Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
File:                     vz3ogsJhnWgPLX_mALkBbaKHqNM.mft (raw, json)
Hash identifier:          TwzNSzbT8WsD2Nzqn9gdSWkMxKTnxolWNHkc6fSWiLY=
Subject key identifier:   1F:F1:C0:2B:79:B1:26:DC:EB:44:94:8B:10:94:F9:5F:9C:5F:66:B1
Authority key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
Certificate issuer:       /CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Certificate serial:       01964DB4C84D750FD5B8A83D877D178B0BE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
Manifest number:          1351
Signing time:             Sat 19 Apr 2025 11:00:15 +0000
Manifest this update:     Sat 19 Apr 2025 11:00:15 +0000
Manifest next update:     Sun 20 Apr 2025 11:00:15 +0000
Files and hashes:         1: 654gVU41w8foyRrdow3IvLh38_0.roa (hash: FxM/zOQmEVryb2JTftwL4qqp6keHE//w4j2q3qFh7fE=)
                          2: vz3ogsJhnWgPLX_mALkBbaKHqNM.crl (hash: nXDxQ+5JHMJDFrExbdSVD7X4aYNiL+Ch8U9qHnksY34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:b4:c8:4d:75:0f:d5:b8:a8:3d:87:7d:17:8b:0b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
        Validity
            Not Before: Apr 19 11:00:15 2025 GMT
            Not After : Apr 20 11:00:15 2025 GMT
        Subject: CN=1ff1c02b79b126dceb44948b1094f95f9c5f66b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:07:7d:60:1e:39:d2:1f:72:60:26:9d:bc:
                    5e:3e:ab:c2:99:34:58:6d:f6:3b:1f:bf:c7:61:0a:
                    01:43:c1:48:2e:ca:62:24:b0:6c:f9:8d:62:ad:52:
                    2b:fd:6e:d5:24:4f:cf:74:80:9a:b3:f6:b2:19:f7:
                    c5:24:59:f1:d4:d8:b5:74:77:46:a8:a8:b9:b1:0e:
                    ff:6e:b3:0c:e9:9d:6c:04:95:ea:5c:5c:87:bf:c4:
                    aa:57:e7:11:f5:20:d3:07:d3:0d:e9:38:5f:a7:d1:
                    70:25:09:37:4e:c8:80:aa:88:b3:8e:20:6c:06:26:
                    2e:ec:03:8f:55:30:cd:fb:76:95:89:36:e1:df:31:
                    4c:3e:53:ef:ad:a8:af:3e:a7:32:b4:9a:56:3f:66:
                    f4:54:bc:be:b0:69:8d:c0:39:a8:aa:2f:16:1a:cb:
                    56:37:4d:eb:09:00:39:88:51:a7:aa:ea:c3:7b:e6:
                    25:8d:61:05:c8:fa:17:99:88:3e:2e:9d:ab:7b:7b:
                    db:72:15:37:15:5b:bd:10:d4:79:bd:61:5a:bb:39:
                    2c:a5:cb:0c:63:9f:f3:98:6d:a0:01:d2:68:46:99:
                    ac:30:a9:f8:24:10:e2:02:0f:c5:35:dc:89:87:75:
                    8f:62:88:ff:c2:b6:c0:2f:c4:64:e2:35:70:cf:02:
                    97:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F1:C0:2B:79:B1:26:DC:EB:44:94:8B:10:94:F9:5F:9C:5F:66:B1
            X509v3 Authority Key Identifier:
                keyid:BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7b:32:45:6c:5c:f3:5f:c9:73:aa:ee:dd:2d:b2:e9:19:35:
         48:c2:1c:9e:de:a2:4a:9d:ed:65:07:cd:9f:78:99:0a:3e:2f:
         87:7b:ff:b7:5d:65:ae:f1:30:e5:6d:23:6e:7c:90:02:c7:59:
         da:e0:d7:b9:11:84:79:e1:93:e0:26:36:45:62:b3:ab:23:b4:
         d2:e0:2a:ff:68:df:35:fb:ea:4b:20:9c:a7:48:0b:e4:e0:0d:
         0c:bb:c7:74:1b:32:ed:59:e3:ae:46:8a:80:e3:3d:42:20:97:
         a7:ae:f8:ce:2b:73:e3:07:ce:b3:40:90:62:8b:87:53:80:8e:
         42:c7:80:57:45:47:ff:40:a7:73:c8:f5:09:99:c6:88:b7:77:
         ef:52:59:b7:bd:a3:b1:cc:3f:b6:95:dc:2e:05:47:09:42:a6:
         1e:80:44:0c:28:bd:ac:78:6f:f8:2e:e8:04:fc:3a:45:a8:06:
         74:f9:60:41:2e:17:1d:93:1d:70:d7:09:96:6a:4c:81:0b:57:
         1d:2e:ff:f1:a2:9f:60:89:4f:2e:56:cb:63:6e:6e:9b:2c:23:
         14:b4:4c:06:c9:9a:c6:1d:af:e7:26:3e:f6:79:eb:9a:6d:fb:
         ba:2c:98:12:5f:86:7b:f9:44:01:59:7f:33:ff:3f:15:56:2d:
         68:f7:42:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:58:00 2025 by rpki-client