Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
File:                     UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft (raw, json)
Hash identifier:          W+1YyzMP/wskHnH9jnobf9R4PRa8TvZbes6TM7pTIIU=
Subject key identifier:   C8:3F:0D:74:82:31:E1:8D:5A:E8:76:9F:9A:F9:76:2B:CF:8A:29:70
Authority key identifier: 52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D
Certificate issuer:       /CN=52965547f1096064b6b573c0281714c1f061cd4d
Certificate serial:       019645C5BD3A7753E1AA8C67EB3D49BCD707
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
Manifest number:          0DCB
Signing time:             Thu 17 Apr 2025 22:01:49 +0000
Manifest this update:     Thu 17 Apr 2025 22:01:49 +0000
Manifest next update:     Fri 18 Apr 2025 22:01:49 +0000
Files and hashes:         1: UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl (hash: 3txrt5uBWhQHff56+u3h46eBipILCczhzm7Pn77XZY4=)
                          2: ove2TkiR5Y_QzNqFVx6binaCimY.roa (hash: nkoFx2cGJ1UQ07ClYGuA0sWHVfaghbV6qV22jBDNl8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 22:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:c5:bd:3a:77:53:e1:aa:8c:67:eb:3d:49:bc:d7:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52965547f1096064b6b573c0281714c1f061cd4d
        Validity
            Not Before: Apr 17 22:01:49 2025 GMT
            Not After : Apr 18 22:01:49 2025 GMT
        Subject: CN=c83f0d748231e18d5ae8769f9af9762bcf8a2970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c9:47:31:e4:44:eb:2c:07:cb:07:3c:37:b9:
                    e0:dd:f3:67:34:74:41:aa:0b:60:c2:3a:b8:50:fb:
                    e9:5a:37:54:06:92:d3:49:9b:69:95:0e:04:05:28:
                    7e:8e:41:ee:33:63:87:ba:8d:4e:55:77:35:a3:3a:
                    4c:f1:8e:e1:7b:cb:e3:1c:88:96:a1:7c:c3:78:a0:
                    c5:d5:12:09:40:65:87:0e:9b:13:da:e2:20:80:c1:
                    1e:03:02:cd:2d:62:dc:05:77:1e:29:16:b2:26:fd:
                    1e:5d:25:9b:f4:63:c6:f0:95:9e:7e:00:12:33:c1:
                    0d:73:e8:14:cd:73:23:54:7d:bf:1f:02:1f:a4:59:
                    b7:0d:3c:3d:11:79:14:87:c5:6f:bc:88:46:1d:5b:
                    47:d7:cd:94:b2:0a:e0:4f:10:6e:f7:de:0f:be:c6:
                    c8:66:fb:8b:6d:2c:8b:70:a6:75:4e:72:8c:78:be:
                    1c:5d:68:6e:5d:ec:eb:fc:4b:72:e7:e7:33:e6:e9:
                    84:13:b7:ef:15:d8:c3:21:e4:26:af:48:04:68:5e:
                    1f:42:91:61:dc:fc:8d:3d:80:98:fd:1c:ac:e7:20:
                    82:11:cc:7c:15:7e:d9:aa:65:53:6a:2e:1b:28:74:
                    5b:16:4b:cc:52:0f:39:d0:87:5a:fa:00:09:41:ce:
                    ff:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3F:0D:74:82:31:E1:8D:5A:E8:76:9F:9A:F9:76:2B:CF:8A:29:70
            X509v3 Authority Key Identifier:
                keyid:52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9b:c5:91:c9:bb:86:30:c5:e2:f0:21:6f:62:72:7b:91:de:
         bf:5b:70:bc:02:1b:16:72:c5:63:e5:a3:8e:76:c7:76:b8:62:
         fc:c6:3e:90:e9:7b:e5:31:1b:5e:60:84:54:9e:a0:fb:cf:4f:
         18:51:f3:e9:cc:3d:bd:f1:b6:6c:e6:9f:c4:2a:46:51:34:29:
         91:8c:ea:17:ec:5a:ca:d8:e2:ae:5f:b0:18:ba:82:27:2a:52:
         5b:34:64:50:05:23:32:c2:d8:56:d8:2f:e2:12:10:e3:c4:92:
         3a:1c:1e:a1:3b:95:f0:33:76:ac:20:d0:bd:34:e0:47:68:36:
         51:c5:29:8a:00:af:73:b2:66:08:01:02:62:cb:54:ae:53:e9:
         53:d1:63:b3:b4:c2:01:46:de:5a:bf:eb:15:01:21:96:89:f6:
         69:4d:26:3d:9a:9e:ab:aa:e7:46:f1:8a:77:ed:a0:94:af:f5:
         1e:2e:85:85:2a:e1:ac:06:de:bf:b2:1a:86:76:ef:c8:39:62:
         33:20:e4:d1:49:c1:0b:02:e9:d2:0b:8a:25:0b:c1:26:d0:85:
         fa:6b:eb:59:e2:8e:de:e3:40:fe:ad:91:51:f3:dd:92:7d:b2:
         70:a5:e1:28:83:14:7c:73:9c:ef:a8:5a:e1:d1:b9:ca:12:ef:
         f7:45:9e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:40:20 2025 by rpki-client