Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
File:                     Vf5QzPzvDofMGfgswJK7m3mj468.mft (raw, json)
Hash identifier:          2aEHKu3FOTEG3XRJLSRp6n3f9VUWwNDTUN/Tc6AhGRE=
Subject key identifier:   4E:1D:76:07:FC:CB:C7:8B:09:2A:81:DF:84:DD:04:95:C0:7B:FB:03
Authority key identifier: 55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
Certificate issuer:       /CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
Certificate serial:       01958C97517DF15B44923C7B669FC014822B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
Manifest number:          0286
Signing time:             Wed 12 Mar 2025 23:01:21 +0000
Manifest this update:     Wed 12 Mar 2025 23:01:21 +0000
Manifest next update:     Thu 13 Mar 2025 23:01:21 +0000
Files and hashes:         1: FzOWVnk6UyMtU7jUCjfT7xK7jUs.roa (hash: AAnWtLc0XNLDmh8MKuv5G+x9dydvMeajmyOK9NO07jQ=)
                          2: Vf5QzPzvDofMGfgswJK7m3mj468.crl (hash: R60r2u4E6la3jas/SO89dctGjc5yz0E44T8VdC0oZzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:97:51:7d:f1:5b:44:92:3c:7b:66:9f:c0:14:82:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
        Validity
            Not Before: Mar 12 23:01:21 2025 GMT
            Not After : Mar 13 23:01:21 2025 GMT
        Subject: CN=4e1d7607fccbc78b092a81df84dd0495c07bfb03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:82:2e:47:82:0e:ca:56:7a:eb:e7:a9:b6:54:
                    03:a5:97:d5:d1:0c:01:8f:dd:7e:9c:f2:b6:f6:57:
                    8e:c5:57:8b:7e:b5:f8:5d:23:4b:30:d8:ee:90:1f:
                    66:16:6c:c9:0a:0c:eb:e0:7b:93:15:99:45:c2:11:
                    11:5a:cd:05:39:b2:3d:36:a1:39:53:40:4c:59:2f:
                    8a:cf:97:f6:a9:96:01:2e:4e:99:0a:a6:80:d7:65:
                    e1:57:00:b6:88:3b:ee:3a:bc:a0:13:f4:1d:f8:3c:
                    5c:65:6b:d6:58:f7:b7:c7:93:87:e7:3e:10:cc:a1:
                    ee:5f:ad:92:e2:84:09:cf:d1:f0:aa:c9:e4:d5:27:
                    9a:c9:19:46:0c:3f:52:44:72:97:e7:69:b9:58:1b:
                    e0:ef:99:01:d1:67:7c:87:9f:82:d0:f2:c4:3f:8a:
                    3a:e2:10:11:f9:b1:93:d9:04:29:17:1f:80:2d:75:
                    43:47:26:60:36:55:de:74:fd:e9:05:e5:22:57:6e:
                    a3:0c:29:b0:66:78:b6:c5:1d:b5:6f:7a:af:8f:f6:
                    ea:2d:f1:ba:b0:03:24:73:5a:f6:d7:6a:d1:03:2a:
                    58:94:2d:f4:0d:6f:8c:31:68:f9:ef:62:f0:0c:a0:
                    15:a4:2d:e7:f3:9b:b6:d2:34:44:90:28:ca:0e:d0:
                    c2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1D:76:07:FC:CB:C7:8B:09:2A:81:DF:84:DD:04:95:C0:7B:FB:03
            X509v3 Authority Key Identifier:
                keyid:55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:33:16:45:7c:e5:a0:78:15:55:d8:7b:ac:25:56:89:95:5d:
         92:0d:33:e6:65:65:8b:68:4d:92:32:4e:d2:37:31:43:4b:5e:
         5b:6b:7a:78:d6:b6:aa:cd:f8:ec:3a:9f:c9:84:ac:1f:30:24:
         d5:41:86:17:c2:4f:a6:01:32:1c:33:7e:1f:0a:0c:cc:78:1d:
         82:c2:da:ca:8d:e2:be:9b:3c:00:e0:3f:c2:0d:7e:6c:bc:95:
         65:24:a2:b9:21:14:e3:4b:d8:be:64:04:24:09:71:c3:0d:84:
         ae:a3:fb:1f:fa:10:b2:a0:2a:c3:e7:e7:eb:c5:cc:99:fd:fe:
         9e:01:27:11:77:c5:48:77:55:d8:e8:57:32:f2:37:98:9f:4a:
         bf:f7:db:c4:60:b3:71:8a:94:bc:83:a9:1b:36:6c:98:e0:c5:
         36:11:93:f7:ab:b5:1f:70:72:d1:9e:32:dd:9f:4d:3f:a1:5e:
         e5:a3:7b:06:bc:17:44:d4:77:4c:13:e4:d5:08:1b:88:a0:07:
         b6:ea:b5:f6:e4:56:40:16:3e:d3:a2:f6:a6:ae:f1:47:29:be:
         d3:b6:33:f1:4c:03:c5:85:61:c5:69:e2:8c:3c:6a:a1:26:c5:
         69:aa:a2:c8:a7:11:67:05:98:5d:e9:58:71:47:2d:72:ba:2a:
         d4:6a:45:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:50 2025 by rpki-client