Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/i6on-cLve_SAmtQq5YkQG3PpiSc.mft
File:                     i6on-cLve_SAmtQq5YkQG3PpiSc.mft (raw, json)
Hash identifier:          5+djDgHeDjFf0c7/EvmlL6lX0K8JOZ5sizFtZeXMIXk=
Subject key identifier:   63:D6:AB:8D:DA:33:30:DE:F8:2E:E3:1B:8E:CF:19:11:03:1B:85:72
Authority key identifier: 8B:AA:27:F9:C2:EF:7B:F4:80:9A:D4:2A:E5:89:10:1B:73:E9:89:27
Certificate issuer:       /CN=8baa27f9c2ef7bf4809ad42ae589101b73e98927
Certificate serial:       01964D103841D6DA616271124074791FE881
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6on-cLve_SAmtQq5YkQG3PpiSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/i6on-cLve_SAmtQq5YkQG3PpiSc.mft
Manifest number:          14FA
Signing time:             Sat 19 Apr 2025 08:00:30 +0000
Manifest this update:     Sat 19 Apr 2025 08:00:30 +0000
Manifest next update:     Sun 20 Apr 2025 08:00:30 +0000
Files and hashes:         1: OelWgxZyI7_ZRF_-XMf7bZooL5I.roa (hash: BifitWmmIOb4eZWcf2Qlsgv0SmjFwvoJThXaToiSZVg=)
                          2: i6on-cLve_SAmtQq5YkQG3PpiSc.crl (hash: WPCSgNiysQXkA0PgM2fFk4y4iF5ysnOjD8jUH7XJaGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/i6on-cLve_SAmtQq5YkQG3PpiSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/i6on-cLve_SAmtQq5YkQG3PpiSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i6on-cLve_SAmtQq5YkQG3PpiSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:10:38:41:d6:da:61:62:71:12:40:74:79:1f:e8:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8baa27f9c2ef7bf4809ad42ae589101b73e98927
        Validity
            Not Before: Apr 19 08:00:30 2025 GMT
            Not After : Apr 20 08:00:30 2025 GMT
        Subject: CN=63d6ab8dda3330def82ee31b8ecf1911031b8572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:54:4e:89:40:cb:1f:41:b1:cd:09:3c:f5:82:
                    9d:b2:eb:79:db:65:c7:e9:aa:8a:61:0a:5d:b0:6e:
                    d9:e6:63:1b:18:47:a1:68:9e:13:3d:d3:c7:1a:ba:
                    51:87:4d:4b:3f:06:79:5f:d6:f9:c0:bb:2c:b7:3a:
                    03:d8:7c:d4:b7:1c:79:d0:eb:10:a6:6e:ea:2a:bb:
                    77:9d:cc:e9:c3:fc:d2:71:22:ae:d3:b8:ac:92:e9:
                    c7:17:f2:bd:07:cd:43:5d:31:09:96:02:12:7d:55:
                    60:c5:85:f2:07:91:1c:e2:32:a9:87:9b:4a:12:af:
                    ba:c9:c8:57:84:a1:4f:7a:f1:14:39:fc:ca:b5:54:
                    f4:40:92:c9:af:df:83:5d:af:67:da:5a:35:4f:e7:
                    79:fa:2b:5a:a3:59:ad:3c:b5:85:5c:25:2c:89:50:
                    3a:99:6c:56:d7:2c:9b:ac:36:ae:70:1e:66:7d:b8:
                    5c:2e:f5:3e:d1:16:d7:55:f0:06:3a:92:dc:e1:f2:
                    af:ea:6d:eb:66:fe:eb:e0:5b:31:c6:04:d3:a1:b0:
                    55:ca:49:cb:38:67:bb:b2:b3:fe:5c:bd:08:55:2b:
                    ca:d5:db:fd:cc:2f:63:14:28:ac:6f:d2:93:d7:3f:
                    c1:46:d8:63:f7:ac:e1:49:aa:f3:d8:2d:fc:73:c6:
                    26:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D6:AB:8D:DA:33:30:DE:F8:2E:E3:1B:8E:CF:19:11:03:1B:85:72
            X509v3 Authority Key Identifier:
                keyid:8B:AA:27:F9:C2:EF:7B:F4:80:9A:D4:2A:E5:89:10:1B:73:E9:89:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6on-cLve_SAmtQq5YkQG3PpiSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/i6on-cLve_SAmtQq5YkQG3PpiSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/i6on-cLve_SAmtQq5YkQG3PpiSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:87:d0:4e:f9:95:e6:f8:80:84:4a:b2:a2:c6:f4:f3:88:a1:
         b4:dc:0f:98:1c:8e:85:7f:7e:7a:22:01:11:70:bf:fa:63:70:
         fd:5f:7b:dc:4b:3c:55:86:de:a6:ad:45:8a:f5:0a:14:a0:63:
         e5:73:ba:7b:fc:4a:0e:9b:11:d5:0a:78:ee:d7:0c:38:7e:a4:
         11:dd:cc:fa:91:52:d6:cf:81:ec:cf:4b:e4:01:3f:00:12:ac:
         c2:52:62:7b:4c:e3:3e:6e:11:4a:9e:31:9e:44:96:05:ce:cd:
         ca:39:b5:f6:03:a6:f4:79:1e:26:b3:9b:20:36:ca:e2:b7:44:
         40:67:a4:ca:7b:4a:43:49:3b:5c:49:0e:c8:3c:b4:e8:8f:7c:
         09:b1:e7:a8:be:d8:37:72:21:cf:8e:2d:c7:74:aa:7a:3b:46:
         92:25:75:51:2b:c7:74:67:df:4f:13:89:28:c3:e0:ac:b9:75:
         5c:37:45:3f:24:8c:a1:8f:4e:2a:f4:3e:35:50:63:11:5b:8d:
         81:1f:4b:c8:3e:13:37:ad:95:26:cd:5c:be:a4:9c:ab:79:33:
         24:5e:0b:cd:70:3e:fd:00:ea:09:e4:e4:97:c7:db:e2:e3:1d:
         4e:46:5f:8c:e6:1d:89:61:9a:98:cc:a5:9e:4c:35:ce:c5:92:
         2c:50:f7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:21:40 2025 by rpki-client