Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.mft
File:                     iGueLpgWv6rZz8yAbo39KCT1A0Q.mft (raw, json)
Hash identifier:          D1KyG4H2cNgjopnfVIwHr/QoJeptD0VSOQlZbTSOIjQ=
Subject key identifier:   ED:BF:AC:35:AB:15:1F:85:2B:7F:E1:A3:75:4A:E2:E2:95:E3:74:5B
Authority key identifier: 88:6B:9E:2E:98:16:BF:AA:D9:CF:CC:80:6E:8D:FD:28:24:F5:03:44
Certificate issuer:       /CN=886b9e2e9816bfaad9cfcc806e8dfd2824f50344
Certificate serial:       01965794793D52BDCD547F1B93055A73AFE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iGueLpgWv6rZz8yAbo39KCT1A0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.mft
Manifest number:          0C5C
Signing time:             Mon 21 Apr 2025 09:01:10 +0000
Manifest this update:     Mon 21 Apr 2025 09:01:10 +0000
Manifest next update:     Tue 22 Apr 2025 09:01:10 +0000
Files and hashes:         1: iGueLpgWv6rZz8yAbo39KCT1A0Q.crl (hash: BVDcxhypfBUnTljgXffcOULjh4+tLRtq1zw6J7MZWz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iGueLpgWv6rZz8yAbo39KCT1A0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 09:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:57:94:79:3d:52:bd:cd:54:7f:1b:93:05:5a:73:af:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=886b9e2e9816bfaad9cfcc806e8dfd2824f50344
        Validity
            Not Before: Apr 21 09:01:10 2025 GMT
            Not After : Apr 22 09:01:10 2025 GMT
        Subject: CN=edbfac35ab151f852b7fe1a3754ae2e295e3745b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1f:3d:83:d5:0a:bd:06:44:1a:df:8c:f2:3e:
                    1b:1b:67:2a:a2:3a:f1:85:9a:99:61:37:47:24:86:
                    e0:25:2b:9e:b0:09:7b:a4:ef:9f:d6:8e:8d:e8:6e:
                    f9:df:7c:72:9e:7e:6b:9c:ea:82:3a:6d:80:3b:7f:
                    4e:2e:07:5d:ff:ce:e5:80:35:53:32:a8:91:4e:d6:
                    1d:6c:18:68:e4:67:15:72:f4:86:76:ff:ad:3f:08:
                    f7:f1:b5:29:85:ec:e1:93:26:4d:44:01:06:a1:b1:
                    8a:23:0f:16:bf:aa:fd:fd:43:96:9b:4d:3a:73:a5:
                    91:03:7d:51:33:4a:8b:c8:c5:77:cc:74:2b:a6:bc:
                    26:c4:3b:5e:85:66:17:d5:ce:b8:38:ae:80:57:b4:
                    2b:b0:b4:1d:ec:6d:9e:0b:31:9b:94:08:53:28:6f:
                    0a:ec:b9:0d:11:61:75:2c:1a:42:5d:cf:79:5d:f7:
                    01:73:7a:65:fb:4a:e7:80:59:3d:25:5c:3b:a0:66:
                    2a:2f:7b:43:7d:9b:78:f5:a2:f6:50:ed:af:4b:ce:
                    89:1f:c8:0f:af:8a:83:94:9f:c0:9b:cd:aa:45:fb:
                    0c:1d:31:79:b5:9e:dd:40:95:a5:ec:51:8b:be:94:
                    1a:03:73:c3:43:30:09:5a:b2:d3:26:62:60:11:74:
                    f7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BF:AC:35:AB:15:1F:85:2B:7F:E1:A3:75:4A:E2:E2:95:E3:74:5B
            X509v3 Authority Key Identifier:
                keyid:88:6B:9E:2E:98:16:BF:AA:D9:CF:CC:80:6E:8D:FD:28:24:F5:03:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGueLpgWv6rZz8yAbo39KCT1A0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c1:c7:e0:aa:78:e1:a2:93:f1:f8:05:41:62:b4:7a:54:b5:
         d8:8a:3e:e3:4c:5b:29:89:5c:70:bf:04:b1:19:7c:3c:c6:bc:
         96:91:02:e7:e6:21:88:9f:c3:37:dd:16:96:62:e3:95:63:a9:
         d6:18:1a:48:7e:1b:7d:eb:c2:de:85:01:74:c7:9c:42:16:ae:
         8e:01:d6:af:8a:98:5b:61:7b:a2:5f:52:8c:2c:38:9b:c3:4b:
         1b:dc:e1:24:c6:53:47:6d:58:f4:9b:03:8e:15:c8:8e:4d:eb:
         ae:53:f4:40:0b:68:a6:ef:4f:f2:e7:7c:a1:06:b9:12:31:b9:
         5b:19:27:1b:f3:ad:06:2b:89:a8:95:09:cb:0e:4d:c4:c7:20:
         62:b6:d2:6d:ba:b2:41:a6:44:bb:b1:ba:1c:3d:25:74:d3:eb:
         e4:00:a9:cd:50:ee:a8:26:3c:16:21:1f:95:d7:b3:d6:e3:96:
         39:73:dd:d2:04:32:ce:4a:9c:fb:7a:1a:a0:fb:3f:91:60:90:
         90:b1:5f:32:3d:df:08:4a:ec:35:79:83:2c:28:31:d0:fd:11:
         12:de:37:af:31:bd:1b:88:82:32:d0:0d:cb:a5:b3:86:15:d5:
         e0:66:d2:90:1d:1b:2f:f1:a9:52:ee:d3:70:8a:00:12:83:4e:
         a8:d9:1b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:25 2025 by rpki-client