Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
File:                     8RqaRFV9Rv8tgIiiKIha_wANwqI.mft (raw, json)
Hash identifier:          Q6XGHcV1bTmN9IIFoTR08BjwFp7rKVAE0bZWy/1tKUg=
Subject key identifier:   82:1D:D7:7A:D6:58:39:B0:3C:96:48:BB:3D:5C:E2:49:4C:1B:17:57
Authority key identifier: F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2
Certificate issuer:       /CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
Certificate serial:       01964BFD7ACDEB7658F249605D6F50BA56C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
Manifest number:          0945
Signing time:             Sat 19 Apr 2025 03:00:25 +0000
Manifest this update:     Sat 19 Apr 2025 03:00:25 +0000
Manifest next update:     Sun 20 Apr 2025 03:00:25 +0000
Files and hashes:         1: 8RqaRFV9Rv8tgIiiKIha_wANwqI.crl (hash: ZSYa9wFCU+EkmXS0NKUeTj2DrcMz62B1imsQ/nIWwSk=)
                          2: TqtHjEwEgPXdT8pg7HJGWpoB6aI.roa (hash: JiojTj7/u167MnISfmEDzN29ADgR4Ig1J4bZKyBHw7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 03:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:fd:7a:cd:eb:76:58:f2:49:60:5d:6f:50:ba:56:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
        Validity
            Not Before: Apr 19 03:00:25 2025 GMT
            Not After : Apr 20 03:00:25 2025 GMT
        Subject: CN=821dd77ad65839b03c9648bb3d5ce2494c1b1757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f1:1a:f5:8c:1e:e8:e3:f3:f4:38:f4:b7:c7:
                    d8:26:1e:03:ff:db:58:d1:87:b4:78:c8:39:79:ea:
                    57:86:5d:ae:29:37:ea:19:df:ee:bb:d8:16:ef:a8:
                    20:dd:d2:86:41:5d:e3:0a:95:02:ae:52:3e:4f:9c:
                    0c:98:01:5b:31:ef:e2:04:cf:7a:5b:99:24:d8:af:
                    5d:fa:b8:c4:a8:6b:a9:44:9c:a7:66:f8:21:10:92:
                    a5:9a:cb:44:6c:5d:82:58:88:04:86:f5:7f:49:b2:
                    a0:da:34:4d:fc:81:2b:a6:6b:a7:38:c2:d3:d2:90:
                    c8:32:32:ec:52:be:eb:d2:4f:d9:e0:b4:e9:09:dc:
                    5b:a7:b6:d1:ac:3b:0e:04:d3:c4:19:93:59:be:4a:
                    3d:3d:26:50:ed:4c:6b:6c:70:76:55:98:0c:ed:42:
                    7f:8a:a7:f6:7e:de:ef:cb:4e:f2:f7:d3:7b:a2:89:
                    9e:16:d2:49:2d:7d:a1:f8:7a:9d:a0:f5:55:84:a4:
                    86:96:97:95:48:d8:2e:ea:33:6d:70:a1:58:6a:da:
                    ef:2f:4d:86:d8:8f:66:26:dd:56:5c:3b:76:b5:82:
                    22:1f:92:16:0f:df:27:2c:7b:fb:0d:3f:bd:87:a6:
                    23:7b:d4:91:93:4e:f2:92:2c:f0:b1:30:47:19:87:
                    e3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1D:D7:7A:D6:58:39:B0:3C:96:48:BB:3D:5C:E2:49:4C:1B:17:57
            X509v3 Authority Key Identifier:
                keyid:F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8c:78:b8:f4:ea:1c:11:74:c1:4c:43:95:85:26:b6:b9:b1:
         40:da:12:52:36:34:19:f2:4b:ca:72:2a:c5:12:a5:d2:9e:ed:
         b5:cf:bd:70:13:8a:7c:82:36:d6:c8:11:85:9e:10:de:95:cb:
         0a:76:21:05:2d:82:e4:45:f7:71:78:55:87:4d:19:c7:9c:15:
         a0:55:05:0d:e6:10:d4:9d:e8:26:ed:7a:0f:9b:a5:21:f3:b3:
         40:60:5d:32:7c:42:17:03:52:d9:27:1c:82:7b:6d:42:e5:36:
         81:88:65:e1:4a:b9:10:30:63:c4:cb:f9:4b:d5:40:a0:1f:d4:
         17:99:37:3f:d0:db:e4:2d:75:ec:70:15:37:38:69:24:43:1a:
         e5:a7:79:fa:76:02:24:3d:a0:a0:ef:bf:4e:7b:ba:92:e0:78:
         cd:40:3e:5a:e4:ed:d9:ea:61:bb:5f:e5:fb:85:3c:3e:2c:6d:
         e4:74:bb:20:86:31:b4:cd:70:c7:83:50:8d:4f:57:be:b2:55:
         4d:2e:6a:d0:b6:d1:f8:14:7f:70:4e:f3:d1:78:c5:91:ec:34:
         b4:14:bb:eb:11:74:8b:c4:8b:48:cf:7b:7e:f5:3a:53:fe:38:
         5c:31:de:ff:5e:aa:2f:6d:39:05:f7:02:e0:30:b9:8b:f0:3e:
         2d:25:92:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:13:32 2025 by rpki-client