Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
File:                     Jo42omah9d-VuWprWNoRwjVNtV0.mft (raw, json)
Hash identifier:          VdN8mqN+Pes8+6uGshGxPfKSMtEnLI9gwYy8I+XD8HI=
Subject key identifier:   12:B9:C0:E5:C6:65:26:4B:8B:E4:7E:E0:73:84:F7:FB:FC:E0:2D:08
Authority key identifier: 26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D
Certificate issuer:       /CN=268e36a266a1f5df95b96a6b58da11c2354db55d
Certificate serial:       019645C55CA4C105456D2018D2244299EE80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
Manifest number:          089B
Signing time:             Thu 17 Apr 2025 22:01:24 +0000
Manifest this update:     Thu 17 Apr 2025 22:01:24 +0000
Manifest next update:     Fri 18 Apr 2025 22:01:24 +0000
Files and hashes:         1: Jo42omah9d-VuWprWNoRwjVNtV0.crl (hash: fgfrS5E0tNlW+YxAUm9BEpwUj/1CTElFZcaaBfMa62Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 18:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:c5:5c:a4:c1:05:45:6d:20:18:d2:24:42:99:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268e36a266a1f5df95b96a6b58da11c2354db55d
        Validity
            Not Before: Apr 17 22:01:24 2025 GMT
            Not After : Apr 18 22:01:24 2025 GMT
        Subject: CN=12b9c0e5c665264b8be47ee07384f7fbfce02d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:be:89:9a:0d:bb:5d:10:d7:5b:66:b2:c9:75:
                    3d:ea:ad:d4:8d:c7:1e:54:0d:4d:43:ab:d9:c4:c6:
                    55:94:71:c0:2f:c5:c4:e5:92:93:2b:4a:15:53:f2:
                    86:a7:c1:04:fd:c5:fc:55:4a:d2:21:9a:1d:8f:9f:
                    21:11:fc:13:8c:ce:8d:e8:4a:9a:d3:20:58:e0:e3:
                    e4:8f:51:18:2f:b1:1d:97:b4:c6:a1:68:48:99:40:
                    02:f5:c2:b3:5b:b8:be:0a:86:07:c9:d3:c6:4b:77:
                    5d:5c:8c:de:cb:79:ba:22:10:8f:7a:6d:1f:3a:82:
                    45:4c:75:fc:c9:95:ee:4b:59:c2:64:c5:62:bd:3e:
                    aa:f8:f7:7a:91:f1:8f:e4:57:38:3c:38:6f:11:86:
                    df:fe:96:14:c7:e9:93:b8:db:f2:23:d6:69:2e:e7:
                    ff:da:e4:63:60:3c:63:f1:55:35:aa:b9:1b:28:c7:
                    21:d7:27:77:56:1e:d0:f3:a6:c8:4b:1b:26:d8:9c:
                    3d:a0:ae:d2:ee:93:fc:40:48:ba:72:53:97:ce:5a:
                    b0:f2:33:c5:1a:75:9a:86:eb:61:06:af:7c:4f:19:
                    6c:82:7b:47:5b:00:19:86:97:08:32:df:73:e4:bc:
                    9e:b8:fb:03:91:fc:67:06:62:57:18:67:26:1e:53:
                    72:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B9:C0:E5:C6:65:26:4B:8B:E4:7E:E0:73:84:F7:FB:FC:E0:2D:08
            X509v3 Authority Key Identifier:
                keyid:26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:df:3b:61:e4:c5:28:3d:d7:ce:b2:4a:2a:bd:0d:30:1b:ea:
         3b:4e:0e:3f:69:8d:5e:31:2c:50:b1:d0:b3:cd:a1:b9:b9:f9:
         47:d5:50:01:23:20:77:65:6a:48:0d:39:18:52:0d:4b:87:60:
         c9:d0:7c:45:47:4c:66:d6:07:01:ea:87:18:44:fe:e5:b6:73:
         a6:16:cc:cf:d0:c9:c1:b4:c1:d6:b8:13:ab:f1:56:fe:df:0e:
         ae:3f:84:bc:16:73:10:d2:b7:e3:46:02:72:ab:d9:b9:bf:5d:
         cc:db:55:77:c0:97:11:36:b7:e2:b4:6f:6c:f5:73:0d:a4:60:
         db:17:e0:0b:ed:7a:b6:02:0d:af:68:1c:a0:69:7c:ec:73:af:
         74:a8:b5:ea:58:c9:8a:92:32:e0:f0:6f:5c:18:d2:36:59:17:
         83:41:6c:7e:e8:47:9e:ba:6f:3c:03:b2:20:b4:55:af:9f:63:
         93:39:78:15:90:ab:32:5d:aa:58:b0:0d:5f:3f:bd:ec:d4:40:
         94:6f:2b:af:74:5f:b5:0b:2a:9d:7d:71:67:b6:9a:97:cf:ee:
         e0:d7:c4:48:cc:3e:a4:83:76:f2:77:0f:38:f8:05:c2:30:0b:
         96:0f:e1:6d:c2:a1:8b:e0:3d:53:d1:ec:45:22:16:eb:24:3c:
         87:87:78:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:11:19 2025 by rpki-client