Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
File:                     ENSbc8raAe6FGBLsRAt6HsmGSLM.mft (raw, json)
Hash identifier:          mIhxCf9H2gq3LTvHoaluSPQaYwu6fhZQ8j7/P92PgPk=
Subject key identifier:   98:8A:17:25:37:7C:3E:5E:69:EB:12:2D:3B:80:7B:55:71:F6:22:94
Authority key identifier: 10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
Certificate issuer:       /CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Certificate serial:       01964FDABF67D918B4D0D0BC8C7781CB876F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
Manifest number:          14FC
Signing time:             Sat 19 Apr 2025 21:00:57 +0000
Manifest this update:     Sat 19 Apr 2025 21:00:57 +0000
Manifest next update:     Sun 20 Apr 2025 21:00:57 +0000
Files and hashes:         1: ENSbc8raAe6FGBLsRAt6HsmGSLM.crl (hash: UNXovPe5QdGgZMVKe7+3467min06gKwkLtxo+cQtXIg=)
                          2: LbvGosx0sr1hJwd78ZXVswGnqXM.roa (hash: zrhSsms7Xu5tLT+xCwRwdoOuFODUIch3dzNZbH3HeT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 21:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:da:bf:67:d9:18:b4:d0:d0:bc:8c:77:81:cb:87:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d49b73cada01ee851812ec440b7a1ec98648b3
        Validity
            Not Before: Apr 19 21:00:57 2025 GMT
            Not After : Apr 20 21:00:57 2025 GMT
        Subject: CN=988a1725377c3e5e69eb122d3b807b5571f62294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d5:37:e7:2b:6b:be:92:ee:76:0c:5e:f1:2e:
                    ee:7b:c8:c3:5c:4a:e1:1a:5a:90:4d:f9:5e:dd:6c:
                    05:a3:ff:4c:9e:de:00:af:13:d0:55:5f:f7:ec:2f:
                    29:38:dd:7d:8d:a7:c0:cf:11:70:93:e7:03:2b:ba:
                    e5:c9:15:05:fa:19:da:39:ee:55:21:34:b4:82:a7:
                    cc:ad:30:5c:39:0b:d1:ea:b1:6c:2e:19:68:1e:0c:
                    25:2f:bc:40:68:a2:dd:e8:72:48:fa:f8:01:24:de:
                    fc:c0:57:63:46:8a:cb:d2:ed:54:03:ee:2d:85:5f:
                    64:fa:d4:c4:61:fd:ae:ad:d2:7f:7f:5f:b6:3f:26:
                    f7:42:ad:1a:df:2e:15:49:64:34:de:2b:35:1d:2f:
                    da:2b:06:29:94:74:94:36:17:72:6b:93:ae:79:ef:
                    5e:50:55:13:cc:90:91:ce:2c:e0:e1:f9:b1:16:dc:
                    fe:9f:d6:cf:84:66:d7:02:5f:af:b6:73:bb:05:18:
                    46:1e:a3:dd:b5:e7:30:3c:91:72:8a:f3:40:15:7c:
                    18:d3:8c:23:e7:c7:59:f2:1f:f8:cb:35:07:6f:1c:
                    0c:97:4a:e9:fb:9b:98:01:ea:3f:55:b0:65:03:be:
                    ca:55:28:8d:81:c1:30:8f:63:9f:78:c8:96:4c:8b:
                    ee:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8A:17:25:37:7C:3E:5E:69:EB:12:2D:3B:80:7B:55:71:F6:22:94
            X509v3 Authority Key Identifier:
                keyid:10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d9:b0:ca:21:9b:e3:9d:4a:69:4f:de:f9:2a:42:db:82:f2:
         cb:0b:92:3a:cf:69:54:a8:c1:7f:c9:7c:c3:cf:90:99:9e:9c:
         65:c2:8e:0d:2a:86:ff:26:bb:87:d6:bd:27:e0:8e:1f:10:fb:
         89:cd:3d:aa:3e:0a:d6:ec:e9:1a:2f:7a:77:8b:74:77:dc:87:
         b5:e0:61:9a:b6:41:17:2f:26:fc:03:d6:02:da:d3:4e:89:c6:
         ae:b1:40:17:e7:2a:0e:86:cc:ed:70:1d:57:1b:70:83:01:35:
         5f:5b:f3:97:55:68:19:6e:6e:d8:63:8a:dd:d2:59:03:c0:de:
         dc:85:65:e7:f8:0f:ce:6a:f8:dc:23:54:d9:12:98:c0:93:ea:
         30:0b:1b:ba:ae:fd:f7:fa:01:d4:ec:3a:b2:a3:11:c1:75:d6:
         79:13:4b:98:34:f2:3f:a3:e3:46:40:f2:bc:2a:21:02:a5:cc:
         01:ef:bc:ce:6a:34:76:22:58:24:50:f7:63:a2:9a:83:eb:ee:
         15:b7:13:1c:55:54:24:03:29:91:8f:d8:cf:0a:ef:c0:3c:a1:
         37:66:0e:47:e4:59:4c:d0:a9:08:06:e5:5e:06:dd:09:dc:ce:
         e4:15:99:94:6e:e2:4e:a4:47:59:07:a6:f3:08:b4:9b:b3:ca:
         7a:47:0f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:46 2025 by rpki-client