Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft
File:                     Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft (raw, json)
Hash identifier:          YP40XaEKMX/Eihpr0FNXingId7pgf0ed1P/gmlMNYbI=
Subject key identifier:   64:88:FD:1F:3A:6F:D8:0F:45:DF:EC:74:A1:64:92:24:88:D6:36:00
Authority key identifier: 4A:FC:7F:0B:EA:C2:26:07:02:D0:5B:69:DD:7B:7A:3F:B2:DD:D6:9E
Certificate issuer:       /CN=4afc7f0beac2260702d05b69dd7b7a3fb2ddd69e
Certificate serial:       01964EFEA9D454C378D08DC6D4DBA54E81A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft
Manifest number:          0BBD
Signing time:             Sat 19 Apr 2025 17:00:34 +0000
Manifest this update:     Sat 19 Apr 2025 17:00:34 +0000
Manifest next update:     Sun 20 Apr 2025 17:00:34 +0000
Files and hashes:         1: NZZp83GD9DMoLhn3D9M5XusFTxI.roa (hash: OiMifk7R6FismqZrdc/pOMDrQLzXG34BDoHmuCJQZZM=)
                          2: Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.crl (hash: SPgkClUstCTEE9spnrqDrryH3PdMCmk7M0Kzjl1/jhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:fe:a9:d4:54:c3:78:d0:8d:c6:d4:db:a5:4e:81:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4afc7f0beac2260702d05b69dd7b7a3fb2ddd69e
        Validity
            Not Before: Apr 19 17:00:34 2025 GMT
            Not After : Apr 20 17:00:34 2025 GMT
        Subject: CN=6488fd1f3a6fd80f45dfec74a164922488d63600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:df:2e:5e:0f:5e:e0:6a:cd:ae:11:c7:0e:4f:
                    23:96:03:ca:20:2d:54:04:ff:d8:2a:b2:fc:98:84:
                    59:6b:5a:fd:b8:c3:24:34:dd:c0:43:9a:bc:dc:85:
                    ff:9f:54:48:e0:74:64:9d:e1:65:a6:42:b0:12:da:
                    a4:59:b8:e9:17:16:c5:76:a0:5b:38:42:10:15:97:
                    ce:c0:d4:d8:54:c1:98:03:42:4f:38:03:7c:21:70:
                    1c:08:68:8b:08:62:24:e0:fb:21:4a:92:10:68:60:
                    bc:38:4f:3c:2e:c1:9a:fa:53:27:13:3c:17:db:f5:
                    59:46:77:e9:ff:62:04:a4:8d:9c:01:30:36:ce:93:
                    7f:33:f8:4b:4e:17:89:c1:f6:0e:7b:82:a0:1b:57:
                    42:13:42:27:da:26:55:50:7f:f1:b3:35:fa:a4:4c:
                    43:5f:c9:1f:65:77:f1:41:a8:48:38:a8:2d:61:68:
                    78:1d:9d:8a:66:07:d2:3f:24:55:13:13:76:92:5a:
                    a6:99:c0:d7:0c:e5:a6:5c:65:0b:d4:e7:01:0f:cd:
                    7b:1e:87:7b:a9:6d:81:0f:4e:e8:47:9c:82:56:1c:
                    e2:be:9a:79:1b:57:f1:97:21:cc:39:f8:c0:3e:a9:
                    ae:0c:27:b7:0b:92:58:5b:5c:90:9f:8a:ec:af:df:
                    34:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:88:FD:1F:3A:6F:D8:0F:45:DF:EC:74:A1:64:92:24:88:D6:36:00
            X509v3 Authority Key Identifier:
                keyid:4A:FC:7F:0B:EA:C2:26:07:02:D0:5B:69:DD:7B:7A:3F:B2:DD:D6:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ad:a5:d3:ee:90:93:00:ec:5e:5d:57:de:51:14:fe:75:f4:
         f5:a3:25:ff:0b:47:f0:04:9c:3e:cd:6a:75:de:cd:99:99:63:
         f7:ea:d7:90:0f:df:e0:20:1f:8e:7b:10:76:57:cd:79:3c:e1:
         54:ec:a8:82:12:66:ea:b8:2b:eb:1c:2e:4a:c1:14:f0:6f:15:
         62:38:44:7c:39:a5:6c:e1:4f:f4:56:33:82:cb:af:18:ee:a6:
         cf:e1:69:70:a9:bb:22:f8:57:3b:fb:91:f1:47:c1:dd:4e:55:
         6e:88:f7:95:51:0c:69:5c:c7:63:09:d4:ac:80:0f:cf:69:74:
         2f:e4:6e:14:18:32:55:a2:50:0c:7a:b1:60:1f:9e:a0:8c:ee:
         0a:f1:8b:69:d7:8e:48:84:ea:de:c4:97:3b:22:9c:d4:59:2d:
         9f:2f:4b:8d:8b:06:26:04:d3:9d:48:7b:03:c3:fd:9d:22:5c:
         75:9c:f6:be:c9:37:e8:71:47:a9:f5:a5:37:26:dc:37:06:93:
         2c:e5:e6:65:f2:b7:16:2f:db:19:cd:71:9a:28:b2:c7:f2:b0:
         8e:43:ac:47:e5:e8:0f:ea:89:41:e3:2b:23:89:a2:cd:a3:84:
         df:b3:a6:37:e1:d5:57:0f:f5:64:07:b3:80:9e:1e:f4:14:26:
         43:20:68:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:59:46 2025 by rpki-client