Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
File:                     pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft (raw, json)
Hash identifier:          Y1QdA94Y6hGzgQWJefTkH3yoc4Z7XTLHhga0Bvbezys=
Subject key identifier:   9D:99:51:60:49:75:F1:04:D6:84:8E:97:8C:56:81:ED:0E:C0:A7:AF
Authority key identifier: A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23
Certificate issuer:       /CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
Certificate serial:       01958BBBCC4E8D7DC165D1DFCA818A6260A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
Manifest number:          12C5
Signing time:             Wed 12 Mar 2025 19:01:35 +0000
Manifest this update:     Wed 12 Mar 2025 19:01:35 +0000
Manifest next update:     Thu 13 Mar 2025 19:01:35 +0000
Files and hashes:         1: pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl (hash: FlXJdfSr0ctYEM0tb1El3D0HW3JCOISR+qCFzcylETs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:bb:cc:4e:8d:7d:c1:65:d1:df:ca:81:8a:62:60:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
        Validity
            Not Before: Mar 12 19:01:35 2025 GMT
            Not After : Mar 13 19:01:35 2025 GMT
        Subject: CN=9d9951604975f104d6848e978c5681ed0ec0a7af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:72:8b:1d:4a:d7:e5:ed:e9:f3:14:6f:44:4a:
                    87:a6:46:07:58:11:46:d3:f7:5f:c6:32:77:fa:e7:
                    92:db:7b:5f:fe:66:c4:d1:34:4a:3b:85:61:ca:f4:
                    54:1b:b8:bf:86:9a:c2:ec:0c:53:78:0f:17:92:13:
                    e8:ef:a2:2e:bd:e3:e9:a1:62:90:cf:57:35:a4:e2:
                    7e:fb:e4:24:37:77:97:e5:56:26:6e:7e:68:3d:fb:
                    8f:5b:41:73:c1:41:1c:68:ab:62:f5:07:30:7f:74:
                    d2:34:f5:71:a2:7a:67:35:36:59:bc:42:b7:7f:5c:
                    c8:12:95:24:6e:09:8e:12:c4:2a:ff:17:f9:69:41:
                    48:eb:17:90:a8:dd:48:80:2e:54:13:fe:f3:fc:93:
                    ef:a8:44:17:15:e5:e2:c1:96:7e:95:36:d0:13:0e:
                    23:7c:19:99:d0:ac:75:bb:0e:3a:83:aa:4b:45:ab:
                    1f:08:cb:97:35:f8:4d:0c:5e:f7:c5:e1:86:a1:c6:
                    eb:2b:41:4a:01:9b:00:88:56:d3:3b:6b:48:f0:a6:
                    fc:48:a5:a8:40:1c:4e:ea:88:e7:15:a0:4e:c0:80:
                    e1:29:58:20:c8:12:7c:5f:73:1b:96:40:07:ab:ad:
                    8e:76:03:a5:5d:69:98:f0:97:b6:62:2d:85:df:5c:
                    66:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:99:51:60:49:75:F1:04:D6:84:8E:97:8C:56:81:ED:0E:C0:A7:AF
            X509v3 Authority Key Identifier:
                keyid:A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c0:f6:54:07:24:2d:5a:93:e5:53:32:11:8b:5b:c6:ab:bd:
         63:df:b7:3f:10:e3:09:73:b1:8f:85:b5:44:2e:16:65:27:ae:
         dc:b2:66:26:2f:86:82:7e:93:e5:71:05:46:e3:4d:d9:d3:c0:
         60:dd:d7:c7:27:86:f8:85:69:45:3d:35:d4:74:2b:f0:40:b9:
         19:c1:2e:ea:16:e3:24:72:dc:10:75:e9:b4:80:61:09:8b:9a:
         74:35:28:bb:00:18:db:4d:8c:c6:d2:20:74:96:c7:17:c5:49:
         57:0c:6b:02:36:33:83:7d:29:32:a7:ab:36:11:dd:3d:a9:29:
         ac:2c:c5:ba:d9:51:1c:76:58:43:76:db:43:ee:7d:c8:9f:b2:
         c5:29:da:59:eb:66:24:33:42:0c:56:3b:78:e7:fd:a4:01:76:
         2d:11:1b:c0:8e:a0:25:83:48:a9:f5:76:67:63:bb:46:87:aa:
         ed:b1:9c:b8:37:cc:95:84:9c:f9:48:f8:1a:93:89:a1:34:d5:
         30:c3:0e:c0:ae:de:d8:82:f9:12:d8:35:6a:86:17:ee:e7:ee:
         4c:4d:a7:03:78:c5:6c:53:c0:1c:c9:e5:0f:ba:3e:a9:10:69:
         a7:2a:49:18:00:3d:51:c5:6f:29:3e:5b:f6:89:2c:61:69:34:
         76:09:93:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:58 2025 by rpki-client