Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
File:                     I-_rMup5TJRQkgia5cE1AvdxbN4.mft (raw, json)
Hash identifier:          bpzB1mKDfjZj9BLr3QdMqp4rwdMIfJo3FgezibOiVv0=
Subject key identifier:   6A:2D:5C:95:8A:A9:19:54:95:E8:53:24:28:77:AC:27:93:EC:C7:5D
Authority key identifier: 23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
Certificate issuer:       /CN=23efeb32ea794c945092089ae5c13502f7716cde
Certificate serial:       01958B16E5AA0BD166C41608834B32F74810
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
Manifest number:          1492
Signing time:             Wed 12 Mar 2025 16:01:28 +0000
Manifest this update:     Wed 12 Mar 2025 16:01:28 +0000
Manifest next update:     Thu 13 Mar 2025 16:01:28 +0000
Files and hashes:         1: I-_rMup5TJRQkgia5cE1AvdxbN4.crl (hash: ixoumLGWAE5qI6QZxfPr1MH8smu5d6rQzi17hG6qABQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 16:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:16:e5:aa:0b:d1:66:c4:16:08:83:4b:32:f7:48:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23efeb32ea794c945092089ae5c13502f7716cde
        Validity
            Not Before: Mar 12 16:01:28 2025 GMT
            Not After : Mar 13 16:01:28 2025 GMT
        Subject: CN=6a2d5c958aa9195495e853242877ac2793ecc75d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:80:03:12:f1:43:21:20:0d:d5:b5:c7:bc:17:
                    3d:62:d0:56:32:e9:97:36:1f:1b:a3:0a:43:87:68:
                    bb:b4:19:d1:24:6d:d8:ef:10:e9:47:8e:e1:95:3d:
                    5a:40:22:8b:fd:de:05:4f:d1:93:ff:f8:52:fc:26:
                    a8:40:bb:b3:f0:cc:8c:75:44:23:9c:31:ec:98:22:
                    b2:02:5e:8e:8b:66:75:1c:ff:89:45:0a:f3:21:44:
                    75:e9:cc:a9:e6:e9:3a:9f:9e:0d:5c:5a:b7:04:ce:
                    24:09:4a:9c:1b:0c:a6:ed:6a:37:74:e6:77:27:10:
                    0b:cc:21:31:9e:ff:5d:20:6a:53:70:af:74:8a:3d:
                    f4:89:c8:bf:60:f6:81:7d:76:09:c2:98:67:f8:8d:
                    17:3a:44:5a:6e:41:77:84:76:eb:10:55:9c:60:f5:
                    6c:2d:20:b4:92:f6:a6:c2:03:aa:61:c8:01:3c:e2:
                    aa:13:a6:e6:92:d4:0a:44:15:fd:ff:b3:9b:ce:6f:
                    8c:bc:53:4b:a4:dd:16:54:60:bf:fd:0c:33:cd:e8:
                    8b:05:f1:ae:a2:56:d1:f6:d3:a1:fc:df:2c:e6:cc:
                    1d:d8:1a:59:b8:06:ba:81:15:e3:8c:1f:3a:bf:50:
                    02:e9:e1:2b:63:2b:2f:f0:12:eb:f6:96:39:2a:6b:
                    ad:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2D:5C:95:8A:A9:19:54:95:E8:53:24:28:77:AC:27:93:EC:C7:5D
            X509v3 Authority Key Identifier:
                keyid:23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:06:f1:98:c1:68:b2:c5:07:34:2a:68:fb:30:2b:e9:ad:17:
         de:4e:2b:15:b6:fd:1a:65:22:b6:52:91:cb:bd:49:16:9f:29:
         50:56:c8:7c:8a:da:7e:fa:e8:88:5d:4e:7d:79:89:64:e6:f5:
         6b:b8:83:9b:3d:40:b0:79:0e:62:67:8f:85:08:15:63:e1:56:
         df:41:e6:f2:18:23:36:a7:d0:12:e8:8f:68:92:6c:3b:68:39:
         68:b2:88:1c:90:6c:d6:59:d5:0a:2c:8f:72:a3:92:da:f1:99:
         64:f0:27:f5:d1:9d:97:c1:13:63:f8:a4:a8:64:d9:13:4c:05:
         6b:ae:a4:03:85:80:52:9a:d8:20:30:8a:e9:4c:7d:0b:e6:61:
         9e:d0:07:a1:8d:95:09:c3:50:6c:f0:29:e7:8b:2e:9b:6d:72:
         a9:40:31:05:91:f3:8c:54:83:94:65:bb:ec:de:e8:a1:84:f4:
         b7:c4:fa:90:38:fa:ca:e7:47:dd:29:57:97:0f:8d:12:1b:d2:
         1d:41:a3:66:5b:6f:66:27:6f:4b:5f:ef:32:8d:83:11:69:fe:
         92:1e:de:27:14:41:55:5a:5b:2f:ca:9c:29:54:6f:dc:43:c4:
         43:31:12:be:7c:97:35:95:bd:22:82:0f:ca:ab:f1:77:ab:41:
         10:f5:93:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:37 2025 by rpki-client