Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
File:                     YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft (raw, json)
Hash identifier:          FJD9Yt+0vqaxRStiz3X2tpSS7oFsJJeFdm7ZamIRvag=
Subject key identifier:   67:C8:2A:49:83:41:00:02:96:83:53:BC:DD:90:E0:FB:38:58:B8:6D
Authority key identifier: 60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
Certificate issuer:       /CN=600b113e062d17ea230806b34a21deb5627b6774
Certificate serial:       01964D7F03B8AD710F37EE78B26310398D66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
Manifest number:          1177
Signing time:             Sat 19 Apr 2025 10:01:31 +0000
Manifest this update:     Sat 19 Apr 2025 10:01:31 +0000
Manifest next update:     Sun 20 Apr 2025 10:01:31 +0000
Files and hashes:         1: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl (hash: 7doxPaRWoxqoyjn/SQMRiOhRpXgCOSHVdFckQ5N6jqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7f:03:b8:ad:71:0f:37:ee:78:b2:63:10:39:8d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600b113e062d17ea230806b34a21deb5627b6774
        Validity
            Not Before: Apr 19 10:01:31 2025 GMT
            Not After : Apr 20 10:01:31 2025 GMT
        Subject: CN=67c82a4983410002968353bcdd90e0fb3858b86d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:07:fb:17:14:6e:cf:c3:05:2c:8b:99:31:5a:
                    31:f5:ed:f2:3a:dd:5a:60:f9:64:33:a2:e5:38:ea:
                    5d:35:9f:06:de:07:78:5d:49:db:02:dd:93:7b:dc:
                    02:eb:56:de:ef:56:70:60:cc:8a:a1:d3:04:3f:d3:
                    73:0f:9c:e2:a4:88:09:0a:ba:33:e3:45:7e:ab:d8:
                    fd:9c:e6:6a:f8:24:06:eb:35:03:8c:37:b7:81:30:
                    ea:a7:cc:58:7c:42:d5:09:e6:bd:21:a6:82:24:25:
                    00:70:92:a7:2a:6e:a5:cb:09:37:b3:79:96:9b:75:
                    30:c2:d4:67:3f:d9:09:69:27:33:5a:eb:24:3f:eb:
                    a8:fb:88:18:91:50:1f:5a:2f:51:0b:6a:b0:e2:f7:
                    ca:c0:4e:c7:90:84:84:ff:1a:9f:85:e8:3d:43:8a:
                    e0:61:40:38:5c:df:5b:1b:b1:92:06:aa:13:71:7a:
                    50:ca:54:93:d1:50:84:37:50:c0:fb:89:2a:4d:d0:
                    8a:5b:62:30:5e:48:05:73:45:3f:37:aa:09:83:4d:
                    4a:19:ae:1c:b1:cc:02:c7:d8:60:04:48:33:91:e4:
                    94:52:49:b3:59:31:f2:aa:f8:04:b0:85:0c:76:bb:
                    5e:cc:cb:9a:3f:04:f9:3e:0f:ba:19:74:07:39:0f:
                    8d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C8:2A:49:83:41:00:02:96:83:53:BC:DD:90:E0:FB:38:58:B8:6D
            X509v3 Authority Key Identifier:
                keyid:60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:58:3e:c1:1f:d8:91:88:77:cb:63:ea:50:a3:3f:8b:12:c8:
         b0:3d:7f:ad:bd:85:98:bf:d6:86:15:04:90:3a:28:39:e6:24:
         19:5d:03:c7:d0:25:cb:fa:30:6d:72:75:1e:04:42:2c:6b:ad:
         30:0e:86:41:1e:ff:56:5c:bb:d3:52:dc:90:94:52:9f:3e:54:
         60:90:32:19:a1:d7:c1:a3:5d:dd:84:8b:28:64:c5:2f:dc:79:
         14:f8:21:14:16:8d:5b:57:b4:79:a5:e2:1c:07:7c:bc:e1:1b:
         3c:30:b3:ff:fe:3b:62:5d:03:9e:f3:5d:88:ad:f0:6c:7a:21:
         d3:3c:b0:b3:2c:aa:74:33:d8:b0:39:90:6f:0d:9d:c0:e6:59:
         ce:de:76:72:5e:18:36:5e:fc:ea:1b:8c:91:4d:ee:21:4a:ec:
         d6:4b:50:0c:5f:11:bd:a1:e4:4b:b0:87:e7:b5:66:36:67:ed:
         a9:5a:1b:b7:14:0f:5c:bb:55:42:97:83:95:9e:ff:d7:03:aa:
         e1:97:09:58:13:d3:d1:68:23:38:82:63:1f:2f:0a:65:fc:bb:
         ac:0e:62:34:94:c5:57:b8:46:e1:d7:86:ff:93:b2:b0:ef:ee:
         8a:cb:9f:4b:b7:57:b0:48:ad:6f:14:db:0d:a4:39:57:c3:15:
         33:bc:bc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:05:02 2025 by rpki-client