Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
File:                     12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft (raw, json)
Hash identifier:          sGv96XSe9bEFSNt3k99gEI10A5ZdRPrJgQJNY3gjjQs=
Subject key identifier:   58:E6:E7:8C:DD:5C:33:91:A8:C1:47:03:5E:AE:21:A8:8E:DA:8D:E3
Authority key identifier: D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
Certificate issuer:       /CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Certificate serial:       01962B97E90B9F4FDBCFC809EF5D3835F017
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
Manifest number:          01E5
Signing time:             Sat 12 Apr 2025 20:01:37 +0000
Manifest this update:     Sat 12 Apr 2025 20:01:37 +0000
Manifest next update:     Sun 13 Apr 2025 20:01:37 +0000
Files and hashes:         1: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl (hash: WgWiI8CBYjQNcRG6a/UrdDfDeR9t1biC75Juks/5vSY=)
                          2: 3_lvOlC8Q73awEsCGt68pft-scE.roa (hash: kkfK8/3sSi/mI91PBNQyjxR7j14LRCGJu3KC5n63R3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2b:97:e9:0b:9f:4f:db:cf:c8:09:ef:5d:38:35:f0:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
        Validity
            Not Before: Apr 12 20:01:37 2025 GMT
            Not After : Apr 13 20:01:37 2025 GMT
        Subject: CN=58e6e78cdd5c3391a8c147035eae21a88eda8de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:c4:e2:5b:46:6a:6a:1e:eb:2e:40:e2:58:
                    7d:b4:53:57:3c:9d:d1:c2:a9:f5:03:3f:8f:47:e3:
                    67:01:31:69:83:e7:b5:50:da:d3:f9:3c:ab:41:f7:
                    1e:5a:a5:b8:5b:1c:4e:3e:3c:38:ee:17:f3:64:e1:
                    0e:71:8a:3e:28:b1:4a:09:e5:28:1a:0c:61:b7:fa:
                    e0:46:2b:fe:5d:25:92:02:4d:41:af:98:70:7d:7d:
                    2e:3c:21:c2:de:8c:c5:46:b2:a3:34:57:81:b4:ed:
                    d4:fa:26:9f:c6:8d:63:2b:45:41:bd:23:bc:55:63:
                    85:d8:ec:e5:21:e0:d6:91:50:6b:45:27:52:c3:07:
                    47:ab:0c:87:47:8b:2c:db:69:87:b0:6c:25:d0:d9:
                    0f:ee:49:cb:81:c9:33:4b:7e:f1:1e:fb:3e:14:0f:
                    aa:d4:91:e1:06:fb:18:7b:64:30:4d:00:e0:09:44:
                    b5:b1:47:74:41:75:89:22:83:7e:bf:6e:66:85:46:
                    d7:bc:58:b8:ca:a5:b8:ac:2b:26:47:f8:a2:3f:8d:
                    07:3b:e8:10:23:25:6a:26:fb:ee:90:66:45:b7:aa:
                    f3:d5:e3:9e:db:83:22:4f:a9:80:87:75:37:c6:2b:
                    85:0e:24:9f:90:77:26:a1:3b:fa:74:e8:bd:ea:8d:
                    c2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E6:E7:8C:DD:5C:33:91:A8:C1:47:03:5E:AE:21:A8:8E:DA:8D:E3
            X509v3 Authority Key Identifier:
                keyid:D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:73:66:35:ec:91:19:71:e6:8c:8b:62:03:af:10:32:78:3c:
         42:8b:1e:36:45:32:c1:f6:d1:f1:31:7c:6a:f7:b0:91:29:35:
         9a:00:cf:b5:70:a1:57:0d:d1:8f:45:03:1c:19:40:bf:b3:ff:
         80:b8:c4:ed:bf:13:32:c2:1f:e8:07:42:ed:8f:94:8b:f2:3f:
         79:f1:50:f8:99:fe:27:15:ae:bb:71:9f:95:d5:94:93:7b:3e:
         54:0c:48:a0:c4:d2:be:70:20:34:96:f2:84:85:fa:7d:65:33:
         36:53:83:55:70:52:a3:c8:69:9d:3b:f2:d5:13:b0:db:62:dc:
         d0:89:c8:78:b1:51:b4:50:a1:5f:37:59:e4:92:3b:fb:ac:9f:
         74:b2:42:c8:b4:c7:46:2b:ad:b7:d6:4c:f0:3f:68:de:16:a8:
         48:fc:c5:7a:73:1a:e2:fa:8c:9f:e2:36:78:04:76:0f:96:bd:
         27:d0:0b:52:de:a1:b6:54:5e:a0:96:f3:4d:95:f8:48:2d:2c:
         4b:d9:60:04:4c:fc:31:b2:67:7d:fb:31:f7:68:5b:71:38:e0:
         9e:a3:a2:2b:1e:90:a9:d1:ac:5d:69:1e:74:72:68:19:61:32:
         4a:33:79:ed:2e:52:b9:3d:45:ac:05:74:ef:7d:5a:60:bd:de:
         bf:0d:4c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:04:46 2025 by rpki-client