Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
File:                     RbUATsPPXBp1UYXW9AaDxkbMlOw.mft (raw, json)
Hash identifier:          bO3j3pqkmvwGtbehXfAg78WNwCMQM5kL1pzwMSk+2Js=
Subject key identifier:   62:13:D1:FA:2D:75:6B:C0:63:F2:03:54:6A:AA:45:55:46:B8:94:76
Authority key identifier: 45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
Certificate issuer:       /CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Certificate serial:       01964AB3FE10CBBCE067AA673C4721C5168F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
Manifest number:          0935
Signing time:             Fri 18 Apr 2025 21:00:31 +0000
Manifest this update:     Fri 18 Apr 2025 21:00:31 +0000
Manifest next update:     Sat 19 Apr 2025 21:00:31 +0000
Files and hashes:         1: RbUATsPPXBp1UYXW9AaDxkbMlOw.crl (hash: e8glNWJtJyXdS3Oomjeto2HmtFaEdVw0wXn77IQsPRM=)
                          2: cg41KOlM1vNAwrdMnvNHppcwT4c.roa (hash: QsQ4ZMCLxuolAifAsH1HBIsIugUjZ4tjy04rNn/2wxI=)
                          3: iuqsr8mDy4hdl6U1K1v1iSpNchQ.roa (hash: 1qvvVB0UpfZrwtI6t2Uw+kulc+5R7APEpoKz6kq0OuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:b3:fe:10:cb:bc:e0:67:aa:67:3c:47:21:c5:16:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
        Validity
            Not Before: Apr 18 21:00:31 2025 GMT
            Not After : Apr 19 21:00:31 2025 GMT
        Subject: CN=6213d1fa2d756bc063f203546aaa455546b89476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:86:a4:f8:f1:bb:2b:ee:5c:a0:a0:23:6e:f3:
                    74:d8:36:45:67:60:3e:b7:af:89:74:f0:d2:d8:6e:
                    a5:28:48:93:ef:06:f3:82:d2:b6:e8:4c:2a:43:d9:
                    0d:89:9c:6c:ad:90:4f:b7:16:b8:c0:fb:03:bd:8b:
                    10:3a:f8:48:82:98:1e:7f:50:2e:72:2d:f4:0d:eb:
                    25:28:d3:3e:c4:ef:3b:6d:a9:13:07:b7:a6:31:c7:
                    cd:26:15:ab:99:2b:ad:6b:43:80:78:01:64:35:af:
                    ce:7e:7e:64:7c:5c:73:09:e0:74:e3:8d:62:65:c9:
                    f4:a7:42:ef:21:96:72:89:32:82:33:e0:dd:4b:8b:
                    e9:40:d0:40:2b:d9:c6:a8:9c:59:34:84:3d:ae:12:
                    6f:6d:58:64:28:85:6d:66:10:b2:ee:28:9d:f6:31:
                    54:60:83:ac:c6:52:bb:c2:81:96:62:a5:65:28:05:
                    5e:8e:e1:7b:bd:e4:80:3f:7d:a2:6b:b6:d8:f2:56:
                    00:ae:56:a2:cc:ee:07:c8:9f:55:28:5a:0b:23:b9:
                    2e:c3:f5:9a:6a:fe:b9:aa:59:18:62:d6:6b:9a:58:
                    a6:5f:9c:85:a1:bb:fe:ce:a8:6e:52:a4:e3:aa:a0:
                    b3:92:1a:b3:fe:b1:d2:59:af:a9:61:66:f2:35:de:
                    0b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:13:D1:FA:2D:75:6B:C0:63:F2:03:54:6A:AA:45:55:46:B8:94:76
            X509v3 Authority Key Identifier:
                keyid:45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:39:b9:2c:41:15:eb:b4:05:cc:96:9f:d3:b9:a5:9e:a1:2b:
         7d:16:78:3f:1a:3f:c3:56:f8:55:e7:5b:f7:54:d3:cc:8e:d0:
         86:e2:66:45:17:ec:5a:9d:c8:ba:2c:b7:fa:de:34:4a:bb:e3:
         a8:2e:9d:ac:6a:58:d1:81:60:17:7d:b2:09:8a:50:72:53:3a:
         e4:28:94:ba:37:dd:f4:e0:dc:da:aa:6a:40:1d:be:2c:a1:8b:
         7c:69:8b:38:ef:0a:fb:bf:77:ea:09:55:07:f6:fd:b9:48:8f:
         6a:b3:68:70:da:d6:cc:89:62:6b:ae:e7:02:75:4a:85:da:03:
         8a:63:78:1d:0b:2f:51:9f:28:7a:f5:74:28:39:2c:1e:15:a0:
         b9:38:44:bf:ac:5a:d5:6a:ff:5a:4a:05:d0:b6:47:95:af:ff:
         10:97:d4:f6:81:8a:e0:50:79:41:3b:88:fd:a7:c9:f7:90:5f:
         04:8a:5c:8b:e2:7b:a7:9b:2e:1f:71:ef:84:65:76:5d:91:0f:
         ba:8f:df:64:ff:e9:2a:c1:87:2b:3a:a0:fa:11:3b:4e:fb:7d:
         df:6a:07:6e:f3:ec:3e:b5:de:5e:0a:d9:75:51:8e:61:c0:f0:
         66:c3:cb:83:c0:66:87:ec:4e:09:f7:23:ca:72:99:12:b3:03:
         04:01:3d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:53:33 2025 by rpki-client