Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
File:                     BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json)
Hash identifier:          E9R3apI5I8c/oJ6AASdxk1imtpgqIrVBIjDaIvKxuBs=
Subject key identifier:   20:49:34:D2:BA:63:B7:54:09:62:8E:75:43:29:3F:CD:F7:7B:34:FD
Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
Certificate issuer:       /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Certificate serial:       01963C1D69E9D803E001BA62AD3BEE6ECB02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
Manifest number:          05C0
Signing time:             Wed 16 Apr 2025 01:01:22 +0000
Manifest this update:     Wed 16 Apr 2025 01:01:22 +0000
Manifest next update:     Thu 17 Apr 2025 01:01:22 +0000
Files and hashes:         1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: G68ErGEY2iVdqjLj7+H+Kq3qroJ8cXJNTnfRmlAOotQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3c:1d:69:e9:d8:03:e0:01:ba:62:ad:3b:ee:6e:cb:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
        Validity
            Not Before: Apr 16 01:01:22 2025 GMT
            Not After : Apr 17 01:01:22 2025 GMT
        Subject: CN=204934d2ba63b75409628e7543293fcdf77b34fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f1:35:ad:de:9b:c6:db:f0:b7:de:96:0d:2e:
                    fa:b6:aa:6e:f9:7b:03:c4:42:70:4f:9d:10:3d:9a:
                    15:0e:37:98:c3:8a:ac:9e:f0:9f:76:53:ed:2c:93:
                    f9:b9:5e:c9:5a:d2:0c:b8:0a:fe:d1:bf:97:2d:c6:
                    da:48:4a:9b:a9:11:dd:79:e6:6e:81:16:6f:81:79:
                    17:1c:f4:ac:0b:ef:5d:a3:1a:2d:63:55:d6:ba:a4:
                    ed:f2:bf:51:59:c8:b6:9b:02:ed:5f:c8:e8:5e:98:
                    01:2a:a9:77:46:e4:66:d6:4c:fd:a9:d6:50:f4:20:
                    ca:bd:f6:87:73:8d:d5:d9:84:30:39:12:30:12:03:
                    59:a9:c6:4f:b2:25:83:9f:3b:c1:f1:26:31:b4:93:
                    07:69:6f:6c:1a:df:3b:8d:7a:56:0f:9b:f8:0f:02:
                    54:28:10:f9:40:40:c1:a4:de:ed:c6:68:82:1f:e7:
                    a7:87:cc:9d:dc:6e:99:16:dc:30:40:ab:0b:44:40:
                    cd:c0:09:fe:4b:76:7b:c0:09:9a:b4:05:43:23:b9:
                    5e:f1:59:5c:59:e8:1c:eb:64:2e:48:d0:d2:4e:e0:
                    74:fc:b4:6a:a4:5e:01:90:04:c6:b3:9c:17:76:98:
                    89:d3:c2:93:7c:cb:7e:dd:33:94:54:24:d2:04:82:
                    45:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:49:34:D2:BA:63:B7:54:09:62:8E:75:43:29:3F:CD:F7:7B:34:FD
            X509v3 Authority Key Identifier:
                keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:5c:d6:21:0b:f7:71:3d:2a:c8:bb:fc:0b:4d:36:47:29:70:
         55:cc:ce:0e:fe:cb:2f:8a:58:b8:e2:3e:8b:73:89:2d:eb:12:
         4b:d5:d3:ad:a8:21:c4:3e:f5:2f:f1:d8:8c:40:fd:e4:4f:09:
         75:d5:23:01:4e:50:2a:f8:e3:f1:30:5b:36:52:6a:ab:25:b6:
         83:58:11:75:c0:b9:83:fc:5c:7f:c8:ca:d2:53:2d:48:e4:62:
         f1:be:5e:fb:d2:21:c8:a5:da:82:05:81:7c:26:d0:f4:e0:8f:
         a8:40:81:50:1b:05:02:69:ff:ec:76:76:c5:fe:a8:7b:fc:f6:
         39:e2:67:62:93:24:90:2b:60:e1:c3:85:5b:a9:22:ed:24:29:
         ec:f3:d0:21:2c:73:68:3e:e9:e9:86:ec:ca:55:62:c5:2c:3f:
         cc:b5:b0:bc:20:aa:2d:31:80:b0:fc:2a:df:a3:17:14:9b:39:
         73:24:71:42:f2:e8:fe:e0:57:e8:1b:ae:7a:d4:23:90:83:3e:
         52:fb:ce:54:05:7f:b0:84:69:c9:ed:b6:82:38:2a:02:23:d8:
         ed:6c:f1:56:92:20:d6:db:db:9a:81:0f:2f:ca:00:c6:b5:a8:
         f3:3a:64:7f:ec:a2:e7:dc:46:05:e6:22:20:78:10:b1:08:cf:
         95:3d:42:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:45:33 2025 by rpki-client