Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
File:                     cV2dGCxjrtg5f743LjYA9D2-62o.mft (raw, json)
Hash identifier:          FaGhYptKFKl/Cw8DGWhbSvCd9/C2avocCw4JSg0jC+0=
Subject key identifier:   A6:9B:6B:72:65:BE:D6:66:88:4A:3B:1D:95:A4:12:13:C1:44:37:96
Authority key identifier: 71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A
Certificate issuer:       /CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
Certificate serial:       01964F6C4D0C3878348FBD9A010EB6D340C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
Manifest number:          148C
Signing time:             Sat 19 Apr 2025 19:00:19 +0000
Manifest this update:     Sat 19 Apr 2025 19:00:19 +0000
Manifest next update:     Sun 20 Apr 2025 19:00:19 +0000
Files and hashes:         1: cV2dGCxjrtg5f743LjYA9D2-62o.crl (hash: o6TRsEP9eoH1I5F2M9SZajdcN3q8GjXqtlCAkIrCjDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6c:4d:0c:38:78:34:8f:bd:9a:01:0e:b6:d3:40:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
        Validity
            Not Before: Apr 19 19:00:19 2025 GMT
            Not After : Apr 20 19:00:19 2025 GMT
        Subject: CN=a69b6b7265bed666884a3b1d95a41213c1443796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:73:cd:97:c6:48:2d:1b:0c:ea:8e:65:ef:
                    d3:b3:c2:fe:46:4a:89:06:2a:31:09:79:74:e4:22:
                    c3:aa:bc:c0:0d:a2:4c:3a:f0:f2:09:d8:e0:e6:ef:
                    c8:87:0e:b7:4d:10:86:52:59:97:01:85:98:34:74:
                    e5:5b:91:98:8b:85:89:f8:20:b0:49:4b:47:21:5d:
                    30:88:89:02:cf:46:da:2e:04:02:02:d7:da:9b:ed:
                    69:ee:8a:fd:13:d8:2e:21:af:41:f8:07:ca:c8:ca:
                    5b:d6:95:2a:94:d2:49:2f:78:77:53:a3:0a:85:25:
                    4a:5b:ae:1e:76:d7:c9:60:06:32:c0:52:20:a3:d9:
                    f3:51:fc:57:8e:3c:a3:52:b2:ad:41:a2:a4:3d:41:
                    c2:67:de:8a:9a:fb:f8:93:a9:9f:3b:35:06:8f:ff:
                    f8:0e:43:97:ee:88:0d:98:a9:28:87:83:b5:53:4c:
                    6a:77:06:77:fe:a5:23:07:08:1e:fe:05:0d:22:aa:
                    3d:ae:3e:96:c4:33:ec:6f:0d:e6:2b:fd:53:bc:30:
                    35:88:02:c9:a6:d4:42:67:5f:9f:1a:27:b1:06:ab:
                    50:06:c9:10:2f:ff:64:2f:80:05:6d:7d:c4:56:c0:
                    b1:1b:3b:ca:77:73:41:94:41:28:e0:ae:e7:b5:13:
                    a8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9B:6B:72:65:BE:D6:66:88:4A:3B:1D:95:A4:12:13:C1:44:37:96
            X509v3 Authority Key Identifier:
                keyid:71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:99:9f:b5:09:42:c0:52:69:58:c7:81:ff:f1:ec:56:95:82:
         35:80:2f:cc:e7:6c:af:12:b1:5e:22:80:74:d7:97:28:a1:1e:
         82:6b:23:f7:a6:1d:b7:38:54:05:4b:5a:3e:52:02:2b:5e:76:
         9e:7d:c4:f5:fb:aa:f9:b5:15:96:3f:23:99:a2:b0:51:8f:9a:
         d2:b6:22:e4:0f:69:ba:6e:13:d0:a5:39:c4:2c:6d:1f:0e:e2:
         04:c0:d9:00:d5:76:25:7c:57:2a:20:28:b9:5c:95:57:0f:78:
         79:84:79:fb:4e:08:90:fe:11:a6:9f:f3:6d:a6:f1:9f:4d:1e:
         21:bd:aa:99:e6:8f:ad:6d:d0:ce:a1:cc:9a:bd:4c:cc:c0:cd:
         29:0e:21:06:ce:4f:a2:96:67:43:8f:63:b6:12:59:a9:e4:e8:
         82:7e:c2:50:38:e4:4a:83:97:0b:e6:51:b5:55:1b:fe:e1:a9:
         80:ec:a9:d4:ae:00:06:31:a0:ab:a8:78:eb:7a:a0:30:6f:ee:
         12:a3:5f:bd:a9:6f:82:c6:6d:66:4a:e6:d0:7c:83:38:9d:d7:
         05:63:4b:8a:22:05:2f:99:28:ec:69:6e:fd:08:ea:ff:5a:ec:
         5f:51:24:5c:3d:3d:11:0f:3f:a8:da:09:5c:23:47:99:fd:df:
         2a:69:e1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:06 2025 by rpki-client