16:01:01 +0000
Files and hashes:         1: fuKac7j6u65GDnkk_nZoR13LmmM.crl (hash: xNrm0uBx3N6dgLPq85I52+RHazBQdhY2T9RTMOyY8eY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 16:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:14:de:54:a7:87:19:3f:a1:b7:1d:04:80:7e:3d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee29a73b8fabbae460e7924fe7668475dcb9a63
        Validity
            Not Before: Apr 21 16:01:01 2025 GMT
            Not After : Apr 22 16:01:01 2025 GMT
        Subject: CN=173393ef015a2cc815c8733ae7f4055be9c12ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:45:ca:01:b6:fc:89:fd:46:79:0d:37:11:66:
                    41:e8:5f:40:bb:d2:6c:4e:0c:42:94:fd:c6:2f:ef:
                    44:d9:e7:d2:f7:33:12:b2:f5:a3:3c:43:f5:c0:17:
                    08:de:38:cd:e1:ec:89:fa:cb:8f:f6:1c:d9:b8:e9:
                    1a:61:14:82:0f:dd:d8:23:e9:3c:8f:0b:a0:ac:38:
                    85:bf:ea:35:b1:50:29:4e:9f:3d:43:ad:92:2d:6e:
                    98:97:ac:0c:32:b6:6d:27:36:4d:dd:54:c3:e1:59:
                    23:35:4d:33:93:48:84:6b:21:fe:c3:14:0c:1f:26:
                    02:f2:7a:57:4f:bb:7d:a3:9b:f2:f5:78:af:4a:87:
                    e7:3c:b7:83:9e:fa:80:0e:1b:1c:73:ab:60:a0:11:
                    b4:86:f3:26:c5:52:ca:83:00:20:88:66:3a:d8:11:
                    cb:12:1a:cd:83:ce:ff:8e:2b:13:e6:0c:70:65:e5:
                    05:50:32:02:1b:ff:1b:01:c6:fc:e6:38:f0:bd:d3:
                    6e:ac:7b:5a:78:59:54:d1:a1:9a:82:37:b7:4b:07:
                    37:0f:91:eb:10:e6:5e:b3:93:9f:f3:ce:be:a5:a7:
                    52:ce:3a:32:ed:da:05:54:67:c5:b9:29:41:b5:d4:
                    c0:9f:c5:a6:5b:fb:c0:3d:b1:f5:98:05:7d:b1:8b:
                    e7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:33:93:EF:01:5A:2C:C8:15:C8:73:3A:E7:F4:05:5B:E9:C1:2F:F0
            X509v3 Authority Key Identifier:
                keyid:7E:E2:9A:73:B8:FA:BB:AE:46:0E:79:24:FE:76:68:47:5D:CB:9A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:2e:09:45:d2:79:8c:1d:45:82:f6:5d:6d:0d:93:2f:43:c7:
         df:88:f0:0e:aa:20:cc:12:a0:a8:92:88:97:5c:44:7f:8e:bc:
         f9:48:cc:48:91:4a:8e:67:4a:81:3b:1c:dc:9a:10:8a:ba:82:
         b3:b8:44:24:49:0d:e9:d9:3a:c7:02:83:bd:87:2e:1f:ab:43:
         b6:d4:47:c5:ce:b9:9f:47:6c:a9:e0:1c:c2:0e:55:04:dc:5a:
         e1:1f:b4:7a:64:6e:df:34:f8:f7:ed:b3:4a:ae:7a:a8:26:8a:
         f3:05:81:e0:64:97:74:55:a0:9a:31:47:6a:3b:78:cf:35:44:
         aa:20:21:16:24:34:b8:93:9f:7b:6b:ba:4f:d1:dc:b8:d5:83:
         69:8c:84:58:89:37:3a:3d:17:a9:4d:42:e6:92:ca:cb:32:67:
         19:ef:a2:bf:e4:08:79:3b:60:0e:a2:03:47:7a:37:c9:fc:cc:
         65:96:e8:28:17:eb:87:b3:24:f7:c6:80:9e:43:f4:ac:ab:37:
         f4:92:ac:61:c1:39:db:9d:8f:73:3e:d3:cf:ea:7d:c2:5c:2c:
         93:f3:31:4f:1c:34:0b:0c:5e:87:de:31:e2:84:f5:83:98:6a:
         fe:41:de:d6:8e:6c:46:22:96:ea:e4:12:0e:58:2f:fd:f4:fb:
         39:31:a2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:08:19 2025 by rpki-client