Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
File:                     5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json)
Hash identifier:          Ce3SKurOBLUQllInmHueW8G3LED8rBhw4QGWd9VuPg0=
Subject key identifier:   5D:2A:F9:42:E5:58:F3:F2:67:06:74:55:05:B9:76:09:60:40:A4:00
Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
Certificate issuer:       /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Certificate serial:       019603772275A709D11F3ABCE2C2930657CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
Manifest number:          0FB4
Signing time:             Sat 05 Apr 2025 01:01:01 +0000
Manifest this update:     Sat 05 Apr 2025 01:01:01 +0000
Manifest next update:     Sun 06 Apr 2025 01:01:01 +0000
Files and hashes:         1: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: mxus4vX9wmAa2VT+EObzopfj73ZaM5fVUb6zjgLOtA4=)
                          2: 5RNQOoYI7rp8d4nASoBcHUOUpY8.roa (hash: FG1C0t8LdLpHD2f41qfi65AEKFEoAI1fPmg3pwTrSAI=)
                          3: 9sR2L5tWHl9nYIOa3aPDj2epTyM.roa (hash: DVpf87jmOmV1usbZpIj3EdX+MCp0oX2EtW5xng4U88Q=)
                          4: eQWgmPYrRyxmbW7jic8MtUc1Zpo.roa (hash: QgtMWXIUrz6jvt1nPBxlt0MfdGFiSY2UtDQz0hujdYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 01:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:03:77:22:75:a7:09:d1:1f:3a:bc:e2:c2:93:06:57:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
        Validity
            Not Before: Apr  5 01:01:01 2025 GMT
            Not After : Apr  6 01:01:01 2025 GMT
        Subject: CN=5d2af942e558f3f26706745505b976096040a400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a2:fc:2c:43:8c:ec:5a:6c:eb:3e:73:02:0a:
                    aa:25:96:9d:b2:59:8d:c9:dc:60:cf:d6:6d:a9:f0:
                    58:22:3f:1c:ef:14:70:cb:0a:53:11:a1:c1:3c:3a:
                    5a:c1:c4:22:c3:5b:62:ca:0f:b9:25:37:03:99:ef:
                    4c:ea:bf:d9:29:71:fb:11:9d:9a:0d:dc:ec:84:26:
                    9c:c8:88:8c:e6:9d:f0:3f:17:94:7b:ba:6e:85:76:
                    f3:af:42:74:4f:56:6d:c2:f7:78:0a:5a:04:27:db:
                    e7:79:d9:5c:85:70:2d:0a:f9:75:74:69:4a:f8:8b:
                    8a:85:5d:16:f9:60:d2:b8:d7:02:20:c8:d8:56:19:
                    06:e9:ba:93:5a:19:e9:9a:0b:66:18:5e:df:a3:8f:
                    61:8a:07:ef:85:ab:7e:f5:27:a7:1d:d5:32:93:73:
                    c6:af:86:98:f4:75:44:2f:e4:69:c0:4b:c1:23:83:
                    8d:84:b2:4a:43:56:86:2c:88:2e:5d:0f:32:df:50:
                    1d:ec:48:3c:f6:5a:4b:33:d3:bc:32:5b:ef:b7:1b:
                    ab:10:26:e9:92:ef:84:7c:0b:85:97:87:2b:8a:72:
                    92:e9:8c:f3:09:75:39:8d:98:16:f4:e5:e5:2a:75:
                    88:86:6d:1a:c3:33:d8:a7:f8:0c:9f:dc:c5:bb:d4:
                    0e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2A:F9:42:E5:58:F3:F2:67:06:74:55:05:B9:76:09:60:40:A4:00
            X509v3 Authority Key Identifier:
                keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e4:72:30:19:62:a9:6f:b3:79:2e:5c:20:04:6f:61:60:db:
         c6:51:f4:24:e8:9d:fa:35:51:be:b2:e4:f1:f8:9f:26:4b:0a:
         e7:d4:24:8c:68:80:9b:cb:1e:c9:3f:ed:c0:87:14:2f:db:7b:
         3a:39:46:ac:e6:7c:e4:47:8a:f6:68:9c:30:bc:ed:35:0c:c9:
         9f:bb:72:a7:9d:f2:8d:f7:82:2e:a1:65:c0:c8:45:7b:04:5e:
         ec:4a:3d:e6:6c:11:90:ba:00:3e:6b:39:55:74:3a:81:3f:50:
         41:0e:1c:a1:89:c2:ae:ef:31:c1:9f:5c:ec:5b:60:29:80:59:
         45:a3:45:81:5b:a7:2e:d8:07:0e:b3:76:86:65:1a:eb:74:48:
         79:57:9f:d0:d6:fe:87:c5:f3:40:aa:13:4e:e1:19:a6:e0:3b:
         21:17:d0:bc:3c:99:b2:1a:88:50:7e:37:15:8a:2f:80:d3:67:
         70:f1:1d:8d:93:89:c6:20:46:b5:07:03:bf:e1:e8:56:2d:6a:
         e9:ad:a9:cf:f1:cc:85:70:48:a8:10:c9:fe:16:13:15:f2:62:
         db:4a:c9:71:bd:b5:71:30:fa:be:19:88:03:20:ef:63:eb:e4:
         36:f4:c2:b6:5a:cc:e3:87:dd:0a:83:1d:cd:b9:e6:1d:35:48:
         33:13:94:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:31:32 2025 by rpki-client