Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
File:                     Fd3Uydwj-sNVdPzitClDmK3YUhw.mft (raw, json)
Hash identifier:          xoDl8pvFrGOZwV5T8JBjlvatNAPBXZBMVT0fgRFhIvM=
Subject key identifier:   02:32:30:8C:DC:1A:3B:45:EA:B7:25:AE:D0:66:CD:01:9F:FF:33:03
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Certificate issuer:       /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial:       0196398964C79EBADD06C2C05E6212D5BBA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
Manifest number:          0C89
Signing time:             Tue 15 Apr 2025 13:00:27 +0000
Manifest this update:     Tue 15 Apr 2025 13:00:27 +0000
Manifest next update:     Wed 16 Apr 2025 13:00:27 +0000
Files and hashes:         1: 2elU8M79ZokIDRQA4FCMvXhZ_30.roa (hash: xpy/QNiCAMomRGDsG3lcQqLW5mZVYEG99RtMqAQeBgw=)
                          2: Fd3Uydwj-sNVdPzitClDmK3YUhw.crl (hash: N58A0ogNIf/hnLj/Nw7tOkr6vvYP+CkGWZInmCHQCNQ=)
                          3: aivWngKJz6YVhMe876fRwO2Pwak.roa (hash: QrxS5tWIMxcDOD99WB/oU0c4ZizRW8rYWP871u28/z4=)
                          4: kgsIk8ju0wKKr0nkwVgHsRJydGg.roa (hash: 22cjkPvdduHGA9XlrCi4AiJihfCCZjAqzu2Hbki4taU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:39:89:64:c7:9e:ba:dd:06:c2:c0:5e:62:12:d5:bb:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
        Validity
            Not Before: Apr 15 13:00:27 2025 GMT
            Not After : Apr 16 13:00:27 2025 GMT
        Subject: CN=0232308cdc1a3b45eab725aed066cd019fff3303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:6b:36:e6:8e:f8:94:65:51:bf:2f:8e:35:
                    09:0d:f8:df:cb:6e:0f:56:52:79:a6:69:69:ec:69:
                    8c:93:23:d4:4e:5c:17:e3:66:c3:69:5d:67:4a:de:
                    e7:7b:76:95:8d:45:dd:b0:f9:78:99:dc:3c:73:9e:
                    b1:b3:a3:e1:5e:ef:71:b9:d4:0f:1e:b6:7b:bf:ed:
                    19:80:a4:d9:90:06:8b:93:9b:fb:d2:31:f0:e1:8d:
                    54:7c:fd:93:02:fb:d9:12:b2:be:30:07:3b:a1:ae:
                    55:2a:cf:7b:ff:b5:de:13:3f:e4:fb:12:5c:cd:c7:
                    c3:e6:bc:e1:14:b3:44:59:0f:73:01:22:d7:e0:79:
                    e6:8d:d5:66:92:ef:75:86:ae:33:55:48:cf:4d:ad:
                    73:72:49:60:b2:4a:bd:bb:6c:59:c0:92:6d:14:a9:
                    bc:9a:02:c8:6d:b9:d2:db:e3:03:f1:c9:a4:48:6f:
                    d1:d2:23:d7:c0:f6:37:21:a2:54:05:2d:22:f2:1c:
                    27:92:b8:96:b5:0b:d1:99:8f:0b:18:43:3b:e8:e0:
                    14:bb:b0:e8:e2:62:30:64:70:fa:4c:a2:11:e0:d4:
                    25:73:da:b3:68:c3:94:57:72:4a:77:cc:07:c4:97:
                    d6:c2:b6:db:2e:45:e0:13:62:92:32:09:f4:4d:64:
                    77:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:32:30:8C:DC:1A:3B:45:EA:B7:25:AE:D0:66:CD:01:9F:FF:33:03
            X509v3 Authority Key Identifier:
                keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e4:23:3f:2f:a0:7b:00:6d:b2:04:14:58:71:d8:76:f3:0d:
         22:c6:33:af:09:92:7b:ae:5e:b5:a5:04:c2:bf:14:63:15:96:
         71:7a:26:5a:e6:04:30:28:70:e5:af:ff:c8:4f:b5:2d:86:cc:
         b3:e8:15:b9:67:a3:6d:56:49:b8:3e:74:fe:26:bf:cd:9a:3a:
         39:04:f6:8a:6e:f9:a1:c4:31:2d:d5:1e:03:ef:60:45:56:64:
         67:36:db:fa:cb:45:6a:1b:9b:43:16:07:d4:5b:49:31:91:41:
         71:e8:7e:97:a3:06:10:ba:e2:ed:b1:56:de:d2:85:0b:49:ee:
         b3:c6:06:8d:31:33:ad:5e:aa:7e:aa:92:e0:7c:c0:c5:ba:2c:
         48:1d:10:91:24:d5:0d:73:6b:04:9a:4e:95:f9:be:f2:e9:c5:
         a5:81:cf:c7:77:94:26:ef:94:11:3d:18:c8:8a:7b:52:7e:0a:
         b7:17:7f:e0:db:b0:19:d8:4b:a5:73:e4:68:ec:60:8e:a4:43:
         af:0b:66:98:eb:5b:81:3e:10:c4:3f:47:10:f5:9f:14:dc:e5:
         6c:11:18:e3:a8:93:7d:75:83:d7:3a:05:1b:c0:d2:dd:71:6a:
         06:1c:3e:36:ec:a8:f4:f9:67:64:2e:fa:86:34:c7:ee:df:57:
         39:1a:d3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:23:44 2025 by rpki-client