Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File:                     slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier:          JlUDOy10LsIrQ7XZgYtt34CtS2L+SMqdV4xLKUxAxbU=
Subject key identifier:   B4:E8:1B:4F:84:6C:DA:A5:DC:05:03:C2:AD:F4:7E:05:EB:2C:74:6B
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer:       /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial:       01964B588949104D8A7A1DE9E8879E20DA2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number:          14FA
Signing time:             Sat 19 Apr 2025 00:00:15 +0000
Manifest this update:     Sat 19 Apr 2025 00:00:15 +0000
Manifest next update:     Sun 20 Apr 2025 00:00:15 +0000
Files and hashes:         1: 1-yGyAb5aLCteBw1IK7px8umPM0E.roa (hash: sbk/bLa9eBvitwUvY7P4OBh7ripskQi0SoXdYbLT94o=)
                          2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: L4dKX4E8k5FXYWsZvoAGJGfXBcLcSE4ZxYW1kGK1OKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:58:89:49:10:4d:8a:7a:1d:e9:e8:87:9e:20:da:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
        Validity
            Not Before: Apr 19 00:00:15 2025 GMT
            Not After : Apr 20 00:00:15 2025 GMT
        Subject: CN=b4e81b4f846cdaa5dc0503c2adf47e05eb2c746b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0d:eb:e7:84:94:67:94:fe:14:2a:a2:ba:4f:
                    a3:04:50:99:4a:63:9b:c5:89:3f:27:db:e2:f9:0d:
                    2a:02:25:79:dc:9c:d5:1e:6e:52:33:b7:11:4a:69:
                    c3:d5:1d:af:24:59:a4:33:3b:2c:b1:a9:bf:43:c0:
                    33:37:3a:5a:2f:5d:65:ff:e3:9e:b8:c9:9d:be:26:
                    7d:33:71:8e:60:4e:8c:69:95:19:73:04:b2:a2:25:
                    7b:1d:8a:68:0b:5b:75:29:95:82:44:58:1b:d7:86:
                    1e:b1:5d:7c:f8:01:82:c9:d5:b5:19:0b:6e:4d:c0:
                    72:d3:c0:bb:e2:5a:e4:19:65:0e:56:07:1c:18:de:
                    18:dd:2c:a0:80:73:96:19:5e:8f:9c:ef:8d:63:07:
                    85:fd:ae:14:fe:b9:aa:fe:74:33:65:90:dd:14:e5:
                    8a:8e:9d:30:fa:64:ae:2f:7b:2f:cf:28:27:8f:db:
                    fe:de:03:da:d6:71:27:b4:29:11:33:f4:8a:c8:f3:
                    ab:ab:22:cd:14:56:5d:4e:81:58:2b:02:90:74:67:
                    17:17:d1:8b:66:b6:50:fc:ad:c8:f9:67:21:e0:16:
                    29:36:6c:59:0f:66:27:50:d6:88:46:a4:17:c9:e3:
                    62:69:db:37:2c:09:43:2a:37:80:ba:39:3d:1d:d6:
                    c6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E8:1B:4F:84:6C:DA:A5:DC:05:03:C2:AD:F4:7E:05:EB:2C:74:6B
            X509v3 Authority Key Identifier:
                keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f6:f9:61:11:ac:f6:88:1d:cd:de:f2:6e:ea:a5:3e:dc:66:
         6d:19:9b:74:18:44:26:10:ce:be:3d:2f:56:7d:59:37:bc:36:
         68:d6:30:46:df:1d:75:76:45:d5:2a:ee:69:d9:0a:40:32:3f:
         eb:2c:5e:c4:a4:8c:39:d6:ed:99:13:8a:87:85:55:0b:67:2a:
         5a:98:d1:b8:47:84:d5:d7:be:d9:34:70:6b:35:02:db:8e:13:
         d2:e9:7e:f0:ad:30:de:6a:85:30:ae:88:ff:d5:2c:3f:5a:04:
         8d:18:e6:87:a8:c8:f9:18:e4:c3:8d:9e:b5:ca:c3:5b:67:d4:
         ca:0a:22:f9:59:33:ff:3a:1c:c7:d8:9b:45:17:13:c3:34:25:
         3e:24:ec:33:da:d2:e4:ac:2e:70:94:69:12:1e:41:0b:6f:2a:
         7a:01:b9:62:a7:30:70:d8:c1:29:5c:50:5e:b9:e1:d2:da:d9:
         e2:ec:66:68:a1:e7:3b:94:0e:04:dd:fc:ce:e3:3b:81:8a:f4:
         5d:d7:05:ff:d3:2b:44:b6:19:33:5a:e7:f4:94:17:6d:fa:22:
         df:87:02:8b:31:e0:f0:d2:7f:9f:15:85:cf:5c:db:10:a5:30:
         d1:1d:47:e6:47:6b:a4:c6:1a:32:86:23:7f:5b:84:26:95:6a:
         6b:74:5b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:35:17 2025 by rpki-client