Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
File:                     eP0LaXd70F3N_JiULu3vuwaBKC8.mft (raw, json)
Hash identifier:          ocrPkD2IVmvBDVV1t4P7LMWMB/e9DP2vYtQQWfRnNx0=
Subject key identifier:   31:5E:94:7A:02:55:DB:3A:1B:DC:92:59:31:90:D0:69:15:B1:14:00
Authority key identifier: 78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F
Certificate issuer:       /CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
Certificate serial:       019612EAA5DCB4FD1A473850CC0A312EC76B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
Manifest number:          0C69
Signing time:             Tue 08 Apr 2025 01:01:29 +0000
Manifest this update:     Tue 08 Apr 2025 01:01:29 +0000
Manifest next update:     Wed 09 Apr 2025 01:01:29 +0000
Files and hashes:         1: eP0LaXd70F3N_JiULu3vuwaBKC8.crl (hash: OPrzvXJMDKiwMdcmr04E/dgNgKSgEmeJTKu1puivwW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 23:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:12:ea:a5:dc:b4:fd:1a:47:38:50:cc:0a:31:2e:c7:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
        Validity
            Not Before: Apr  8 01:01:29 2025 GMT
            Not After : Apr  9 01:01:29 2025 GMT
        Subject: CN=315e947a0255db3a1bdc92593190d06915b11400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8c:2a:20:a4:be:8f:7d:02:1f:2d:4f:ce:76:
                    90:9d:38:27:8b:0a:6f:f4:63:e4:bb:f9:8d:4e:b0:
                    bb:c1:6d:ae:00:b0:41:b9:90:32:8c:24:8b:31:14:
                    a9:89:5d:14:c4:31:e3:31:22:d3:4e:b1:16:f9:5e:
                    b2:29:7b:7c:55:f8:7e:de:96:e2:74:e0:e5:e5:a9:
                    22:ee:51:77:91:e3:d6:eb:8b:7e:da:69:10:91:4f:
                    5d:a9:8e:b6:41:9b:90:f5:5b:9c:46:24:35:fa:65:
                    e2:ad:99:f5:28:70:98:03:f5:8a:c8:3e:78:35:58:
                    67:af:bf:6b:5d:b7:a6:2d:84:42:35:cd:9f:9f:fb:
                    bb:aa:c9:2e:a2:bf:15:f1:4a:ee:f5:26:3b:f4:65:
                    67:45:2c:07:e7:9e:33:db:04:9e:d0:69:01:3f:c5:
                    ba:f7:19:21:57:48:5d:c9:90:33:8b:b5:31:78:90:
                    a2:af:95:76:95:53:a5:20:d8:77:db:e3:76:93:08:
                    8f:51:f9:c2:4f:96:10:8b:88:bd:83:da:e0:de:3e:
                    1d:7b:19:8c:9c:b9:c9:9c:2c:76:cf:79:d7:52:a2:
                    59:d9:70:e8:4d:64:5b:aa:34:81:a8:10:bb:3d:00:
                    2e:ee:6f:f6:69:46:a1:24:b0:f7:5c:34:16:48:a7:
                    40:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5E:94:7A:02:55:DB:3A:1B:DC:92:59:31:90:D0:69:15:B1:14:00
            X509v3 Authority Key Identifier:
                keyid:78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:cf:9f:12:6b:8d:c1:f9:fc:9a:0c:63:b2:07:e3:c9:84:dd:
         f3:49:29:c3:47:45:da:a5:51:bd:94:82:00:62:da:f2:4f:3f:
         3c:ca:71:1f:3c:85:6c:36:64:e3:11:fd:60:c2:62:67:88:a1:
         3d:b1:a5:ee:ac:90:be:73:7c:6e:19:64:5e:27:3d:1a:d7:d0:
         72:60:ea:65:1c:22:fd:0b:46:f2:07:41:67:a7:70:91:1c:be:
         28:20:fc:a4:e4:d2:24:8e:2f:49:fd:be:bf:f0:8c:68:45:2f:
         c2:41:7a:4c:4f:1c:23:19:63:4c:14:38:55:1b:35:1c:85:51:
         43:5c:57:ed:75:23:39:92:80:eb:5c:0d:1b:e6:bb:83:4f:a4:
         73:84:14:96:23:6e:06:09:45:48:0c:8f:d4:74:ae:86:18:40:
         57:8d:48:09:49:32:05:c9:60:08:66:dd:b1:3b:84:ba:59:e7:
         95:77:0b:84:0d:4a:44:81:89:77:03:03:70:be:ca:f9:c0:61:
         e2:14:9e:2c:48:a1:41:f4:89:89:9a:48:46:97:4d:37:47:67:
         2e:1b:fb:5f:44:2d:09:b7:29:3c:5a:20:fa:83:4a:a5:26:a0:
         d0:d1:a4:7f:c5:89:e8:38:34:0d:99:25:d4:a1:d3:34:49:f4:
         c5:e4:fa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:51:15 2025 by rpki-client