Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
File:                     _EMwm9pG6O0l7AweipMAbyJpHjw.mft (raw, json)
Hash identifier:          lnrvgrliKTcGwNP+miGSsCa2snN9W16stfKW/3iqnVo=
Subject key identifier:   F4:95:78:31:72:F9:22:82:72:B4:94:CC:E0:07:9A:B2:7A:7C:93:D3
Authority key identifier: FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C
Certificate issuer:       /CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
Certificate serial:       0196545C36B2F1C0DA21A9C26946B9688CA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
Manifest number:          09E2
Signing time:             Sun 20 Apr 2025 18:00:51 +0000
Manifest this update:     Sun 20 Apr 2025 18:00:51 +0000
Manifest next update:     Mon 21 Apr 2025 18:00:51 +0000
Files and hashes:         1: P4VoQSF7lCnsq5vr3E2b_J-Itmg.roa (hash: 75J3FI/MjvsUpmT1+e7f6kq+Idon95nr5b/vGurSSfM=)
                          2: _EMwm9pG6O0l7AweipMAbyJpHjw.crl (hash: /uVY7yTKnLzfzg1u5AyIbkYLmrO3Li0x/JJvTKNS20Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 18:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:5c:36:b2:f1:c0:da:21:a9:c2:69:46:b9:68:8c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
        Validity
            Not Before: Apr 20 18:00:51 2025 GMT
            Not After : Apr 21 18:00:51 2025 GMT
        Subject: CN=f495783172f9228272b494cce0079ab27a7c93d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:58:f0:55:28:f3:1f:95:52:fd:62:b6:29:b9:
                    70:8b:81:24:36:7d:02:5e:c8:0a:de:4c:9e:11:e2:
                    7e:fc:28:db:be:af:01:9a:1b:e0:73:6d:34:0f:4d:
                    68:35:ea:0f:52:ff:c4:b5:48:28:88:66:91:a3:93:
                    8b:ee:31:53:e1:82:dc:f2:e8:63:d3:90:fc:14:31:
                    25:b7:0e:f5:98:b5:8d:55:ee:57:53:ed:26:f6:7f:
                    22:ec:08:02:54:0f:d0:b0:2b:af:f5:13:ba:2f:d4:
                    1f:ec:15:00:84:ab:f4:40:c9:16:da:22:d7:2f:3e:
                    89:4d:27:5a:7c:8d:b8:7e:92:55:65:82:0e:90:eb:
                    5d:98:03:a7:9d:2f:24:94:e5:8b:64:2c:8c:06:7a:
                    d8:02:30:b5:32:83:e9:ec:cc:54:89:99:58:0d:14:
                    ac:92:54:98:f9:1f:a3:19:02:d4:9d:31:98:ff:18:
                    49:41:3b:e4:24:f4:83:e4:8e:c5:bc:27:25:76:4d:
                    1f:22:b4:e4:0e:3a:42:30:73:ca:69:4c:17:a8:8e:
                    5f:83:76:5d:bd:2f:85:32:58:c8:9f:96:5a:cc:97:
                    3b:b8:2f:5b:2d:8a:28:a9:fa:52:af:34:95:4b:83:
                    38:cb:ca:39:40:33:e8:c2:5e:9a:ce:dc:30:fa:bc:
                    57:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:95:78:31:72:F9:22:82:72:B4:94:CC:E0:07:9A:B2:7A:7C:93:D3
            X509v3 Authority Key Identifier:
                keyid:FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d4:bd:3f:7b:73:51:df:f9:24:a8:ef:36:36:52:63:65:38:
         32:d4:3a:3f:f1:16:c0:14:f1:92:36:f9:5d:ea:fe:45:e9:35:
         5c:8a:90:10:15:79:b6:01:92:65:bb:83:2b:2b:37:77:d1:9d:
         25:5e:d8:72:f1:d6:cc:bf:7b:90:0d:77:2b:b8:e0:80:2d:35:
         b6:58:6b:2c:a7:62:8f:2a:3b:65:d1:44:89:62:3a:e2:ee:c6:
         9a:b6:3f:ba:b0:51:ba:e6:43:2d:a1:31:1c:74:90:1d:57:83:
         d6:1b:8c:25:f6:3c:1b:a5:a2:a3:ad:f7:ee:c5:39:7f:b8:98:
         96:13:38:98:c8:fe:a9:25:14:a5:93:df:fa:77:1c:fd:c7:eb:
         1d:76:79:dd:13:49:77:6a:4e:50:36:3c:81:40:aa:ef:21:f0:
         5e:af:7e:04:c7:d5:1f:86:11:9e:56:60:46:6f:97:03:57:ed:
         f4:36:e6:79:78:d5:fb:8e:b6:9f:8d:23:61:79:07:6b:3c:79:
         b2:69:c0:e2:5a:e7:69:cd:23:3a:4c:4f:4a:6e:68:5b:30:7a:
         4b:ec:22:01:e5:69:56:08:17:bb:09:c3:93:e5:bc:ab:70:b6:
         ae:44:b0:fc:90:4c:bc:1d:7b:79:b5:15:10:93:af:3b:19:c6:
         ea:2c:12:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:40 2025 by rpki-client