Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.mft
File:                     SkcTzDG36jiRvhRV3hHcwvMp1RU.mft (raw, json)
Hash identifier:          iPkzV8JfqdsZL6oYqAwQOBIeX+FzA3d7nk91Jun9ArM=
Subject key identifier:   FF:18:6C:1F:DE:E9:1D:D8:38:F7:B7:43:2C:73:0F:95:AE:E1:8E:23
Authority key identifier: 4A:47:13:CC:31:B7:EA:38:91:BE:14:55:DE:11:DC:C2:F3:29:D5:15
Certificate issuer:       /CN=4a4713cc31b7ea3891be1455de11dcc2f329d515
Certificate serial:       019658DDACA16FF4C04A210B7291849F3DD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SkcTzDG36jiRvhRV3hHcwvMp1RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.mft
Manifest number:          0B8A
Signing time:             Mon 21 Apr 2025 15:00:44 +0000
Manifest this update:     Mon 21 Apr 2025 15:00:44 +0000
Manifest next update:     Tue 22 Apr 2025 15:00:44 +0000
Files and hashes:         1: SkcTzDG36jiRvhRV3hHcwvMp1RU.crl (hash: t8Uj22HNYYliCaT5V4HvdBq5A17m+ET0OgIhbPx1NGw=)
                          2: gF8ZN3C0a45HX0BtFSTg6shwTi4.roa (hash: YzHFKuHmdK7saGrTnv4LM1NaquoFvehSW3aShl6a+YM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SkcTzDG36jiRvhRV3hHcwvMp1RU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:58:dd:ac:a1:6f:f4:c0:4a:21:0b:72:91:84:9f:3d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a4713cc31b7ea3891be1455de11dcc2f329d515
        Validity
            Not Before: Apr 21 15:00:44 2025 GMT
            Not After : Apr 22 15:00:44 2025 GMT
        Subject: CN=ff186c1fdee91dd838f7b7432c730f95aee18e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:56:8a:37:7d:b4:c1:ae:86:09:dc:e1:40:33:
                    7f:87:7e:57:af:94:be:bc:fc:0c:b0:10:80:56:a1:
                    e0:27:fa:6d:24:ca:8f:9e:b1:4a:59:05:33:e5:8e:
                    a2:8f:46:df:a2:fd:1e:40:d8:83:1a:d1:70:3b:99:
                    ab:7d:fe:5b:fb:34:76:d4:22:63:3c:16:df:72:38:
                    d4:e7:30:f3:15:14:46:28:a8:2e:36:ab:6e:de:5c:
                    ab:10:ca:6a:5e:44:d3:4f:45:7d:44:40:f4:24:7a:
                    8a:9e:4d:fa:df:53:2c:74:2e:5d:62:2b:40:96:ed:
                    63:49:db:01:31:2f:02:43:21:5f:9e:fb:09:fd:49:
                    b5:69:b3:be:d5:6c:1c:d2:8c:9d:09:3f:e4:0f:eb:
                    e7:95:72:ae:d8:cc:78:7f:09:2a:71:63:e6:c5:a3:
                    2c:e6:56:de:2e:c5:29:88:b5:f3:57:65:74:d2:63:
                    6e:8a:3f:6e:d5:95:96:8f:83:df:a1:71:ae:a4:82:
                    2c:a6:b9:1c:3c:8a:91:07:29:d0:8d:a8:e2:30:be:
                    39:cb:e1:28:9d:39:cc:3b:01:7f:39:87:be:bc:e4:
                    74:f3:f2:6f:24:b5:98:2a:21:36:74:1a:91:a1:26:
                    bc:96:94:3e:10:12:b1:1c:bd:8b:5c:a3:e1:46:9d:
                    a2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:18:6C:1F:DE:E9:1D:D8:38:F7:B7:43:2C:73:0F:95:AE:E1:8E:23
            X509v3 Authority Key Identifier:
                keyid:4A:47:13:CC:31:B7:EA:38:91:BE:14:55:DE:11:DC:C2:F3:29:D5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkcTzDG36jiRvhRV3hHcwvMp1RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f4:17:4e:61:a6:2b:ff:e9:cb:a8:22:f7:31:61:48:c9:33:
         8e:60:53:eb:7d:f4:2a:a5:f2:9a:a3:bd:5e:fd:d2:ed:80:3e:
         04:a7:57:1f:16:7c:24:22:11:4a:74:52:a9:d0:6b:ed:ba:b7:
         d4:04:a5:4b:d3:60:31:ca:9a:fc:a6:23:27:1f:cf:73:83:9c:
         e9:c2:22:a7:55:21:e9:8a:70:ff:54:9d:67:09:32:92:5c:c5:
         8d:90:bd:2f:32:5f:15:cf:fd:83:d4:43:8a:e4:ff:fa:8c:a9:
         2d:ca:dd:b7:e6:24:ad:03:ec:4e:4e:3d:c5:6e:f0:9e:ef:dd:
         6e:a9:f4:31:ad:70:4a:71:59:b2:a6:f5:dd:c2:9a:da:7b:de:
         be:3b:73:53:ba:85:0c:25:fa:d4:88:ef:96:64:a3:1c:2f:9b:
         a3:fe:90:12:2a:ca:6f:99:dd:31:6f:f7:ce:a9:99:e5:9f:c7:
         db:1e:ca:df:f4:1b:96:c2:47:be:46:d0:3f:d9:c4:a9:90:16:
         dc:2f:c0:ab:8d:1e:69:2c:93:3b:ed:1d:25:75:93:41:49:30:
         d1:52:e3:51:fd:fd:90:08:28:7b:65:b3:44:5c:e0:69:78:d8:
         50:9c:0d:e2:03:e1:6b:b7:12:20:1c:38:0e:c2:4e:1c:87:50:
         d5:5d:24:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:44:05 2025 by rpki-client