Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
File:                     0LkE317sIhazQwFsXLJLuQpD06Q.mft (raw, json)
Hash identifier:          lPLx8tugV3+8wz6im4B0U90GUp/L8wmFOGUwNL+xI4A=
Subject key identifier:   B1:8A:27:BA:29:BE:CA:91:04:2E:75:CD:04:ED:79:5E:CE:3C:79:43
Authority key identifier: D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
Certificate issuer:       /CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Certificate serial:       01964A467A078216D4921AE7D91E4BCB4857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
Manifest number:          14F5
Signing time:             Fri 18 Apr 2025 19:00:54 +0000
Manifest this update:     Fri 18 Apr 2025 19:00:54 +0000
Manifest next update:     Sat 19 Apr 2025 19:00:54 +0000
Files and hashes:         1: 0LkE317sIhazQwFsXLJLuQpD06Q.crl (hash: pT/sTs2/r555AKl6vEQ3gSJc50PLeiNLirXxU7libVM=)
                          2: NrSqEKUOU2XauV-i5XcFK6G4SDE.roa (hash: QbfLyNgfhw89ncOBcXtsqNeuurH1zO/6qaF1UEA+u6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:46:7a:07:82:16:d4:92:1a:e7:d9:1e:4b:cb:48:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
        Validity
            Not Before: Apr 18 19:00:54 2025 GMT
            Not After : Apr 19 19:00:54 2025 GMT
        Subject: CN=b18a27ba29beca91042e75cd04ed795ece3c7943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1f:fd:89:7d:c6:a1:da:ed:e5:32:d1:f7:27:
                    86:92:14:9e:c7:31:01:1e:ae:53:15:ad:c2:ed:88:
                    52:7b:c0:81:e2:94:9b:00:d6:14:62:0c:9e:39:76:
                    b0:d6:55:76:b9:b9:d8:92:41:58:1b:2f:be:64:63:
                    3e:3f:fa:c3:2f:30:cb:62:b6:e5:08:f9:e6:c6:6a:
                    35:72:23:c2:0b:3a:2c:19:a6:37:82:04:71:4a:b7:
                    71:fa:1f:7a:6d:fd:89:51:11:41:92:4b:5b:f2:d8:
                    56:0e:d8:6c:08:f0:b5:29:db:7e:cf:84:ba:81:97:
                    fa:9b:96:e7:76:0e:e3:75:7f:7c:c1:44:e5:c1:05:
                    02:a8:12:85:98:73:e1:0b:06:c3:2d:66:52:bf:a1:
                    04:0c:a7:15:d7:2d:4d:e6:92:51:06:48:b1:12:4f:
                    2e:e1:d5:49:23:19:e6:8b:d0:e7:0f:25:fd:a0:af:
                    b1:cc:66:7e:1d:81:6e:30:02:83:ac:c3:32:dc:b9:
                    05:a8:46:f8:75:40:1e:a9:2b:ba:a4:b0:10:a8:fb:
                    df:c0:36:3a:90:67:a7:1b:6f:37:c1:b7:d0:fe:01:
                    ae:fc:f0:6f:8b:e7:14:9c:a6:12:7e:3f:b4:e8:01:
                    84:b1:f2:31:d2:bd:6e:bd:f4:35:3b:af:e5:0d:17:
                    8b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8A:27:BA:29:BE:CA:91:04:2E:75:CD:04:ED:79:5E:CE:3C:79:43
            X509v3 Authority Key Identifier:
                keyid:D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:55:9b:20:60:36:ee:3f:80:0d:bd:d9:ea:33:ed:b4:08:24:
         06:b8:e0:c4:fd:c5:c7:94:c9:3a:e4:f6:e7:73:b3:bd:a8:b8:
         95:16:71:7c:f4:e9:f0:79:1d:eb:8c:03:70:35:4e:5b:7e:ae:
         34:cd:e8:af:cb:8c:37:cb:4b:d7:fe:92:85:22:f2:68:84:f7:
         5d:d1:d1:1c:5c:12:19:93:23:9a:bf:12:c3:76:36:7a:b4:3a:
         c5:48:ef:ba:a8:e8:93:f4:a7:f0:f5:c3:60:80:b4:af:9d:83:
         3c:4e:4a:eb:34:94:d5:e4:0e:ee:47:0a:2d:21:af:7d:42:f4:
         d0:b9:ce:ec:6d:a4:4f:4d:6d:e0:ad:31:a9:aa:27:2d:55:d2:
         e5:dd:48:a5:55:0f:01:a6:0c:6d:26:3c:32:e3:62:f2:59:70:
         96:7d:25:8b:b6:bb:9f:46:19:49:92:3a:53:b9:e2:8b:f1:1a:
         e2:f6:ce:30:87:8d:57:59:aa:9f:ae:45:a5:ad:4b:c8:75:65:
         24:0c:8c:00:ba:42:01:4a:5b:54:36:46:89:c5:77:79:f5:e6:
         52:22:41:57:91:7b:32:ef:52:c5:e4:d3:5c:9a:b7:2b:ee:33:
         4e:95:28:f7:1f:50:36:98:37:13:e4:c8:44:48:c0:2b:8a:e1:
         cb:cb:3c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:34:06 2025 by rpki-client