Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
File:                     Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft (raw, json)
Hash identifier:          M+PjFPQv8QQGXDthpMZUw+ictVjAkQMZToXrAaF7fck=
Subject key identifier:   E5:E2:0B:0A:A2:A2:88:AB:47:70:EC:68:99:19:D6:7B:C7:8D:A0:44
Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
Certificate issuer:       /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Certificate serial:       019649D8384C27246D091CD702168EBCFBAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
Manifest number:          0461
Signing time:             Fri 18 Apr 2025 17:00:28 +0000
Manifest this update:     Fri 18 Apr 2025 17:00:28 +0000
Manifest next update:     Sat 19 Apr 2025 17:00:28 +0000
Files and hashes:         1: C34tazcwNVlNSOFrV60y2M-X8qQ.roa (hash: b9R8fiAJDWhh3NSy/h3YHxxWL9I8BBsmTu4q52FZ+Mo=)
                          2: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl (hash: nUIm4ej75evk9zRda3UGS60Y3u/4tY3oSg/NF8O6exQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 17:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:d8:38:4c:27:24:6d:09:1c:d7:02:16:8e:bc:fb:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
        Validity
            Not Before: Apr 18 17:00:28 2025 GMT
            Not After : Apr 19 17:00:28 2025 GMT
        Subject: CN=e5e20b0aa2a288ab4770ec689919d67bc78da044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:ff:bf:4d:84:66:c9:7b:e5:b6:15:8a:de:
                    f5:74:0f:11:1a:cd:0f:aa:5b:4b:18:ff:57:6e:47:
                    5f:0b:2d:cb:58:f2:a8:ed:87:31:5d:f8:8d:0b:95:
                    77:20:2b:4a:80:bd:21:36:ad:50:70:63:4c:4d:f7:
                    f3:c2:fd:26:08:d9:a1:6f:2e:ab:a8:be:5b:59:f8:
                    81:fc:ae:74:03:82:56:2c:9b:db:3a:e0:af:f7:5e:
                    90:18:34:3d:05:37:6e:53:0e:d7:e7:0c:ba:70:aa:
                    f9:a3:be:56:9f:1b:9d:d5:57:d3:95:7f:81:d5:45:
                    2c:bb:37:ec:9a:b3:e5:82:36:99:18:17:d4:89:c5:
                    ee:51:0c:16:15:d9:fd:04:24:24:11:34:90:dd:93:
                    dd:6f:a6:a8:16:f7:c0:c0:78:75:1f:76:f8:cc:91:
                    d5:72:cb:a1:0b:79:42:35:3b:19:c6:c9:22:de:80:
                    05:78:5b:bb:02:d4:31:4b:3e:11:ef:75:6f:53:18:
                    9b:8f:41:8b:bf:d1:9c:7e:99:4d:82:24:9b:2d:22:
                    1f:d0:0e:f7:d6:a8:0a:ef:f7:32:4b:e4:b3:41:c1:
                    e4:8a:b6:5c:8d:59:5d:23:08:5e:4a:7f:e1:50:e3:
                    b2:82:e0:e5:0c:bd:66:a8:b6:b3:23:4e:9c:e7:36:
                    09:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E2:0B:0A:A2:A2:88:AB:47:70:EC:68:99:19:D6:7B:C7:8D:A0:44
            X509v3 Authority Key Identifier:
                keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:4d:df:6e:a5:66:f7:54:68:28:ba:d5:16:dc:3b:86:82:bf:
         10:d0:86:e2:2a:57:1a:e4:04:72:ac:57:e0:aa:c5:dc:bf:b2:
         3a:46:f7:bd:68:9c:c3:65:35:32:a8:27:44:b6:92:bf:b7:08:
         48:31:a8:b7:81:eb:b4:24:0a:68:91:a8:a1:31:93:a9:07:b8:
         6b:f2:cb:68:49:11:7a:1f:4b:e4:bd:44:a0:a9:13:d0:b4:ab:
         bc:21:48:ac:ec:42:62:08:ab:39:3d:60:3b:cd:d8:2d:6a:10:
         35:28:c1:ab:33:91:79:a5:1b:01:57:af:15:92:44:91:f7:8c:
         12:d3:e1:01:ab:49:a3:97:de:16:38:c8:21:ee:9a:c2:c0:8c:
         89:ce:a8:04:b1:66:02:7c:74:6b:dc:ee:d0:ad:9d:19:20:cc:
         c7:ef:70:45:fd:d5:24:94:54:72:0f:91:fa:6a:8e:11:9e:17:
         31:0a:54:87:0d:bb:c8:24:92:9a:30:7f:71:c2:39:e7:22:92:
         1f:d3:81:c0:5c:fc:7a:40:19:70:ae:57:76:87:7d:f2:01:ab:
         c2:ea:91:17:ed:8c:9a:47:f2:c2:f0:b5:72:e5:42:eb:c2:96:
         57:a4:c4:a2:d5:58:93:f1:98:ba:0c:e8:4a:22:7c:69:b2:1c:
         83:f1:29:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:36:02 2025 by rpki-client