Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
File:                     9n1n2ohguDIsTyBNYRsAYTjxs5E.mft (raw, json)
Hash identifier:          b5EyO3i5LtbQHGSBMSXdBE9izgKYCJQ5Yf3xsvoIG6w=
Subject key identifier:   0B:89:B1:D9:E1:75:D8:D4:88:B3:ED:7C:42:4D:29:41:64:44:80:7F
Authority key identifier: F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
Certificate issuer:       /CN=f67d67da8860b8322c4f204d611b006138f1b391
Certificate serial:       019651FFDD372A91CD75444315FE61049BB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
Manifest number:          01FB
Signing time:             Sun 20 Apr 2025 07:00:44 +0000
Manifest this update:     Sun 20 Apr 2025 07:00:44 +0000
Manifest next update:     Mon 21 Apr 2025 07:00:44 +0000
Files and hashes:         1: 9n1n2ohguDIsTyBNYRsAYTjxs5E.crl (hash: uP1dRRsBI8wSSCecwYOO0+aRJAqJC+gXuT+JRdrp3VA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:ff:dd:37:2a:91:cd:75:44:43:15:fe:61:04:9b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f67d67da8860b8322c4f204d611b006138f1b391
        Validity
            Not Before: Apr 20 07:00:44 2025 GMT
            Not After : Apr 21 07:00:44 2025 GMT
        Subject: CN=0b89b1d9e175d8d488b3ed7c424d29416444807f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:23:fb:7a:aa:89:73:aa:42:63:7c:a9:19:48:
                    18:db:17:26:22:16:f1:d2:63:f2:01:10:8b:1f:f5:
                    76:70:f3:bf:b0:00:ec:e0:3f:83:54:60:e8:d2:82:
                    21:e3:d4:52:f3:43:c7:4a:90:dc:0c:5e:18:0c:63:
                    96:f8:5b:48:13:ed:75:a6:25:f5:d0:9d:5a:ac:60:
                    38:20:00:c0:51:b7:7f:65:3b:5e:c0:47:6b:88:a0:
                    2a:40:22:ce:2d:b4:cc:fd:61:f5:24:06:83:33:1e:
                    bd:b1:e1:29:88:3a:f4:b6:12:62:c8:18:3e:04:5d:
                    ad:51:eb:ed:f3:c4:fe:54:fc:3d:ce:76:10:52:17:
                    43:dc:7b:2a:60:8c:f5:c3:3b:6d:88:49:f2:c9:69:
                    04:50:82:0a:7c:46:77:41:80:ca:f0:2d:4b:1d:11:
                    e1:00:3c:ba:07:e4:1b:69:5a:6d:3a:f1:97:03:c1:
                    03:20:a3:2a:f4:59:1c:9c:98:61:e3:9c:5b:72:28:
                    a5:26:da:bc:7e:08:02:43:99:b9:5d:31:2d:06:ba:
                    d9:8e:fe:1e:12:5c:ea:a7:99:e0:1b:77:3c:1a:15:
                    60:d9:3c:b5:0a:e4:2d:44:dd:5e:91:c5:22:d1:91:
                    de:47:32:80:43:07:2e:6e:eb:f7:05:13:be:d8:8e:
                    47:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:89:B1:D9:E1:75:D8:D4:88:B3:ED:7C:42:4D:29:41:64:44:80:7F
            X509v3 Authority Key Identifier:
                keyid:F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:14:e0:43:ac:ef:1c:d6:dd:56:60:7d:07:81:f7:db:16:63:
         bd:46:ed:1c:0b:30:50:be:f9:68:a7:4b:85:61:18:b9:4c:c4:
         42:df:80:e3:1c:01:8a:85:4d:9a:f9:62:06:4a:2c:03:97:47:
         8b:b3:6f:62:cd:92:1a:23:99:71:76:b7:32:c6:c8:17:91:43:
         8b:7c:6c:fd:5b:9c:b2:a1:a9:50:f2:9a:d3:29:0f:92:48:40:
         3f:af:47:f9:e3:62:2e:97:02:eb:56:a2:e4:c1:f1:e4:c6:c7:
         cc:ad:4e:b9:2e:54:08:88:8f:3c:ab:e8:42:92:d2:77:b2:94:
         92:18:8a:28:67:b3:99:33:07:b2:74:72:aa:4a:c0:ac:28:0f:
         c2:47:57:2b:67:b8:f2:c5:1f:2f:80:21:eb:2d:ed:ed:15:dc:
         28:4a:97:b1:8d:2b:6a:d1:52:6b:1f:2e:42:f5:ce:6c:b2:86:
         d2:26:ac:4a:6b:99:8a:22:29:54:a6:72:8b:4a:dc:61:4b:e9:
         52:41:3c:a9:57:84:bb:15:a5:32:65:8c:7c:d2:06:f5:f7:76:
         b5:47:85:19:88:46:c3:86:bb:1f:53:30:d9:42:be:76:25:43:
         25:88:c5:eb:2b:5e:dc:32:2d:d9:77:d6:6d:c4:f1:fd:55:81:
         e1:f5:0f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:45 2025 by rpki-client