Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
File:                     Aleh_L8udaLhA0ynSg6XJiO7xJw.mft (raw, json)
Hash identifier:          bzQr/MGUnb8Ozro2MhIocIl51ByegKCodI7l5ydpB2Y=
Subject key identifier:   B6:69:AA:37:8D:2B:2A:51:21:A2:CD:64:7F:34:6E:68:B7:0F:C2:72
Authority key identifier: 02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
Certificate issuer:       /CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Certificate serial:       01974855A141C4D0869932E16E87EAAB7DF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
Manifest number:          02DE
Signing time:             Sat 07 Jun 2025 03:01:00 +0000
Manifest this update:     Sat 07 Jun 2025 03:01:00 +0000
Manifest next update:     Sun 08 Jun 2025 03:01:00 +0000
Files and hashes:         1: Aleh_L8udaLhA0ynSg6XJiO7xJw.crl (hash: lfdkeKx+0PZOfywZOd23JFIa1TpEVclMJ0dIjnnce00=)
                          2: uyn_U6sylrn5wTqRGzlqSQ4TKtg.roa (hash: fhFG1UXX8cmMfDAY924tzYfk7fne+/jmPzGgnROSYrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:a1:41:c4:d0:86:99:32:e1:6e:87:ea:ab:7d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
        Validity
            Not Before: Jun  7 03:01:00 2025 GMT
            Not After : Jun  8 03:01:00 2025 GMT
        Subject: CN=b669aa378d2b2a5121a2cd647f346e68b70fc272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f9:10:f7:82:38:bd:24:6d:fd:34:25:6c:14:
                    42:16:8b:08:74:80:3e:04:03:01:64:a8:42:90:cc:
                    dd:ea:cc:fe:83:81:c0:57:b5:71:f6:d3:a2:b0:be:
                    b0:50:ce:e6:6a:35:6e:6b:0b:44:a3:fe:17:9d:a8:
                    72:5d:f2:57:25:62:63:1b:4b:55:c0:d8:62:0d:42:
                    c7:90:41:ba:b5:75:bf:d0:f1:6a:27:88:5b:80:63:
                    e1:79:eb:ce:ab:66:c4:fb:c6:6e:a8:04:07:6a:42:
                    32:2b:9e:81:c4:c7:b8:d6:92:f2:4c:29:66:2b:a9:
                    af:bf:36:77:c9:92:5e:82:98:50:87:0f:f9:16:03:
                    c2:0c:23:ce:c0:c1:b2:a2:b5:97:fb:2e:ff:db:4b:
                    4c:ed:49:a9:2f:4a:77:b2:7b:4f:2e:68:f3:70:85:
                    d4:fe:d4:06:33:d6:77:03:28:f4:af:f2:d7:c7:43:
                    cd:34:ee:c9:46:60:af:bc:69:d0:47:c3:f3:cb:e2:
                    b7:1d:4b:26:5e:b6:8b:03:ed:4d:f8:14:de:13:43:
                    5a:6c:4c:5b:8e:75:a8:8d:5c:87:41:49:3a:4b:b4:
                    b3:ba:4f:d6:89:77:6e:5f:7d:67:95:17:df:c8:be:
                    9c:1f:72:4f:9d:cc:a1:13:be:7f:79:55:7e:df:1f:
                    14:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:69:AA:37:8D:2B:2A:51:21:A2:CD:64:7F:34:6E:68:B7:0F:C2:72
            X509v3 Authority Key Identifier:
                keyid:02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:9d:b8:86:89:79:31:47:76:5e:a8:f5:2b:7b:e7:0b:9c:c3:
         40:1d:ef:fa:40:4a:aa:07:30:f3:78:f0:42:c5:b6:4c:2d:3b:
         be:19:e2:16:ad:67:3b:47:79:f7:23:59:4c:eb:b9:60:c6:c8:
         08:96:30:1f:2c:f7:c7:c0:4c:0f:13:24:a6:79:9e:b5:5d:3c:
         9f:9e:fd:ee:bc:2c:65:04:64:c1:c6:3d:70:69:19:df:c1:6d:
         22:7f:79:84:7e:de:41:5f:7a:ce:11:cd:cf:09:b3:bf:95:0f:
         6f:2d:ae:32:9c:af:9b:a5:37:b4:b9:69:ed:de:32:ba:77:96:
         cd:96:bf:75:71:bb:63:28:1b:f8:8b:4e:51:ab:d1:dd:65:5b:
         9b:81:93:dd:a7:e7:dc:c0:d0:b4:94:4d:4e:d6:0f:d7:2f:ae:
         fd:f5:32:da:93:09:c7:c3:bf:cd:9c:f7:04:3f:d9:51:3a:2d:
         38:c0:e7:bb:51:f4:c1:b7:bf:52:7a:5a:17:f7:c2:a9:fc:1c:
         ef:b5:c8:ba:57:a9:39:cf:e3:fb:0b:12:5a:77:9f:cb:89:89:
         47:c0:99:57:3b:50:31:9c:ad:ab:25:ad:22:40:41:56:5a:24:
         d2:7d:c5:15:9c:d4:40:a9:7e:0c:19:49:e6:e8:44:42:13:11:
         ae:2d:e1:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIVaFBxNCGmTLhbofqq33wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNTdhMWZjYmYyZTc1YTJlMTAzNGNhNzRhMGU5NzI2MjNi
YmM0OWMwHhcNMjUwNjA3MDMwMTAwWhcNMjUwNjA4MDMwMTAwWjAzMTEwLwYDVQQD
EyhiNjY5YWEzNzhkMmIyYTUxMjFhMmNkNjQ3ZjM0NmU2OGI3MGZjMjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vkQ94I4vSRt/TQlbBRCFosIdIA+
BAMBZKhCkMzd6sz+g4HAV7Vx9tOisL6wUM7majVuawtEo/4XnahyXfJXJWJjG0tV
wNhiDULHkEG6tXW/0PFqJ4hbgGPheevOq2bE+8ZuqAQHakIyK56BxMe41pLyTClm
K6mvvzZ3yZJegphQhw/5FgPCDCPOwMGyorWX+y7/20tM7UmpL0p3sntPLmjzcIXU
/tQGM9Z3Ayj0r/LXx0PNNO7JRmCvvGnQR8Pzy+K3HUsmXraLA+1N+BTeE0NabExb
jnWojVyHQUk6S7Szuk/WiXduX31nlRffyL6cH3JPncyhE75/eVV+3x8UVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZpqjeNKypRIaLNZH80bmi3D8JyMB8GA1UdIwQY
MBaAFAJXofy/LnWi4QNMp0oOlyYju8ScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWxlaF9MOHVkYUxoQTB5blNnNlhKaU83eEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAt
YzIzZjczMTM2MmNlLzEvQWxlaF9MOHVkYUxoQTB5blNnNlhKaU83eEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAtYzIzZjczMTM2MmNl
LzEvQWxlaF9MOHVkYUxoQTB5blNnNlhKaU83eEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN524hol5
MUd2Xqj1K3vnC5zDQB3v+kBKqgcw83jwQsW2TC07vhniFq1nO0d59yNZTOu5YMbI
CJYwHyz3x8BMDxMkpnmetV08n5797rwsZQRkwcY9cGkZ38FtIn95hH7eQV96zhHN
zwmzv5UPby2uMpyvm6U3tLlp7d4yuneWzZa/dXG7Yygb+ItOUavR3WVbm4GT3afn
3MDQtJRNTtYP1y+u/fUy2pMJx8O/zZz3BD/ZUTotOMDnu1H0wbe/UnpaF/fCqfwc
77XIulepOc/j+wsSWnefy4mJR8CZVztQMZytqyWtIkBBVlok0n3FFZzUQKl+DBlJ
5uhEQhMRri3hwA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:27 2025 by rpki-client