Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
File:                     K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft (raw, json)
Hash identifier:          kujuKyv1L30BHyAmdXMKm883wMiRN4pBDxxyxm2WMNI=
Subject key identifier:   63:0F:E7:8D:97:95:81:D7:E9:A8:59:E5:44:69:74:46:2B:10:5B:5E
Authority key identifier: 2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3
Certificate issuer:       /CN=2bf7ef33dd19690d94941c92fb31479550a917b3
Certificate serial:       019651C940866BE8338FA42F9D704B7475BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
Manifest number:          02AA
Signing time:             Sun 20 Apr 2025 06:01:05 +0000
Manifest this update:     Sun 20 Apr 2025 06:01:05 +0000
Manifest next update:     Mon 21 Apr 2025 06:01:05 +0000
Files and hashes:         1: K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl (hash: tdLQxb9fojhqTRFNcToVVZgtUnY+9cOcWQyH/fCWbc0=)
                          2: TOPYw7YFWEAu7oYT1AfYZdgQtaE.roa (hash: qOIyQIvyLn/Q2C2VwhGhnpqFg11I5FE5kKtTCYisDKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:c9:40:86:6b:e8:33:8f:a4:2f:9d:70:4b:74:75:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf7ef33dd19690d94941c92fb31479550a917b3
        Validity
            Not Before: Apr 20 06:01:05 2025 GMT
            Not After : Apr 21 06:01:05 2025 GMT
        Subject: CN=630fe78d979581d7e9a859e5446974462b105b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a0:f6:7c:53:bd:1c:ea:5c:5f:4d:e5:ce:1d:
                    59:ba:61:12:5e:a8:66:8f:64:0f:2a:89:9a:34:09:
                    93:e2:3a:bc:44:c9:c0:ad:44:3b:72:0b:1f:42:9b:
                    6b:6b:dc:13:72:1a:9b:f0:a1:c9:e2:1c:91:54:23:
                    e9:c5:c3:35:14:39:6b:ed:a6:db:1b:a7:2a:36:87:
                    77:17:1a:b8:86:54:e5:2e:45:91:0d:c0:b2:cc:1c:
                    c5:44:bc:5d:6b:ff:17:9e:11:c8:6d:58:df:19:15:
                    ba:19:23:df:5f:de:b3:03:b7:78:0b:eb:75:18:a4:
                    a1:29:ca:35:4b:2f:17:47:9a:4e:60:fa:7d:0a:af:
                    bd:7e:01:67:bc:94:57:5a:be:2a:47:26:73:83:0e:
                    e7:c5:d4:0f:c5:58:13:6a:fc:8f:92:82:43:b0:35:
                    59:11:bb:6d:ab:4d:e4:bc:29:a7:cc:97:10:a6:02:
                    94:2b:47:71:5d:46:dd:ba:36:8a:23:c8:72:75:43:
                    01:5c:f2:e2:1b:8b:f3:07:1f:81:16:41:1f:22:9e:
                    28:6e:23:d4:6c:67:ba:b3:95:0c:9d:c4:9b:a3:68:
                    a4:72:aa:1d:26:c3:e0:83:55:01:97:b7:f3:f0:fb:
                    c6:24:94:12:75:ae:b8:2e:a1:e7:cc:7a:f6:3a:a3:
                    5d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0F:E7:8D:97:95:81:D7:E9:A8:59:E5:44:69:74:46:2B:10:5B:5E
            X509v3 Authority Key Identifier:
                keyid:2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:db:0f:9d:c3:12:24:10:3b:44:2e:50:b4:99:8d:cc:93:be:
         1e:c2:ae:d4:95:14:3a:27:3a:45:82:10:ed:c9:0d:89:7f:b2:
         59:fe:f1:0a:0d:17:f9:48:f3:7e:21:dc:a3:f6:df:10:93:27:
         53:e4:86:b8:58:35:f1:d9:72:13:4f:d4:c1:38:48:b9:78:25:
         1b:98:06:8b:cc:de:06:bc:1a:6e:84:be:f0:4d:9c:03:04:b4:
         7d:5e:1a:dd:7b:8d:6b:9c:db:4a:25:9b:c2:28:20:b5:f0:35:
         15:a4:6f:bb:5e:35:14:3c:c8:ec:9d:c9:4d:b2:57:09:f1:cd:
         0d:0f:3b:ec:74:01:eb:3b:63:73:3f:13:ce:b7:39:06:95:40:
         25:41:24:87:1e:39:a0:f2:c0:e6:3e:b1:87:a6:79:c9:d7:e7:
         bf:02:14:32:18:95:dd:fb:d5:aa:b9:7b:30:cb:08:6f:3a:4e:
         80:b2:c3:98:83:5b:ba:9e:86:da:ff:51:fb:3f:05:8f:05:24:
         62:2b:e0:44:17:26:94:33:79:53:a2:ea:7a:91:28:a9:ae:8b:
         6d:36:24:c3:9f:63:f3:57:1f:e4:72:7d:e0:b9:3e:62:5f:fa:
         d4:cb:67:02:c5:a5:db:77:d5:52:36:bf:ce:8e:f2:a9:cb:bc:
         73:90:cb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:23 2025 by rpki-client