Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft
File:                     c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft (raw, json)
Hash identifier:          B8wiPKgibI7zKYiQkb3B8Gz5qcMMJ9THnVkz/OJ5GmA=
Subject key identifier:   C8:6E:66:5F:42:2D:06:10:D8:23:44:26:F4:D9:2B:E6:F0:45:AA:4A
Authority key identifier: 73:AB:E1:5F:6C:54:09:2B:10:3D:4A:C0:86:44:46:9A:7B:1E:6F:E4
Certificate issuer:       /CN=73abe15f6c54092b103d4ac08644469a7b1e6fe4
Certificate serial:       0196470EA8859820A25B411783B90FD2F01E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft
Manifest number:          1482
Signing time:             Fri 18 Apr 2025 04:01:05 +0000
Manifest this update:     Fri 18 Apr 2025 04:01:05 +0000
Manifest next update:     Sat 19 Apr 2025 04:01:05 +0000
Files and hashes:         1: c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl (hash: IxbWfxBOthL51k4RVew+qOykg5c29oL6gt64oJoBdhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 04:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:47:0e:a8:85:98:20:a2:5b:41:17:83:b9:0f:d2:f0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73abe15f6c54092b103d4ac08644469a7b1e6fe4
        Validity
            Not Before: Apr 18 04:01:05 2025 GMT
            Not After : Apr 19 04:01:05 2025 GMT
        Subject: CN=c86e665f422d0610d8234426f4d92be6f045aa4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c9:56:52:cc:83:59:10:6d:96:2c:9d:d5:59:
                    b6:45:f8:c3:f3:44:0e:16:f7:b1:76:33:ff:6b:e1:
                    a5:b5:51:62:95:82:06:c0:31:e5:01:4b:91:85:41:
                    42:02:c8:ab:c9:1e:9a:6b:f7:a6:51:5e:a1:0a:63:
                    c2:9a:ec:43:9b:1c:07:80:fc:45:e7:31:02:89:a0:
                    a4:bf:ec:b3:2f:20:97:94:0c:f3:34:ec:96:c4:c0:
                    b2:1c:c2:2b:f9:a0:ff:cf:5e:93:1e:a7:f4:2f:fe:
                    a1:13:e2:8e:07:e9:a3:d4:73:ac:29:dd:c6:83:53:
                    11:90:83:7c:5c:6c:da:95:b5:36:ce:cd:40:24:3e:
                    a5:e3:2b:f4:4f:a8:e9:13:5a:09:9a:fb:1c:a3:08:
                    65:b9:9a:a7:10:f3:3c:c1:b9:dc:55:10:df:7b:93:
                    b4:f1:05:78:0c:6d:1c:58:a7:aa:ff:31:0d:8b:c3:
                    59:bc:00:f6:9e:d6:d0:61:b7:28:51:ee:54:7b:1c:
                    99:3a:64:f6:56:7a:1b:7e:02:75:4a:92:67:2f:e1:
                    d9:aa:f0:0b:c4:b7:af:71:d0:a1:e2:b8:c8:8e:ad:
                    ad:81:c1:ae:a0:78:15:09:74:c8:29:a3:a1:40:22:
                    f4:fc:a3:95:a6:1e:c4:90:61:76:33:bb:42:15:d5:
                    75:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6E:66:5F:42:2D:06:10:D8:23:44:26:F4:D9:2B:E6:F0:45:AA:4A
            X509v3 Authority Key Identifier:
                keyid:73:AB:E1:5F:6C:54:09:2B:10:3D:4A:C0:86:44:46:9A:7B:1E:6F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:6f:60:6a:68:25:e5:74:df:4e:d3:7f:57:e3:39:68:59:6b:
         4e:d9:cd:86:ba:36:0f:d1:e5:95:64:0d:a3:77:64:f1:02:11:
         ea:7a:07:a7:13:3f:9f:b1:bf:75:5b:ba:a6:92:bb:c4:7a:79:
         1f:26:3e:5a:2e:e8:bb:ab:ab:e7:2b:9b:80:dd:07:2a:ed:9f:
         b0:e1:4b:79:f3:44:76:3c:92:38:1d:f6:db:b5:8a:f8:91:48:
         81:da:58:62:05:7c:bd:25:5d:31:04:cd:9d:ef:ee:de:2f:f4:
         5e:2f:cb:46:b6:85:79:71:2d:e0:2b:e9:2a:87:e0:af:f1:37:
         53:84:cc:22:4c:45:e9:33:1b:63:2a:f4:ae:0d:20:8a:1b:cf:
         d3:d1:d0:67:07:9b:95:89:43:e6:c0:96:7a:42:de:ff:6b:05:
         6c:f7:82:7c:ca:ab:ac:11:34:f8:40:06:74:3d:9e:d2:f3:d9:
         db:23:f2:17:f4:18:a1:03:2e:64:0d:bc:90:8f:b0:58:23:a7:
         0a:09:68:9b:97:1e:0a:be:39:df:5f:47:cd:c9:47:b9:f3:c9:
         94:64:92:37:7d:0b:4a:66:e8:64:29:41:af:48:83:5c:41:81:
         8a:74:29:fa:ed:0d:fa:81:5f:9d:53:4d:22:56:3c:3c:79:93:
         74:58:b5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:56:13 2025 by rpki-client