Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
File:                     00_-5-di-aBv4vR-eh5S2eun-v0.mft (raw, json)
Hash identifier:          1BxBV451J69KmeBKkauE2FE98oEHEoiT+n1RwHrijc4=
Subject key identifier:   83:C0:14:42:53:19:D3:D7:CC:45:EF:48:DE:65:9A:66:EE:40:AE:A3
Authority key identifier: D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
Certificate issuer:       /CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Certificate serial:       0196549319F8C73F18CBF95618E0D88819C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
Manifest number:          0F4A
Signing time:             Sun 20 Apr 2025 19:00:48 +0000
Manifest this update:     Sun 20 Apr 2025 19:00:48 +0000
Manifest next update:     Mon 21 Apr 2025 19:00:48 +0000
Files and hashes:         1: 00_-5-di-aBv4vR-eh5S2eun-v0.crl (hash: 7m6WIYdt4ScyJoZw6y6c+yfJ0MttYhb87d2efUXLKaY=)
                          2: RTZF1pckQ5UHtLDFfMIz6CKlCQM.roa (hash: OSpIkZE/LwbO5i/Rwo6y7sjYoRsMMhhcextuc6NzOpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 19:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:93:19:f8:c7:3f:18:cb:f9:56:18:e0:d8:88:19:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
        Validity
            Not Before: Apr 20 19:00:48 2025 GMT
            Not After : Apr 21 19:00:48 2025 GMT
        Subject: CN=83c014425319d3d7cc45ef48de659a66ee40aea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:84:8a:7f:19:37:75:6d:16:59:ec:8f:da:63:
                    66:d2:21:9d:f8:fb:9c:dd:3c:3f:63:89:cd:c3:8a:
                    d9:0e:ac:9a:84:4f:c6:3e:0c:99:9f:28:76:9e:37:
                    e5:64:62:0f:02:26:81:43:0b:40:0f:77:1e:89:ff:
                    55:eb:0d:81:40:d3:44:f8:33:16:e3:cc:c4:a3:f8:
                    ca:1c:8f:49:5f:dd:b5:a7:33:5a:20:0b:3f:21:64:
                    9c:04:44:5d:8e:aa:1e:a7:81:e6:28:08:ca:ab:26:
                    c0:43:a7:37:cd:03:05:a0:b7:60:ac:bb:60:f4:36:
                    da:48:87:d4:7d:4f:22:6f:af:ed:b0:34:4d:5e:1e:
                    96:0c:22:e7:fa:d0:1c:bd:93:7e:8a:9a:aa:34:bc:
                    ce:66:13:0b:ef:d4:ba:56:99:39:28:7b:a1:4c:e8:
                    85:e0:1f:15:8c:4f:33:16:1b:fb:2b:27:19:a7:67:
                    f2:81:69:75:10:c6:59:14:9d:ec:36:01:26:91:67:
                    41:55:bb:cf:1d:10:64:57:be:78:12:52:d7:86:37:
                    3b:2f:90:05:4d:53:a0:ea:14:77:b1:5e:d1:26:0b:
                    de:f6:a9:f2:5d:70:79:93:aa:00:7f:fa:53:49:cd:
                    eb:69:9c:33:84:76:ce:cd:b4:b9:a8:ee:68:63:df:
                    68:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C0:14:42:53:19:D3:D7:CC:45:EF:48:DE:65:9A:66:EE:40:AE:A3
            X509v3 Authority Key Identifier:
                keyid:D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b9:b2:36:c3:37:ab:01:1d:f6:91:ad:5b:c6:be:19:5b:2c:
         b6:2b:59:e6:77:59:79:58:cc:36:f6:4e:37:dc:16:a0:99:cd:
         0d:e6:b2:31:06:ea:ea:e4:5e:10:0c:7a:c1:8f:aa:1d:9e:3a:
         7b:26:a6:6e:7b:bf:48:8a:65:76:19:f8:4a:bf:3c:fc:24:58:
         dd:f5:b6:ec:1e:e3:56:e4:99:15:d6:61:12:83:09:91:82:8a:
         53:7a:04:d2:cd:ef:89:9d:4e:05:34:c0:73:be:88:23:e8:6c:
         f9:3c:0f:f1:d1:30:81:6b:c4:f1:9b:12:c5:ba:d3:75:86:8a:
         ff:dc:0d:af:bc:78:dc:a1:ae:b4:45:56:e3:da:56:62:f2:76:
         84:a6:e4:67:0d:85:27:9f:f8:77:47:f8:f5:38:41:83:05:15:
         22:01:df:33:cb:9a:e1:d6:f2:3a:c6:db:6b:2a:fc:fa:06:9a:
         d0:5a:16:13:da:1e:59:55:79:b1:f1:ed:a3:0e:62:10:35:2d:
         2e:70:9e:af:c8:d0:c6:03:32:ad:4e:ab:00:0d:db:d8:17:8d:
         ca:cf:30:9c:11:48:ce:56:9d:51:36:1c:99:7f:34:ac:ae:11:
         7c:31:70:17:64:9e:90:76:cf:e3:ac:9b:cc:35:cf:ac:f3:ab:
         03:88:73:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:17 2025 by rpki-client