Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
File:                     _aZpttXiJAUBetNZh8xXrJYjnJo.mft (raw, json)
Hash identifier:          6u5if6pGVZjCmN6Ns7ulB9ubuCrAEjEbuKIBjMyehNQ=
Subject key identifier:   82:DE:85:A0:9B:FD:BA:33:2F:65:9A:48:3C:AD:D9:3E:C1:2A:AD:47
Authority key identifier: FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
Certificate issuer:       /CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Certificate serial:       01958F982BBF4102511D6D81B4F6A5335AAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
Manifest number:          1496
Signing time:             Thu 13 Mar 2025 13:01:09 +0000
Manifest this update:     Thu 13 Mar 2025 13:01:09 +0000
Manifest next update:     Fri 14 Mar 2025 13:01:09 +0000
Files and hashes:         1: _aZpttXiJAUBetNZh8xXrJYjnJo.crl (hash: 6Zj/GpRIy/Dk/L/EG6GcbTr1mxbrKnECyFnKzd+7Uio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8f:98:2b:bf:41:02:51:1d:6d:81:b4:f6:a5:33:5a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fda669b6d5e22405017ad35987cc57ac96239c9a
        Validity
            Not Before: Mar 13 13:01:09 2025 GMT
            Not After : Mar 14 13:01:09 2025 GMT
        Subject: CN=82de85a09bfdba332f659a483cadd93ec12aad47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b9:85:03:61:09:d2:02:fd:5c:86:a0:18:65:
                    9d:94:1c:d8:52:6b:26:3a:98:d4:fa:de:05:0f:ef:
                    f5:97:d9:2a:2e:93:0a:ed:47:ee:0e:e6:fe:d2:53:
                    20:26:37:d7:42:c4:a0:db:aa:67:9a:2e:ad:69:6a:
                    ae:2c:d5:8e:2e:1b:66:b7:38:cf:7b:41:f1:c7:72:
                    ff:de:58:76:9f:e0:7d:52:b0:9a:37:3b:e8:84:22:
                    f7:29:a2:27:21:ed:9c:5a:c0:08:d0:c2:6b:31:70:
                    72:4c:aa:2b:bb:a3:67:98:e2:d1:4b:4b:1c:cb:e0:
                    eb:b1:dd:cb:d4:65:63:eb:08:61:e1:b5:40:e3:cb:
                    4f:75:39:a4:f7:e0:6b:0f:ea:ca:d9:ec:3c:56:09:
                    a8:9e:d7:44:2f:39:f6:7d:9a:1a:ad:2e:26:b0:02:
                    24:d2:19:f9:2a:c1:1b:cc:6f:d0:8f:55:88:1f:61:
                    89:59:66:2e:a6:19:ad:56:68:50:86:df:75:09:16:
                    c7:19:e5:c0:94:88:bf:e2:93:f4:f4:43:e4:53:b1:
                    fd:fe:fc:6c:b4:8f:65:81:3c:cd:9b:b4:66:56:41:
                    2f:b6:6e:cd:26:50:cd:82:c6:bc:2e:e4:10:f4:5b:
                    80:a5:ce:f3:43:dc:05:b7:20:a1:37:91:f7:67:bf:
                    86:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DE:85:A0:9B:FD:BA:33:2F:65:9A:48:3C:AD:D9:3E:C1:2A:AD:47
            X509v3 Authority Key Identifier:
                keyid:FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:de:e7:e5:15:3a:12:25:42:82:4c:da:f8:ab:cb:97:cb:d5:
         8f:16:e0:05:f1:82:93:69:a7:b9:cc:47:97:f8:f3:34:2c:3b:
         76:e0:30:f0:9f:c8:bb:99:50:bf:8b:df:f3:5e:bf:6e:93:09:
         05:60:57:a7:e4:19:2b:df:82:62:b1:94:5e:c1:6f:f4:88:71:
         15:ed:d2:33:87:32:9a:38:02:dd:b8:39:70:8b:4d:6d:75:b6:
         1e:05:ae:39:e7:50:17:51:ac:50:f3:f5:43:dc:1d:1d:96:2a:
         b1:b5:bd:c3:29:01:cc:bb:9e:91:cb:35:d5:3b:dc:b7:2f:41:
         1e:46:b9:fc:25:4e:04:84:a0:08:e6:9d:66:85:ff:24:d9:fd:
         2d:46:e1:5f:93:70:2b:46:89:83:12:11:fd:49:d3:06:dc:4b:
         f1:35:36:81:33:18:ee:57:a4:18:6f:1d:c8:da:9d:82:2e:51:
         52:87:24:52:61:18:ad:1f:af:95:17:cb:43:6c:e3:23:0f:c6:
         f8:d3:ff:8b:ef:ae:6a:12:bd:6a:02:d3:49:c3:50:8f:f6:70:
         db:eb:27:0f:43:be:4f:1d:5f:a6:1a:c2:9f:f1:f8:a7:3f:0b:
         cb:ef:f3:1d:11:70:74:2f:34:8e:f0:3a:a2:80:6b:57:8d:46:
         49:b3:fd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:24:14 2025 by rpki-client