Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
File:                     bSPOewwQBo-8RMAhlD4zkBPyruA.mft (raw, json)
Hash identifier:          ohVN4lV743zXEKoQD7fblKLPhSkw4xUXvdEQe/TRicw=
Subject key identifier:   64:D5:F2:2D:56:7D:DF:00:77:D5:F0:1D:22:33:19:B4:40:B8:52:40
Authority key identifier: 6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
Certificate issuer:       /CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Certificate serial:       01958F9856D7F30B4CA6F505CA0F0E92B644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
Manifest number:          1497
Signing time:             Thu 13 Mar 2025 13:01:20 +0000
Manifest this update:     Thu 13 Mar 2025 13:01:20 +0000
Manifest next update:     Fri 14 Mar 2025 13:01:20 +0000
Files and hashes:         1: LQcm0nhQTgxfcAEHFSpSeQFsVHo.roa (hash: ScQNvXtsK5w/Wj3QzlqfHMAUcdIYUpFbtGKhSGmn1FI=)
                          2: bSPOewwQBo-8RMAhlD4zkBPyruA.crl (hash: nifYrYEMUoTHfXv8daugUkX3j8vfJNWjpCy3bF0tlRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8f:98:56:d7:f3:0b:4c:a6:f5:05:ca:0f:0e:92:b6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
        Validity
            Not Before: Mar 13 13:01:20 2025 GMT
            Not After : Mar 14 13:01:20 2025 GMT
        Subject: CN=64d5f22d567ddf0077d5f01d223319b440b85240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:59:bf:83:20:18:d8:61:de:ff:1d:0b:d1:59:
                    d3:bb:07:d1:1d:e6:f5:f5:aa:ea:b2:b1:ba:a5:d7:
                    67:ac:ef:87:a7:7a:4f:60:74:ad:4c:95:7d:28:f0:
                    52:52:89:73:30:5e:3e:d5:38:9b:b1:c8:19:1b:78:
                    54:22:77:5f:d2:00:fa:cd:ca:78:4e:7d:69:87:fd:
                    5f:dd:fb:8f:c3:b6:ea:7e:a5:28:c7:32:67:ce:92:
                    1d:42:c7:72:59:4f:af:a5:f1:8e:28:25:fa:2c:dc:
                    ad:d9:97:e5:c8:02:5a:f7:e3:d5:40:09:f6:1b:f6:
                    47:ea:22:8c:e4:47:42:ec:24:91:fc:29:5c:4d:23:
                    7b:20:47:04:19:4e:86:54:7c:36:ca:7c:d2:0c:23:
                    01:9b:25:41:a7:5e:d3:5a:bb:e3:42:a0:f9:21:c8:
                    01:d8:82:0b:61:d9:ae:73:be:cd:ab:75:ed:e7:d5:
                    18:8a:99:b4:25:20:48:f3:40:6a:46:65:f4:fc:5a:
                    c6:05:af:72:43:e3:62:64:15:9a:7d:1a:cc:57:17:
                    ea:3b:c0:d0:92:b3:16:ed:12:a3:9d:89:cd:98:79:
                    a8:66:de:77:5b:eb:d4:24:fd:e8:95:f8:78:74:4c:
                    74:d9:a2:bc:e4:36:66:e2:60:2a:e6:d6:71:13:6e:
                    91:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D5:F2:2D:56:7D:DF:00:77:D5:F0:1D:22:33:19:B4:40:B8:52:40
            X509v3 Authority Key Identifier:
                keyid:6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a4:16:79:e4:02:6e:23:e6:2b:5e:a8:ad:4c:3d:e1:ff:2a:
         be:b6:69:e1:08:ac:4c:1c:36:d4:ae:a6:1a:9f:8e:7e:c4:90:
         78:b5:67:ab:d6:f2:01:1c:9c:f3:f0:47:66:e6:f7:6b:f2:ed:
         fd:3c:9f:b8:ac:2a:9c:64:1c:26:c4:c5:01:be:fd:34:ec:14:
         33:78:de:d5:70:42:1c:47:c9:f2:7f:79:74:6c:3a:48:48:d0:
         b7:e8:00:31:d1:d7:3e:a7:b7:4a:cc:3d:b0:d3:f6:52:b3:05:
         5f:de:fe:ba:26:2d:e6:0f:b7:2a:e7:fe:e7:c7:01:eb:a0:e9:
         f7:0c:f2:b2:ff:4f:1a:40:d7:80:dc:3f:37:79:de:b3:b6:33:
         19:2d:bd:3a:73:14:f0:fe:47:31:1b:0e:ba:30:32:7c:b9:13:
         53:b2:d1:d5:f8:11:dc:6f:99:fe:36:ab:4c:54:13:42:5f:13:
         8b:42:85:63:0c:0b:cc:ce:72:8a:a3:e1:89:57:8a:61:f8:d7:
         87:bc:ee:59:f3:60:53:99:54:bd:86:b4:65:95:c8:25:e3:9c:
         36:24:bb:f1:d8:9e:35:86:cd:43:3d:18:2f:21:e2:2f:eb:a4:
         81:97:4f:4a:73:cd:69:ec:4c:62:f6:23:55:51:56:64:4a:4d:
         60:f6:ee:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:08 2025 by rpki-client