Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
File:                     2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft (raw, json)
Hash identifier:          Yu3oF2fScJfDBx8jOaPZTFGWbVA8aPXtopyW2C3Frj0=
Subject key identifier:   05:34:9F:88:53:AE:8D:A8:68:1D:E0:3D:79:BE:CB:BA:96:E1:44:77
Authority key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
Certificate issuer:       /CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Certificate serial:       019616C6A5A8DD411CCA2630E7504251F293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
Manifest number:          14E0
Signing time:             Tue 08 Apr 2025 19:00:39 +0000
Manifest this update:     Tue 08 Apr 2025 19:00:39 +0000
Manifest next update:     Wed 09 Apr 2025 19:00:39 +0000
Files and hashes:         1: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl (hash: Y/RFYqmbdIQekFag31A4zwsH1j9H/C8UbVRuuqsfbyI=)
                          2: F5Bzgfu76RvZ3yR1y7zwFf6G4kM.roa (hash: ep3IMQ4ZZkY9pT/SX8gdzLkWK4LgBK5MsjhgdqazgtY=)
                          3: aqOGkykY9Ju12UAZyyt6XVgtms4.roa (hash: E4BJpz+NX3TX7uydvegd/qgoqkfPLAjjVrCasy2lcGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 19:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:16:c6:a5:a8:dd:41:1c:ca:26:30:e7:50:42:51:f2:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d959676fe138d4eb2aae19bb6731fee6292d793d
        Validity
            Not Before: Apr  8 19:00:39 2025 GMT
            Not After : Apr  9 19:00:39 2025 GMT
        Subject: CN=05349f8853ae8da8681de03d79becbba96e14477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b2:66:8c:69:43:8e:d8:03:2d:b9:f6:79:e0:
                    db:4c:e3:8c:c0:8b:00:6c:af:55:2e:66:59:9a:6b:
                    db:2f:07:6d:13:84:77:f1:f9:34:d8:8c:22:0a:7e:
                    68:a1:2a:0c:6e:71:b8:f7:a1:7b:1f:be:75:b4:db:
                    f9:28:ce:38:6a:10:9b:3a:65:e5:99:c2:c5:f4:c3:
                    ae:42:ee:3b:46:8f:89:49:7b:55:4c:85:b8:d9:a0:
                    76:bf:74:d6:d4:a5:ac:7e:b2:bf:08:8c:ad:4c:55:
                    9f:56:a2:06:07:14:bf:6c:fb:94:89:fe:b3:79:88:
                    f6:55:75:89:66:eb:b6:93:69:e8:e0:8c:74:04:6d:
                    d3:f2:1b:c9:b5:4e:9f:f6:e1:32:a8:5f:b5:94:9c:
                    fc:bc:d2:a6:04:d9:e6:7d:5b:c5:ab:0d:ab:07:81:
                    e2:ad:91:dc:18:a7:b6:58:ea:4c:8b:48:73:39:d4:
                    45:00:18:a9:b7:e9:80:8c:59:e5:9c:8f:b9:de:31:
                    63:10:e5:b4:c2:12:44:78:81:f9:2a:43:38:18:28:
                    a8:0f:a0:e1:08:70:67:67:ce:d1:57:99:f5:1e:52:
                    95:73:67:5e:99:58:72:04:7f:a0:2a:89:00:ee:9e:
                    0a:a0:38:99:7f:49:25:35:2b:8f:1f:46:ea:91:e3:
                    3d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:34:9F:88:53:AE:8D:A8:68:1D:E0:3D:79:BE:CB:BA:96:E1:44:77
            X509v3 Authority Key Identifier:
                keyid:D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:c5:2f:f3:02:6a:11:1f:f1:6a:dd:7c:e4:30:cc:28:68:57:
         e3:5c:41:7a:3d:3f:37:e0:3a:68:9b:71:f7:1b:88:1c:b9:72:
         76:cc:e1:a9:17:b6:9e:43:2f:e3:52:84:17:32:48:60:8b:f4:
         71:56:6b:2c:75:50:26:30:09:42:48:89:80:f0:1f:30:dd:0b:
         77:7c:f4:aa:2b:0d:53:86:e1:ce:fb:3b:f0:3b:ac:a9:29:a8:
         c4:fe:79:02:ba:52:9e:42:39:57:cd:2a:44:33:85:a4:4c:71:
         6d:a4:eb:e4:47:02:40:90:d7:17:70:c1:40:fb:a0:44:17:9f:
         ee:9f:4f:5e:da:72:79:bf:a7:83:08:98:b5:38:f9:69:d8:a4:
         e4:45:5a:85:d5:f2:2a:e5:fb:0b:a3:93:61:4b:d7:94:e9:64:
         6e:b4:c6:44:f4:da:55:a2:23:34:e6:b2:ba:ff:01:ca:69:65:
         0d:05:5a:2c:98:cb:0d:07:e7:70:cb:45:2f:ab:51:e0:60:23:
         cf:fc:05:71:5d:ae:5d:c9:82:8b:2a:33:7f:7b:1f:4a:03:fe:
         74:60:48:49:1f:c4:0e:d3:d1:ba:9e:ab:25:f6:69:7b:2d:56:
         b2:57:7f:0d:5b:af:c2:d0:a5:07:f3:f7:44:53:10:e0:cd:7f:
         8c:5a:0a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:03:05 2025 by rpki-client