Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
File:                     kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft (raw, json)
Hash identifier:          qp2NrILn8wNGFpSfvec1Pd0nf7Yil3o8FOmCQ2gLeAM=
Subject key identifier:   99:87:96:77:B2:30:F9:A4:8C:96:02:90:DF:05:AC:57:C5:F7:9E:2F
Authority key identifier: 90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
Certificate issuer:       /CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Certificate serial:       0196447B55C6F18C1DB8A62D3EDD47525ECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
Manifest number:          1247
Signing time:             Thu 17 Apr 2025 16:00:55 +0000
Manifest this update:     Thu 17 Apr 2025 16:00:55 +0000
Manifest next update:     Fri 18 Apr 2025 16:00:55 +0000
Files and hashes:         1: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl (hash: RshjhE4rSMgCBd05EL/lZ0VeBePv4Xv6TUjZC/cn6sE=)
                          2: pX670p9lqGVYlJwJxGSVdPdpex8.roa (hash: vH3U6U3c0Q6E5azhBlckois455z44QpWevZu8CkEanM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:7b:55:c6:f1:8c:1d:b8:a6:2d:3e:dd:47:52:5e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
        Validity
            Not Before: Apr 17 16:00:55 2025 GMT
            Not After : Apr 18 16:00:55 2025 GMT
        Subject: CN=99879677b230f9a48c960290df05ac57c5f79e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c2:e0:fc:f8:57:88:e7:94:60:bc:a5:cd:c9:
                    c7:40:0e:89:b2:1a:ef:50:03:2d:8e:1c:d5:82:23:
                    13:46:1a:cf:1f:20:24:7a:11:62:b3:6d:e9:2f:58:
                    79:18:07:3b:a2:66:87:0e:f7:f0:fe:10:c5:91:93:
                    a7:35:97:c0:69:37:00:83:c6:ff:c0:52:9a:79:f9:
                    88:1b:fe:71:9d:28:78:91:ac:9e:8a:4b:e0:36:c4:
                    aa:46:80:0e:21:89:01:2e:0b:4f:36:13:37:c3:28:
                    de:74:a8:d8:5b:12:e4:36:05:91:bb:4f:f9:36:f3:
                    cb:83:c0:bf:5d:dc:e2:ba:e1:33:2a:dc:e7:ac:a2:
                    e2:74:95:e3:e7:71:f0:b2:2b:83:d2:d8:a2:20:73:
                    9a:91:aa:76:4b:57:41:a8:79:99:97:99:23:2b:1b:
                    da:ee:95:4c:2b:90:a8:0a:a5:8d:cf:63:c0:86:24:
                    58:cb:fa:23:55:9a:35:97:04:3f:ce:26:5b:e2:e0:
                    04:16:fb:16:75:75:41:4f:d5:82:12:92:18:c2:cf:
                    47:d7:eb:a6:9c:16:3f:cb:15:9e:95:a3:ff:e4:44:
                    da:7a:64:ba:d7:72:f6:2f:8f:24:98:29:55:c9:54:
                    9b:8f:4c:92:1e:4f:bc:13:b8:0a:19:e5:a5:2c:a6:
                    2b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:87:96:77:B2:30:F9:A4:8C:96:02:90:DF:05:AC:57:C5:F7:9E:2F
            X509v3 Authority Key Identifier:
                keyid:90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:6a:f1:5b:f0:76:05:e3:c2:7c:c6:aa:e8:5a:79:61:24:d3:
         76:03:1c:31:66:df:9f:89:16:9a:9d:36:da:e5:43:f3:44:4c:
         1d:39:fa:49:94:34:e8:21:ba:9b:42:3c:b0:65:f4:b7:25:c1:
         90:f3:37:a6:ff:f9:a1:0b:18:b8:b0:96:03:7e:ae:43:31:d1:
         7e:f3:9c:60:3e:5c:c3:17:7f:7e:d4:64:c9:a1:2e:f0:11:8e:
         8e:db:c3:ee:fe:ac:46:37:be:1b:e2:e8:6d:e9:20:a9:10:85:
         4d:9b:7a:4b:9d:94:69:b2:76:39:99:72:3b:75:c3:dd:21:be:
         6b:df:ce:c3:33:55:fa:c0:86:fe:48:11:9b:22:09:9a:9e:52:
         15:3a:05:3f:0e:c1:c3:e1:c3:43:fc:24:23:b0:38:5c:33:d1:
         79:3e:41:f5:51:8b:fe:14:2d:0b:2c:ab:ed:91:94:ae:c0:37:
         2b:5d:7e:77:ba:c8:e8:a6:c5:00:3e:69:7f:80:7d:69:29:1b:
         6f:6e:82:6b:da:98:db:8c:dd:37:a7:43:8e:3f:c2:3d:ff:50:
         65:31:af:41:1c:d7:b0:e8:d0:05:78:25:66:e1:40:1f:a5:95:
         32:b7:61:41:fb:e3:dc:4d:0f:38:35:ff:c2:27:73:ae:4b:76:
         88:d9:8a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:48:07 2025 by rpki-client