Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
File:                     L7GbEAHBEHH7osw0FMxHW2wpCcc.mft (raw, json)
Hash identifier:          ZvT8q3rH4XomZM/CdzE5cIIOAxnU1Hqvw+SpYvi4kkA=
Subject key identifier:   37:DB:A1:F8:BD:1A:1D:0D:41:4C:31:2A:E6:C0:51:EB:B4:CC:D3:C8
Authority key identifier: 2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
Certificate issuer:       /CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Certificate serial:       01964FDAF6DB24BCF0F38099DCD9452F2A7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
Manifest number:          14F6
Signing time:             Sat 19 Apr 2025 21:01:12 +0000
Manifest this update:     Sat 19 Apr 2025 21:01:12 +0000
Manifest next update:     Sun 20 Apr 2025 21:01:12 +0000
Files and hashes:         1: L7GbEAHBEHH7osw0FMxHW2wpCcc.crl (hash: kmT9uQY0hkcXzX2GhZ7D1pjYV2Uk1gz3YpXrLgYPlVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:da:f6:db:24:bc:f0:f3:80:99:dc:d9:45:2f:2a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
        Validity
            Not Before: Apr 19 21:01:12 2025 GMT
            Not After : Apr 20 21:01:12 2025 GMT
        Subject: CN=37dba1f8bd1a1d0d414c312ae6c051ebb4ccd3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1f:be:5d:da:3d:5e:b5:a8:16:a3:80:61:62:
                    53:a2:2f:b3:cc:6c:8e:56:55:3c:7b:1c:86:56:9a:
                    4a:0c:c1:92:a2:57:11:69:f1:08:4c:3d:22:5f:72:
                    bc:5e:c3:fd:17:55:68:ee:e8:70:8e:bd:43:6b:02:
                    6d:78:a6:c1:00:29:57:05:1f:19:b8:c5:d4:6a:4f:
                    8a:cd:9c:56:eb:fd:63:e1:ef:da:20:09:fa:66:7b:
                    80:b3:75:b0:3a:10:2d:44:2e:7d:a4:55:95:c7:78:
                    93:07:ee:95:f9:fc:f5:84:03:85:4c:1c:87:e4:3e:
                    4f:34:fe:31:07:69:a9:10:d8:a3:1f:ea:c9:27:a8:
                    d2:f8:76:62:0b:39:f9:21:5b:97:e1:82:be:54:99:
                    d1:a1:ec:d3:f2:1f:f0:b7:12:bb:c2:2d:57:11:10:
                    a9:b9:55:5f:07:a8:e8:dd:f3:02:5a:60:7a:eb:c6:
                    cf:82:a6:36:a4:fe:4e:94:58:24:35:35:42:55:39:
                    de:44:d0:27:70:71:93:ea:da:cc:1b:96:78:f4:5c:
                    68:bd:19:6e:4f:d7:fc:8d:2a:56:68:6e:9d:d1:b1:
                    f1:e2:2a:63:f3:88:ab:00:33:c9:c5:69:4c:40:d4:
                    d8:f1:fa:bb:b1:ec:da:ee:1d:b3:6b:0b:13:6c:db:
                    11:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DB:A1:F8:BD:1A:1D:0D:41:4C:31:2A:E6:C0:51:EB:B4:CC:D3:C8
            X509v3 Authority Key Identifier:
                keyid:2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:67:08:89:5d:9a:f5:d3:62:04:b1:e4:a9:2c:57:03:c8:5e:
         f6:3f:2a:8a:c3:6e:7e:e7:19:e2:f5:de:f0:05:f3:30:e0:fd:
         05:1b:39:c6:60:59:9f:e2:e3:d7:f6:4d:a7:d3:d5:04:bd:95:
         91:62:8b:bb:a8:6d:a3:7a:f9:a9:13:66:4a:45:89:a6:de:a3:
         fa:7b:68:d3:cc:37:d1:c2:1d:45:5f:89:31:bc:0c:c6:9e:56:
         4f:fb:83:9d:cc:46:a6:74:38:83:3f:79:eb:96:dc:7e:34:57:
         7e:ce:a5:22:4a:c1:c5:76:80:eb:10:f6:04:28:31:d6:62:3b:
         50:39:13:27:8a:94:86:61:9a:9f:41:a5:f9:15:52:2a:70:e8:
         02:61:c9:b6:8a:e5:d4:44:20:db:10:b3:21:e7:1a:75:52:ee:
         24:c8:ee:88:48:49:de:67:ba:9f:84:47:7a:77:aa:d6:2f:f5:
         eb:a5:b0:9a:14:40:96:ad:7d:b9:77:6d:8d:d8:ad:58:c9:92:
         b0:7d:ba:28:89:b0:e6:30:96:49:79:62:af:40:ad:b2:26:33:
         7f:9a:e5:ce:0f:c1:33:40:b3:86:66:22:71:2a:ff:d6:ea:e4:
         9d:e4:28:69:ea:07:8d:e3:fc:ae:80:ca:be:03:37:e2:81:70:
         76:9c:66:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:12:15 2025 by rpki-client