Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
File:                     7D09fly_GK9mt_W0peCsGezTmHY.mft (raw, json)
Hash identifier:          ll3QyD6o9jdCSfuu1Nhsy3eCCfPjlayRFEzeBuiAi54=
Subject key identifier:   64:71:20:D1:D1:FC:E3:BD:DA:8A:AB:C7:0E:1A:FC:6B:29:DA:B9:C1
Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
Certificate issuer:       /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Certificate serial:       01964A0EF981B6032D57BAD09976E3035D23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
Manifest number:          14F6
Signing time:             Fri 18 Apr 2025 18:00:17 +0000
Manifest this update:     Fri 18 Apr 2025 18:00:17 +0000
Manifest next update:     Sat 19 Apr 2025 18:00:17 +0000
Files and hashes:         1: 7D09fly_GK9mt_W0peCsGezTmHY.crl (hash: BohuY0XbcnJ548VmiwAvyRQ7QbwfrCx6Ob7Y3njAZg4=)
                          2: DJI5pA0yQdHfWf9YZsCq7SLW83k.roa (hash: aYlNDPO2QXpilHLu8WGoR0IYFB4fHF6uZQ2LQMfMdjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:0e:f9:81:b6:03:2d:57:ba:d0:99:76:e3:03:5d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
        Validity
            Not Before: Apr 18 18:00:17 2025 GMT
            Not After : Apr 19 18:00:17 2025 GMT
        Subject: CN=647120d1d1fce3bdda8aabc70e1afc6b29dab9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:ec:b5:e9:34:5e:10:64:d2:9d:3c:cb:2b:
                    04:2c:69:76:6a:4f:00:70:db:ef:3a:10:5e:6d:b6:
                    41:6a:30:19:13:d4:b3:81:7c:97:31:0b:c4:5e:b6:
                    db:3f:b2:15:57:2b:16:4c:14:61:7a:02:08:d6:cc:
                    e6:ce:0d:f4:e0:07:8b:b0:b5:90:ce:61:50:ae:c8:
                    28:76:66:5a:98:ab:0e:d2:de:42:86:8a:68:16:0f:
                    32:32:9e:5b:52:af:09:14:ec:31:4f:67:d7:42:b2:
                    7a:2f:f3:17:80:69:e7:8d:27:b8:4b:d2:ef:59:7e:
                    1c:1e:68:98:14:e2:8f:81:61:8a:68:d5:11:99:23:
                    d7:99:6a:27:cb:64:84:53:fd:5b:99:a9:b2:5c:c5:
                    40:cf:b0:f3:c6:b1:f2:6c:81:68:e1:3f:ae:4d:42:
                    85:b4:34:f2:9b:a8:8c:32:ce:74:1e:13:41:76:eb:
                    36:d0:26:0b:d6:2a:62:9f:0f:ff:73:ba:69:dc:fb:
                    b0:61:21:0e:4c:eb:66:6b:03:77:97:6d:d2:df:77:
                    af:e8:76:d8:a5:29:ee:a2:63:5c:f2:53:b2:49:3b:
                    07:ae:1c:75:12:ab:1c:dc:7e:0e:30:65:cd:b5:2a:
                    5b:88:85:b0:cb:1e:95:da:e3:77:c5:90:33:97:ab:
                    78:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:71:20:D1:D1:FC:E3:BD:DA:8A:AB:C7:0E:1A:FC:6B:29:DA:B9:C1
            X509v3 Authority Key Identifier:
                keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e1:89:62:da:14:40:8e:dc:53:a9:7f:4f:da:30:38:fe:bf:
         da:ce:ec:08:81:3b:b5:80:21:ee:5e:43:25:5f:ed:8a:a5:30:
         ef:8d:c7:13:21:33:b4:a5:5f:94:e9:32:84:f4:90:e4:73:6f:
         59:87:8a:c3:a9:5c:15:ad:d1:9a:57:41:0c:54:70:11:26:99:
         29:94:08:d9:1d:21:ba:24:72:76:4a:db:41:96:aa:a9:c4:ef:
         99:15:1a:8f:bf:25:70:79:8b:93:09:fc:6b:a9:85:eb:9d:f1:
         63:31:58:46:95:ac:3f:67:66:53:bd:9e:ac:89:55:6b:52:f0:
         86:da:6f:53:7d:0a:05:68:ee:9e:4e:47:b3:a7:6b:f5:0f:36:
         cd:e2:e6:05:27:f9:99:ff:a0:ba:e7:3c:cf:fa:6f:88:82:6e:
         87:9d:e8:8d:bb:67:ad:21:bd:87:6f:98:5a:86:60:f3:e7:8f:
         a2:5e:e9:f8:f8:41:89:2f:c0:dc:8a:4d:94:d6:da:6a:11:5d:
         0e:94:a6:25:c2:d0:2f:0d:a0:0b:fd:9f:4e:2e:c0:c4:91:69:
         57:3b:81:70:e6:fe:eb:7b:93:e9:df:22:8d:0a:4d:7d:f9:6e:
         61:11:01:5f:c0:d4:03:78:c1:79:1d:92:55:72:44:ce:36:41:
         81:3b:e3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:36:04 2025 by rpki-client