Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
File:                     uIog4vueEVBGObZ8_sCv6z8wZpA.mft (raw, json)
Hash identifier:          46qqhKoUEXWoHZM/2N0D09XqtCl+GAWgMQmtc/LkIrk=
Subject key identifier:   BE:DF:B5:D5:29:29:98:7A:2B:49:59:15:5F:05:D7:24:65:E0:3F:A8
Authority key identifier: B8:8A:20:E2:FB:9E:11:50:46:39:B6:7C:FE:C0:AF:EB:3F:30:66:90
Certificate issuer:       /CN=b88a20e2fb9e11504639b67cfec0afeb3f306690
Certificate serial:       01965349C987032416C39122FF570BDD849F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
Manifest number:          14FA
Signing time:             Sun 20 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 20 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 21 Apr 2025 13:01:06 +0000
Files and hashes:         1: uIog4vueEVBGObZ8_sCv6z8wZpA.crl (hash: 6kD8lIXqQ5rKGFelHnxX0WEnEoKPSE6ZS2+Ftn7crDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 13:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:49:c9:87:03:24:16:c3:91:22:ff:57:0b:dd:84:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b88a20e2fb9e11504639b67cfec0afeb3f306690
        Validity
            Not Before: Apr 20 13:01:06 2025 GMT
            Not After : Apr 21 13:01:06 2025 GMT
        Subject: CN=bedfb5d52929987a2b4959155f05d72465e03fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f6:02:21:31:36:15:0c:0b:3e:d4:19:c4:8f:
                    a2:4a:06:77:4d:ca:23:79:70:26:bf:9a:db:f1:94:
                    58:2e:bb:81:d0:78:2f:ac:77:e9:a9:f7:48:d2:35:
                    d7:b8:31:f6:a2:a1:45:31:af:0b:e4:3d:5d:70:65:
                    fd:80:9d:07:2b:fe:df:8e:26:34:07:f3:7b:37:63:
                    69:a7:be:89:9f:0f:de:67:0b:97:2b:13:86:84:a8:
                    c3:3d:81:25:85:92:c0:04:21:70:e2:39:57:d7:3f:
                    e1:e9:76:cb:07:da:4a:b6:e5:2a:b2:65:78:a7:8e:
                    07:1e:b0:5d:16:8e:fb:06:01:9e:23:1d:b6:0a:a8:
                    8b:ac:79:f3:98:80:5b:f0:bd:cf:4a:29:99:ed:14:
                    db:ce:a6:d5:df:13:71:ff:6d:a1:37:6f:1a:2e:71:
                    c0:39:19:fd:f7:c2:43:74:d2:5f:c8:2b:1e:3f:46:
                    bb:64:ff:14:3a:f9:30:80:fc:6f:8a:13:6a:6b:e0:
                    dd:13:9a:f8:5a:31:e3:71:65:7b:99:ad:be:5d:74:
                    06:4e:89:f5:af:df:ba:ea:73:35:6d:24:b5:34:ba:
                    32:7c:c7:72:37:e8:d0:47:98:39:fc:4c:c9:6d:44:
                    1e:fa:17:a1:8c:b6:b6:0b:84:53:3f:ed:20:4e:73:
                    ad:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DF:B5:D5:29:29:98:7A:2B:49:59:15:5F:05:D7:24:65:E0:3F:A8
            X509v3 Authority Key Identifier:
                keyid:B8:8A:20:E2:FB:9E:11:50:46:39:B6:7C:FE:C0:AF:EB:3F:30:66:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:13:ca:af:09:82:df:dc:e5:a5:56:9a:9d:c5:d2:33:dc:73:
         8c:c7:6b:3b:9d:e0:cf:8e:f7:1b:89:03:96:4f:e3:c3:d4:6d:
         2f:2b:f8:66:11:74:b2:d4:0f:0f:10:e3:dc:6e:86:67:a6:b5:
         de:b7:eb:4f:52:77:68:45:09:57:16:21:ed:24:39:05:08:dd:
         da:11:c3:a5:1e:67:8a:7e:05:90:8b:df:f7:01:6c:e4:0a:bc:
         74:0f:2f:3d:67:d2:d8:a5:a0:22:4e:48:1b:2e:10:c9:59:ac:
         60:a9:e4:61:db:ab:b1:9c:52:d9:a0:36:26:92:84:d5:62:b7:
         93:2b:48:fa:96:c3:7c:43:39:18:74:6d:fa:00:57:e9:b9:70:
         ec:0d:23:5b:d9:45:ce:8a:6f:99:29:e1:03:a8:05:c1:af:66:
         4e:40:58:cb:f5:8e:5b:a3:9d:c4:c2:cf:51:e2:bb:2a:5e:d3:
         db:e3:d0:37:e6:b6:9a:f7:ed:50:fd:9b:0d:5f:0d:a2:7b:c2:
         e1:68:75:46:7d:4d:d0:98:82:ea:cb:32:e0:09:f1:03:b4:01:
         22:08:b3:76:27:e8:21:25:1a:34:f1:9f:ae:3c:e4:55:d5:4a:
         2f:9f:cb:8d:bc:88:2f:de:74:2b:a3:bb:8d:d0:16:c0:26:20:
         10:75:66:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:11:25 2025 by rpki-client