Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
File:                     1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft (raw, json)
Hash identifier:          sPZSJ0ltSPoqO7RlIo/5GNGEMOk3+btAVyzcuq5KhAo=
Subject key identifier:   48:BD:31:7B:56:2A:A9:20:00:F6:25:1D:FA:E2:F9:77:6F:FF:39:EC
Authority key identifier: D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA
Certificate issuer:       /CN=d46c9be46cba3051066233ca4f9628a26df8fcca
Certificate serial:       019644449FDB4A3E1B8FF9E00D9D66525105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
Manifest number:          0E71
Signing time:             Thu 17 Apr 2025 15:01:10 +0000
Manifest this update:     Thu 17 Apr 2025 15:01:10 +0000
Manifest next update:     Fri 18 Apr 2025 15:01:10 +0000
Files and hashes:         1: 1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl (hash: er9cNwrzDNjdqG/5Sh3AKpgIXZllJQyUSODoWZeSGzY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 15:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:44:9f:db:4a:3e:1b:8f:f9:e0:0d:9d:66:52:51:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46c9be46cba3051066233ca4f9628a26df8fcca
        Validity
            Not Before: Apr 17 15:01:10 2025 GMT
            Not After : Apr 18 15:01:10 2025 GMT
        Subject: CN=48bd317b562aa92000f6251dfae2f9776fff39ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:92:fb:78:bc:8e:f3:ed:21:99:46:16:ba:ce:
                    ff:0b:12:67:87:a5:1c:03:73:75:82:03:3a:14:35:
                    df:a6:69:13:2a:d6:21:8c:80:a5:19:a1:93:fc:b0:
                    15:b2:6e:22:26:44:2b:33:41:ee:a4:15:c5:12:ed:
                    95:43:8f:99:88:8c:7b:ca:88:bd:35:81:a0:d2:7d:
                    03:38:21:81:c3:ce:e5:2e:01:39:46:b4:5a:54:b4:
                    91:9d:c1:40:92:44:e0:a1:9e:c0:00:e9:a6:ac:23:
                    5c:35:f4:34:39:f7:56:86:ae:52:f3:0b:ea:f5:02:
                    bf:cf:d1:30:8a:08:77:7c:57:4a:67:36:3d:6d:04:
                    0f:2f:ba:59:18:64:45:92:1e:56:49:d0:21:3d:ca:
                    48:d3:8c:dd:9f:d9:f6:0a:3a:7c:c1:8b:ac:8d:8f:
                    67:0f:1a:5e:44:7d:b0:cd:27:be:64:a1:a8:e7:92:
                    09:bc:a3:5f:79:4d:b7:54:b7:80:33:91:2c:36:cf:
                    30:a5:78:fa:aa:5e:8f:f3:93:e0:3d:57:9e:bb:2a:
                    c6:b0:bf:cc:29:10:c0:b5:20:1a:94:3f:6c:3f:4e:
                    24:32:d2:86:f4:a3:3b:28:81:0b:f8:26:25:20:e9:
                    98:59:5f:1f:08:3a:3c:4a:01:2c:66:ba:58:bd:8f:
                    92:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BD:31:7B:56:2A:A9:20:00:F6:25:1D:FA:E2:F9:77:6F:FF:39:EC
            X509v3 Authority Key Identifier:
                keyid:D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:cb:09:2c:6d:15:43:66:a7:e6:61:2d:5e:b9:5a:a3:3d:56:
         8d:c2:f6:36:e1:02:f6:13:e0:a6:b6:be:33:94:8e:72:b8:55:
         77:2d:18:77:66:96:9a:95:d1:b8:b9:27:2e:ec:b8:97:b1:7f:
         6c:9f:01:70:c8:a4:bd:d9:d7:04:8a:bc:be:ef:18:93:57:71:
         ef:f1:c5:2a:bc:98:8f:5e:f0:2f:c5:27:5f:98:52:fd:df:38:
         52:94:78:f0:a6:0a:e7:7c:f3:c0:a4:31:b8:89:ec:a3:5e:16:
         1a:45:da:18:74:1d:f9:01:00:24:54:cf:45:b3:c9:0f:d9:be:
         24:5a:af:d2:f6:40:96:c9:a2:13:cb:f5:e0:b4:24:06:22:5b:
         7d:df:dc:9d:96:bc:2f:df:61:f9:fb:b3:ea:d8:7d:1d:fd:be:
         c2:09:2e:81:3c:2b:2a:93:23:c3:09:7f:04:10:3e:ba:3f:1d:
         a3:b5:d5:be:e2:aa:1c:7f:70:43:19:1c:f0:18:a0:70:06:b9:
         ac:0d:18:92:4d:01:9e:1c:83:1f:30:c2:d9:19:7a:b9:11:8a:
         bb:a2:bd:2a:b3:8d:e5:6d:f7:6d:18:02:15:ea:db:8c:46:4e:
         94:80:6b:61:40:b1:90:54:30:8c:19:a7:9d:74:61:75:4d:b9:
         6d:de:ea:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:30:38 2025 by rpki-client