Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
File:                     Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft (raw, json)
Hash identifier:          7jFpCFaxR4yzfPNKLY1p/JfxybPw1aqhFRoKBDOhSVM=
Subject key identifier:   55:C3:0D:4E:21:22:5E:07:83:88:41:CF:43:07:A8:13:69:E0:D2:9D
Authority key identifier: 4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
Certificate issuer:       /CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Certificate serial:       01964A7CBFE30560269C7D4E33D231B4ECDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
Manifest number:          148B
Signing time:             Fri 18 Apr 2025 20:00:11 +0000
Manifest this update:     Fri 18 Apr 2025 20:00:11 +0000
Manifest next update:     Sat 19 Apr 2025 20:00:11 +0000
Files and hashes:         1: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl (hash: OAX426dFGTjn2EjXjzYPztwKADCDAysfI1KkfyOO5rA=)
                          2: pXY7p3AnqDJfjALLmtVHw8U2GfM.roa (hash: ZUNXce9TBnEjmUfFa15l+WlhliqRz/AO8NwAB4Sid60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:7c:bf:e3:05:60:26:9c:7d:4e:33:d2:31:b4:ec:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
        Validity
            Not Before: Apr 18 20:00:11 2025 GMT
            Not After : Apr 19 20:00:11 2025 GMT
        Subject: CN=55c30d4e21225e07838841cf4307a81369e0d29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:46:05:fe:48:56:25:63:95:3a:78:3c:2a:
                    41:76:73:6f:5d:42:a4:62:b0:20:01:7b:08:e2:cb:
                    62:06:2e:58:60:2d:d4:2a:8f:8b:c1:39:1b:8d:11:
                    49:67:4f:f2:9f:bd:3e:7e:1f:d4:31:85:93:45:09:
                    65:71:03:ed:5e:f0:8f:36:ac:51:e3:3b:ae:db:fe:
                    e6:d2:e3:d8:98:c8:93:95:28:ff:46:85:fb:8c:99:
                    ba:44:aa:2c:b1:13:7a:a5:c9:25:d2:e3:9f:17:0d:
                    aa:48:d3:c6:3e:e7:72:ee:a0:00:f9:c7:30:ce:03:
                    bb:c4:49:90:c3:32:26:1d:ff:a9:6c:9f:17:38:c8:
                    99:af:9e:fa:6d:0f:45:de:35:e8:01:b1:7f:79:b6:
                    06:84:25:49:91:19:5f:a3:d2:70:bd:94:2a:77:1c:
                    10:fb:7d:35:31:2d:43:c4:18:f4:98:12:75:d7:25:
                    c0:47:a6:7a:a2:3b:c1:94:48:82:bb:44:0e:09:f9:
                    16:17:8f:32:77:37:11:7d:c3:7d:b0:ba:9e:66:5c:
                    c5:cd:d3:c4:3c:70:9b:3a:97:d9:c0:83:87:73:07:
                    0f:49:10:ef:85:fd:e8:e9:09:d0:af:a9:4d:bb:f4:
                    a7:a8:89:23:b6:5f:63:48:a0:07:0b:f8:21:47:a6:
                    f7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C3:0D:4E:21:22:5E:07:83:88:41:CF:43:07:A8:13:69:E0:D2:9D
            X509v3 Authority Key Identifier:
                keyid:4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:1f:a8:bd:b1:e3:98:d1:9b:05:d6:3b:f6:a4:0b:06:41:6e:
         0f:20:66:8f:7d:51:51:d9:e3:04:d4:a7:87:df:58:2d:de:09:
         fa:3f:20:8b:4c:17:f8:e5:7a:1e:be:13:37:6b:2f:c7:0d:0d:
         8e:57:47:18:23:b2:25:36:af:c5:85:15:30:3a:8c:71:7f:f9:
         5f:0b:e9:61:9f:2d:61:27:d8:7b:9c:a8:77:81:d2:16:6e:75:
         c6:60:12:28:2b:79:fb:2a:db:56:7a:ef:89:29:6b:5e:78:4d:
         0c:de:a9:c7:b8:fa:98:24:db:0e:3f:71:91:c9:2d:ac:15:8b:
         9a:4b:c6:44:18:ce:1d:fe:52:24:54:73:8a:ce:20:65:5b:4d:
         dd:16:00:99:68:e7:cd:16:50:84:29:80:ae:4c:12:e2:ee:04:
         4b:f6:65:d6:de:40:97:10:ea:50:c9:7f:0a:3f:ca:2c:67:58:
         7f:ba:f2:be:42:03:f0:c0:3b:24:8a:e2:2e:7e:68:75:82:c6:
         21:6f:7a:39:70:d8:3e:56:5d:b5:78:bb:73:1e:ab:42:3a:e5:
         c4:ed:3e:0d:76:ca:1a:2d:6d:46:17:a2:db:bd:ce:c5:c8:57:
         e0:67:4d:ad:0c:a7:28:0c:75:2c:a9:73:11:16:9b:df:1e:15:
         3a:1a:05:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:37:39 2025 by rpki-client