Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
File:                     Bt76ExH1P2xEFGPaj6s0A61ogBE.mft (raw, json)
Hash identifier:          474TL1RhdVwcvQGMK8IYR1Ebl3v9ukBw31TIVnUv730=
Subject key identifier:   19:D5:B5:22:05:CA:7A:94:5F:C0:8D:11:79:D3:8D:34:E0:86:64:3D
Authority key identifier: 06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
Certificate issuer:       /CN=06defa1311f53f6c441463da8fab3403ad688011
Certificate serial:       01958BF24C7DA35EF2967E6001CC76E5DA18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
Manifest number:          1494
Signing time:             Wed 12 Mar 2025 20:01:07 +0000
Manifest this update:     Wed 12 Mar 2025 20:01:07 +0000
Manifest next update:     Thu 13 Mar 2025 20:01:07 +0000
Files and hashes:         1: Bt76ExH1P2xEFGPaj6s0A61ogBE.crl (hash: jaPibMeuemg2SatSdKPVGo1YWP/yRy/YnbWBZ03ZTPI=)
                          2: psfbhPGIR9OS3HR7S3qur-oF2Wg.roa (hash: FlkCUGKA6sKM5xnwOPU8XOcnUGbtF79h6pPDmcgLJm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:f2:4c:7d:a3:5e:f2:96:7e:60:01:cc:76:e5:da:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06defa1311f53f6c441463da8fab3403ad688011
        Validity
            Not Before: Mar 12 20:01:07 2025 GMT
            Not After : Mar 13 20:01:07 2025 GMT
        Subject: CN=19d5b52205ca7a945fc08d1179d38d34e086643d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fe:90:41:a7:b7:83:2f:c9:3a:fa:63:20:5f:
                    43:d8:0c:6a:9a:2e:b7:2a:4f:f0:24:90:49:07:55:
                    ea:fc:2d:af:ae:68:b9:cb:a9:ef:b0:85:9a:5b:a4:
                    c6:7a:c8:cb:fc:05:6e:02:cf:05:da:ee:b7:a0:e1:
                    e1:a5:81:71:30:5d:fb:cf:c5:22:ab:33:48:e1:6f:
                    02:fd:ac:91:cb:96:90:5a:41:03:78:af:5d:40:be:
                    4f:b2:16:b5:ca:7f:f0:d7:ff:dd:37:4c:5a:fc:30:
                    33:4f:fe:99:57:9b:34:5f:ee:61:b6:fd:4b:c6:8c:
                    e5:7c:52:18:44:9d:4f:f9:45:59:9b:0d:69:ea:60:
                    f6:3b:83:19:45:5c:c7:7e:d7:b9:67:a8:63:3e:e9:
                    e6:1c:54:15:2a:2f:13:e9:8a:c5:26:c1:d6:82:06:
                    a0:3a:13:d8:25:74:19:e5:81:11:74:cc:b7:96:f7:
                    ee:25:82:fe:c1:15:69:dd:bc:d7:01:74:64:c8:32:
                    72:32:02:a0:03:b0:10:39:35:b7:ea:15:83:3a:5e:
                    41:07:97:0c:9e:4f:b6:40:52:1d:52:68:a5:b3:30:
                    93:d3:6b:29:8e:2d:04:0e:2d:94:4d:9b:14:08:ed:
                    91:d6:33:f7:15:42:08:77:23:24:e7:70:80:79:15:
                    22:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D5:B5:22:05:CA:7A:94:5F:C0:8D:11:79:D3:8D:34:E0:86:64:3D
            X509v3 Authority Key Identifier:
                keyid:06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:68:0c:d9:d2:f4:cb:c3:7b:b0:b4:0f:7a:7a:ba:a1:3f:c7:
         fd:3e:ae:7e:96:fd:a3:1b:7d:62:32:ff:12:b9:da:18:ff:0e:
         4a:82:d7:08:4b:48:ee:99:c7:a4:15:0f:e9:a0:d6:bb:f1:3d:
         51:4e:0a:b1:d2:cc:a8:9c:65:d7:1e:3d:23:b9:f9:2d:57:6a:
         b9:a8:98:86:da:15:8d:26:b6:f8:c4:d9:2a:96:30:78:2f:ed:
         8e:60:e1:1f:97:8c:c9:b1:46:70:c9:bb:30:b0:9c:b6:3c:4f:
         86:54:97:2b:51:02:4b:4d:0a:2a:d0:55:b6:13:6c:e2:71:ae:
         42:ef:55:3e:9d:49:9b:8a:32:eb:f9:c1:9b:e9:ec:d1:b6:5a:
         19:c2:30:9e:22:eb:51:76:90:ba:7f:52:0d:d1:98:1e:71:90:
         60:db:9a:41:9e:f9:64:cb:5f:f6:88:06:f4:4b:a3:66:d9:31:
         1f:72:0f:bd:f1:0f:03:66:41:91:a6:28:4e:72:5e:dc:03:65:
         32:ba:6c:5f:64:d9:94:d3:60:6c:93:99:d8:51:60:ea:4e:0f:
         61:b0:9d:95:4e:f8:7e:16:91:95:5c:56:1b:16:59:31:7f:07:
         fc:8b:ba:4c:d8:90:e8:64:1f:2b:3b:cc:cf:24:ae:fe:af:a1:
         e5:c3:ec:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:13 2025 by rpki-client