Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
File:                     qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft (raw, json)
Hash identifier:          V0Vi55IdI/ibUOt8wL+F9+VrGaeoXNF7d/L+TlMvIgA=
Subject key identifier:   96:FE:05:1E:54:1A:F8:15:3F:C4:4E:CF:94:40:C3:AF:D6:29:B5:D1
Authority key identifier: AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25
Certificate issuer:       /CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725
Certificate serial:       019657CB5F020D792F159586A3CB0DEBB59C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
Manifest number:          146F
Signing time:             Mon 21 Apr 2025 10:01:07 +0000
Manifest this update:     Mon 21 Apr 2025 10:01:07 +0000
Manifest next update:     Tue 22 Apr 2025 10:01:07 +0000
Files and hashes:         1: qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl (hash: T9LmNno3yUwWDQujJcJjYcPmxNoLddQZH29M7daABAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:57:cb:5f:02:0d:79:2f:15:95:86:a3:cb:0d:eb:b5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725
        Validity
            Not Before: Apr 21 10:01:07 2025 GMT
            Not After : Apr 22 10:01:07 2025 GMT
        Subject: CN=96fe051e541af8153fc44ecf9440c3afd629b5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:83:35:80:3d:ee:e2:3a:ec:c6:7a:c1:e1:9e:
                    e8:97:b4:5a:a1:51:b2:73:26:1b:ce:e9:48:47:9a:
                    6a:02:80:22:09:d5:f9:b2:53:ff:ff:0e:51:67:53:
                    9a:87:8a:32:9c:7e:c1:d2:b9:d6:3b:67:9b:0f:dd:
                    d8:cc:68:eb:09:b7:be:9e:7f:94:23:59:f5:f9:2b:
                    9e:db:2a:29:c5:da:de:72:4d:87:db:b6:18:64:25:
                    ce:08:c8:b6:30:74:8b:97:54:78:fb:95:89:f1:c8:
                    2e:e2:a3:d0:1d:78:a2:42:f2:3e:3a:4c:58:1d:c0:
                    aa:35:29:68:4e:51:50:b0:23:1c:9f:ef:a5:e8:62:
                    6e:8a:d8:21:f0:10:01:bd:84:62:ff:02:16:df:d1:
                    30:51:82:9e:f2:93:30:0e:b6:b6:87:5e:78:a9:d0:
                    60:39:f9:7b:40:a1:5c:60:7b:96:74:14:15:47:6e:
                    0f:76:72:06:f9:38:46:fe:00:cc:30:15:8e:ff:0a:
                    09:e5:32:0f:32:4b:d4:27:d7:37:1e:77:a2:b9:b2:
                    e5:7a:d6:b4:56:81:f2:2c:a7:31:0f:30:6d:45:17:
                    f9:fd:d8:ba:dc:03:1c:bd:f5:ab:8d:52:62:da:8b:
                    bb:07:72:08:35:43:ce:ed:d7:b1:48:71:1f:b2:14:
                    17:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FE:05:1E:54:1A:F8:15:3F:C4:4E:CF:94:40:C3:AF:D6:29:B5:D1
            X509v3 Authority Key Identifier:
                keyid:AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:2d:10:4e:2a:cc:2e:38:2d:7f:bb:22:70:89:a7:fd:aa:c1:
         81:8f:ce:34:d5:3d:f8:8c:a8:c1:1f:df:ab:65:21:ab:1c:fd:
         ff:e5:0c:66:3a:cf:5b:48:55:c8:fd:75:23:87:a7:83:41:09:
         8e:b8:23:f0:b4:c6:fd:35:4c:a1:72:61:07:5a:5c:19:bf:bc:
         04:ab:56:e8:bf:d7:b1:a9:cf:cd:d0:4b:08:0c:36:5e:6a:fe:
         23:1b:8f:7c:6f:71:55:a2:f1:c6:34:89:ac:88:06:a3:0d:c9:
         51:76:f9:ff:26:79:cc:47:ea:69:f9:fc:dd:a1:45:79:cd:27:
         c7:ea:f5:e3:c1:64:c4:bc:58:c3:9a:c0:7c:55:91:b6:60:0f:
         ec:be:08:25:50:ef:60:07:89:78:50:bb:2f:20:63:23:36:8b:
         6f:5e:6f:26:e3:dd:f4:34:b8:d6:a2:46:17:e9:e7:74:f4:a7:
         ed:1e:6c:ce:81:1e:16:03:14:25:f4:a2:f3:55:c0:94:85:0f:
         a1:f7:d5:b7:04:03:d7:de:dd:22:69:32:91:2d:fc:d5:39:90:
         4c:20:6c:73:d1:d8:cb:36:67:73:ba:8a:78:42:47:52:86:af:
         99:44:ab:bf:7f:a2:90:e1:42:eb:12:61:91:73:59:86:a5:01:
         cd:a1:e7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 14:59:46 2025 by rpki-client