Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft
File:                     BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft (raw, json)
Hash identifier:          GDpAYGHk9qfwBOJ/0vC4XyaoX6pQ8kuUfxf4XI1QTXU=
Subject key identifier:   35:16:2F:D6:79:64:D5:1B:B0:06:1A:CB:DD:97:7A:99:7D:82:3B:AD
Authority key identifier: 04:1C:46:FE:63:D6:F8:64:1D:F6:08:CD:21:AB:DA:3E:BC:1A:E4:C7
Certificate issuer:       /CN=041c46fe63d6f8641df608cd21abda3ebc1ae4c7
Certificate serial:       01962CAA4759221C790C81A42CDB2539CD3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBxG_mPW-GQd9gjNIavaPrwa5Mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft
Manifest number:          03F7
Signing time:             Sun 13 Apr 2025 01:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 01:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 01:01:18 +0000
Files and hashes:         1: BBxG_mPW-GQd9gjNIavaPrwa5Mc.crl (hash: jhmZCoGSGEt5mHvntkSh8XXjk7P/xsheahV4s3+0LdQ=)
                          2: WhtfNl4kPsvSKKPK4a5edmJqBO0.roa (hash: fLmSne41hG7wjVHW396uQUWjNlIxQRVkrNFvdbSceKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BBxG_mPW-GQd9gjNIavaPrwa5Mc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2c:aa:47:59:22:1c:79:0c:81:a4:2c:db:25:39:cd:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041c46fe63d6f8641df608cd21abda3ebc1ae4c7
        Validity
            Not Before: Apr 13 01:01:18 2025 GMT
            Not After : Apr 14 01:01:18 2025 GMT
        Subject: CN=35162fd67964d51bb0061acbdd977a997d823bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:f1:cd:c8:83:2c:3f:72:1e:20:2e:c5:40:
                    67:ed:97:e5:cc:59:09:a4:34:ba:b5:3b:bb:9e:da:
                    ba:24:7e:96:d7:b1:79:e8:65:f8:4e:52:04:fa:5e:
                    e8:95:5a:ff:0d:17:83:38:78:14:8f:9f:a4:11:bc:
                    3e:e4:f0:53:d6:f5:b7:a7:48:9c:1c:38:84:3a:0f:
                    05:41:ce:32:8d:30:41:b4:31:47:27:f1:6d:0e:32:
                    4e:2e:fb:27:8d:4d:ab:51:88:8b:fa:9f:41:a7:91:
                    f3:5d:b1:ee:9f:24:af:86:d6:8c:4e:0d:1f:c2:78:
                    94:cd:9f:41:1d:7e:36:63:c2:a9:d9:81:02:20:8c:
                    28:8c:18:94:68:3a:97:10:82:f5:d2:27:97:61:e9:
                    d2:58:11:4b:82:b7:1a:f8:b0:75:d1:21:e8:b9:a0:
                    1c:4b:f2:48:4a:0b:e4:58:bd:cc:61:2d:8b:0c:86:
                    bf:52:ce:95:12:38:63:81:91:70:5a:11:94:e6:23:
                    bf:29:96:f9:d9:5a:90:72:50:5d:8d:01:c8:34:bb:
                    60:2e:79:3b:11:52:08:75:12:47:f3:2c:b6:16:b9:
                    b6:9e:29:c2:b5:b6:9e:90:4a:6b:39:96:23:b6:6e:
                    3e:f4:42:a8:28:a3:39:07:e2:61:93:d7:f1:f3:e6:
                    3a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:16:2F:D6:79:64:D5:1B:B0:06:1A:CB:DD:97:7A:99:7D:82:3B:AD
            X509v3 Authority Key Identifier:
                keyid:04:1C:46:FE:63:D6:F8:64:1D:F6:08:CD:21:AB:DA:3E:BC:1A:E4:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBxG_mPW-GQd9gjNIavaPrwa5Mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:cc:32:92:0f:ef:23:fc:72:b7:3e:29:26:fc:79:5a:68:1f:
         42:68:cb:9f:b5:1d:05:ec:dc:6d:5a:83:10:30:d4:0d:db:9a:
         7e:bf:20:20:57:ee:65:f6:7f:10:74:c5:bb:27:98:ac:80:90:
         15:32:ec:3f:dc:1a:2f:5c:40:01:c6:e8:85:21:24:7c:04:c1:
         90:cb:71:41:30:d9:ea:e6:10:d6:e5:d0:09:df:8e:af:cc:46:
         1f:8d:fb:25:37:6c:b0:d2:35:94:fe:f6:b7:98:eb:38:96:dd:
         ad:d2:cc:91:91:1e:ea:7e:ae:75:05:fd:d0:7d:ed:d4:7f:e5:
         f6:7f:15:70:ca:5e:46:1b:04:d2:65:e7:c6:f1:01:3e:42:5b:
         1b:6b:7e:14:9f:ca:14:6d:b7:c2:61:20:b1:db:6e:5a:46:7c:
         cd:da:bc:6e:ff:08:ac:3b:35:63:2a:bd:b7:84:96:07:3d:bf:
         09:a5:95:b1:5a:37:7b:98:b9:c3:c9:e8:25:ff:31:b0:66:77:
         97:48:66:02:b6:c9:31:8b:57:12:9f:a2:9a:e0:c8:4e:97:1f:
         5e:2c:0b:8d:c3:77:c9:90:a2:5e:a1:0e:41:07:8f:b4:21:27:
         ad:01:ea:0e:41:3d:73:f4:d6:d1:e8:2e:c8:02:1c:8f:f5:ce:
         f7:a4:90:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:34:08 2025 by rpki-client