Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
File:                     dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft (raw, json)
Hash identifier:          4qRlumRyBU31LxsH45S/8lrtVlXW8FXT3Fdd5GKG+Ow=
Subject key identifier:   87:E4:4D:3F:AF:0D:E2:DF:FA:11:A8:20:A2:4F:5B:B4:18:A9:1E:8A
Authority key identifier: 76:9C:74:45:F5:67:91:2C:E8:28:A5:F7:87:EC:94:4A:08:DB:FD:E3
Certificate issuer:       /CN=769c7445f567912ce828a5f787ec944a08dbfde3
Certificate serial:       01965CF14B24D9B630C29D160AE6AEE575F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
Manifest number:          10E2
Signing time:             Tue 22 Apr 2025 10:00:39 +0000
Manifest this update:     Tue 22 Apr 2025 10:00:39 +0000
Manifest next update:     Wed 23 Apr 2025 10:00:39 +0000
Files and hashes:         1: dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl (hash: WlA0/vvYRzKQs/UteKFmVDF/8Mg6dEZmOv2E2vZNd3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5c:f1:4b:24:d9:b6:30:c2:9d:16:0a:e6:ae:e5:75:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=769c7445f567912ce828a5f787ec944a08dbfde3
        Validity
            Not Before: Apr 22 10:00:39 2025 GMT
            Not After : Apr 23 10:00:39 2025 GMT
        Subject: CN=87e44d3faf0de2dffa11a820a24f5bb418a91e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:0d:99:1c:5a:f3:53:4f:11:a9:3c:f4:8e:
                    45:6c:87:eb:3b:07:55:99:64:9e:78:37:ee:04:1d:
                    fb:a2:38:7a:7e:ff:d7:9d:8a:d0:3e:f6:da:0b:9d:
                    80:d7:2d:a7:d8:56:4f:f3:47:c7:4d:a1:4e:75:9b:
                    99:a6:e5:bb:72:dc:f4:2e:2d:07:91:b0:a5:2b:27:
                    07:9c:f6:5a:f4:7d:69:76:ba:41:d1:62:3e:4f:a9:
                    f5:12:bd:8c:16:e1:74:3f:cc:11:51:3c:ac:f6:1c:
                    4f:45:60:30:bf:1d:01:8b:67:20:f4:f0:9a:e1:88:
                    ec:8f:1c:a0:8d:f5:b4:55:29:1e:e1:4f:97:36:43:
                    74:de:dc:06:6e:a1:ba:8b:85:2d:5b:88:31:01:76:
                    6e:77:78:ae:41:2d:12:e8:3b:23:ed:5c:72:c7:51:
                    2c:d8:98:c6:44:47:c0:28:ba:69:11:84:a0:d6:b6:
                    aa:49:29:00:1f:58:03:16:b7:07:86:06:db:a8:61:
                    33:ab:52:68:0b:7f:c6:4a:4f:77:81:ad:05:4f:46:
                    81:e4:1a:a9:9f:5d:53:25:3a:71:9b:5d:7c:2b:38:
                    fd:d2:76:ae:21:73:76:83:ea:ce:d7:7e:59:1b:2c:
                    80:cb:00:0a:af:2b:38:eb:6b:61:30:ef:6d:f1:26:
                    85:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E4:4D:3F:AF:0D:E2:DF:FA:11:A8:20:A2:4F:5B:B4:18:A9:1E:8A
            X509v3 Authority Key Identifier:
                keyid:76:9C:74:45:F5:67:91:2C:E8:28:A5:F7:87:EC:94:4A:08:DB:FD:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c4:3c:53:39:59:de:e9:dc:95:e8:8d:21:6c:b0:c5:5c:c1:
         ee:44:45:df:98:1c:79:5c:a6:9e:a8:29:a5:30:e3:59:13:4e:
         cc:bf:10:0c:77:48:fd:6e:47:c8:49:b6:af:60:58:23:36:52:
         3a:c1:e1:52:be:0b:bd:f1:63:f6:34:56:d5:19:01:62:ec:fe:
         db:39:7b:03:5a:31:50:a0:32:80:42:8f:a1:e8:93:9e:b7:1d:
         75:93:96:8a:45:53:d2:f0:4a:29:60:92:65:15:39:0f:ff:09:
         6c:37:b2:19:9c:35:cb:1a:3d:d1:2b:49:b8:cb:60:ed:be:0c:
         69:f6:7d:b3:fc:03:ea:fa:c2:d5:3a:ce:09:21:e2:15:6a:f4:
         d0:50:ed:77:be:f6:9e:1e:3c:66:7c:de:32:cf:e2:99:11:db:
         a6:6e:56:12:d0:9e:48:90:8e:f7:83:04:c5:a8:90:e6:fb:20:
         13:6b:b2:82:19:17:a6:b6:60:54:a2:8d:29:90:6d:a9:a8:8e:
         6f:96:86:44:f5:07:ab:01:ee:91:98:b8:dd:27:02:b2:4e:7f:
         6e:b9:5d:c2:a1:00:53:9c:4e:e2:31:d2:8a:e4:87:1e:af:cd:
         1b:eb:e4:11:ab:5d:76:2c:48:f6:90:b8:94:4a:a8:5b:0a:11:
         4a:5f:88:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:46:25 2025 by rpki-client