Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
File:                     pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft (raw, json)
Hash identifier:          o350DG+jXIXXXrjuPvsfKz/oyhH0zAjOSnuXgupGWuU=
Subject key identifier:   B3:33:E1:0D:95:60:2D:AF:A9:03:00:AD:A7:F5:9C:31:34:23:C5:DA
Authority key identifier: A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C
Certificate issuer:       /CN=a55004661a09e2675fc1599d4e40027d778c404c
Certificate serial:       01965613245E96489C57C40B3D0D3CCB4602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
Manifest number:          062F
Signing time:             Mon 21 Apr 2025 02:00:17 +0000
Manifest this update:     Mon 21 Apr 2025 02:00:17 +0000
Manifest next update:     Tue 22 Apr 2025 02:00:17 +0000
Files and hashes:         1: e4pYTgrST_OIh_0Qkxb1VUF6r3Y.roa (hash: CwIOS1Io6ZhDFcyydlZIo2WNdIO73K5UrPWTpvd7EH0=)
                          2: pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl (hash: /wkzUsM5RYAdGSzjL+10xaOCjSaZMPPcikuecamcRUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:56:13:24:5e:96:48:9c:57:c4:0b:3d:0d:3c:cb:46:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a55004661a09e2675fc1599d4e40027d778c404c
        Validity
            Not Before: Apr 21 02:00:17 2025 GMT
            Not After : Apr 22 02:00:17 2025 GMT
        Subject: CN=b333e10d95602dafa90300ada7f59c313423c5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c7:6e:d6:ab:f7:54:fc:5b:91:58:a9:8b:3a:
                    2c:a3:a6:04:76:44:50:e8:57:05:83:76:06:43:3c:
                    67:a6:31:45:95:2c:5c:98:9f:e7:1f:35:54:7a:51:
                    bf:64:fd:17:d9:1d:56:9b:46:17:f5:81:90:e2:f8:
                    75:f3:71:fb:ce:1a:23:c4:c0:59:3c:69:12:1c:20:
                    c8:83:57:87:56:fe:d8:49:d2:2a:07:e5:a5:d6:04:
                    11:3a:1c:7b:35:64:fb:d0:0c:30:c4:36:99:b0:b2:
                    a6:51:53:85:e9:58:a5:4c:19:d4:ff:cb:93:73:f4:
                    17:9c:78:1e:ab:db:a5:ac:02:60:32:b0:d3:d3:20:
                    cd:81:e2:29:81:2d:7e:14:1d:a7:49:72:86:97:3b:
                    ab:d7:5c:5a:fc:2c:0f:db:b4:92:dc:6e:e0:2d:a9:
                    f1:03:44:fa:be:b2:32:22:12:39:58:5a:c4:96:19:
                    57:4f:d7:11:57:72:47:85:75:fc:44:67:49:41:10:
                    5f:40:ac:33:57:39:42:15:72:8f:d1:30:1d:7d:d2:
                    d1:a3:e1:9b:6d:05:58:91:6f:ee:2e:3b:37:47:81:
                    b6:b3:9d:2f:3c:c1:21:85:33:65:13:a1:ac:9a:36:
                    bd:43:55:34:14:bd:a3:e9:b1:d5:19:dd:ef:b7:9b:
                    7f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:33:E1:0D:95:60:2D:AF:A9:03:00:AD:A7:F5:9C:31:34:23:C5:DA
            X509v3 Authority Key Identifier:
                keyid:A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c6:a7:26:35:11:91:63:67:fb:ce:0e:13:c6:6f:31:b4:03:
         1e:1e:c5:fb:cc:9a:98:7b:88:58:cd:e9:02:e6:ce:ba:95:86:
         f6:e1:0d:fa:ea:5f:cd:67:4d:74:92:13:57:dd:af:f4:93:bf:
         85:6c:05:1a:a8:67:e1:24:c9:dd:66:35:e5:96:ea:13:78:dd:
         1e:05:f2:d6:cd:a0:17:9c:61:2a:8c:3b:8f:c5:b0:74:88:9f:
         57:ff:ec:04:8e:7a:63:68:5e:83:ea:b2:c1:c7:fc:39:ed:27:
         68:ac:94:c6:24:ab:ab:e7:c8:b7:a1:5b:b1:6b:d4:ae:44:57:
         aa:0d:9a:51:e4:df:2b:3c:8f:6c:ec:0f:b4:d3:a8:75:fc:17:
         ac:fe:f4:47:34:cb:94:4f:4d:2e:3f:1e:60:7e:d5:e6:13:f7:
         df:99:0d:1a:6c:e3:65:d1:16:a6:d3:4f:10:b2:f7:98:05:9a:
         44:8a:ab:38:60:35:8b:1d:93:df:f5:d6:df:51:4d:95:90:f1:
         b5:ff:73:23:1b:59:bb:4b:b6:ea:8e:37:7f:ad:6c:c1:c7:0e:
         9e:f4:32:24:38:b0:1d:b6:09:73:87:51:2f:bc:33:f0:86:27:
         ac:7a:13:98:b7:b8:f1:88:55:39:5d:34:93:fb:aa:e6:12:7e:
         ca:89:f9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:36:00 2025 by rpki-client