Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft
File:                     4C15LJfb1EguuBXMmk-59Uevegk.mft (raw, json)
Hash identifier:          KwyIUgi6fcHOh0QbSmCGFDgtL9dMUCs+I3K4JkvFM5A=
Subject key identifier:   96:68:1A:67:DB:99:5C:A7:14:D3:60:4E:1C:2C:4A:23:78:4D:AC:3C
Authority key identifier: E0:2D:79:2C:97:DB:D4:48:2E:B8:15:CC:9A:4F:B9:F5:47:AF:7A:09
Certificate issuer:       /CN=e02d792c97dbd4482eb815cc9a4fb9f547af7a09
Certificate serial:       019643D61FA9B2EC63A2467C95185801DFDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4C15LJfb1EguuBXMmk-59Uevegk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft
Manifest number:          14F5
Signing time:             Thu 17 Apr 2025 13:00:28 +0000
Manifest this update:     Thu 17 Apr 2025 13:00:28 +0000
Manifest next update:     Fri 18 Apr 2025 13:00:28 +0000
Files and hashes:         1: 4C15LJfb1EguuBXMmk-59Uevegk.crl (hash: lBrmKSmkNlQMfKFkOe7t0OZZH/JEGfT/gUJqCL5jNrY=)
                          2: cWQ3FcXIpgayQfqlmppdKMwVQXo.roa (hash: psm2EXD7JYCfSDQE9D3Rxu9Bj66wyGfDywECDIfOm7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4C15LJfb1EguuBXMmk-59Uevegk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 13:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:43:d6:1f:a9:b2:ec:63:a2:46:7c:95:18:58:01:df:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d792c97dbd4482eb815cc9a4fb9f547af7a09
        Validity
            Not Before: Apr 17 13:00:28 2025 GMT
            Not After : Apr 18 13:00:28 2025 GMT
        Subject: CN=96681a67db995ca714d3604e1c2c4a23784dac3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:26:01:cc:98:8a:64:78:c4:27:e4:d1:77:b3:
                    4a:ef:0a:ed:62:8a:dd:07:6e:e6:fd:8e:7b:41:17:
                    cf:40:8c:ac:5c:33:e7:8b:d8:72:0e:f6:0a:62:61:
                    c4:18:3a:1e:9b:f5:b6:4d:08:4c:66:11:ae:2a:39:
                    60:e2:08:50:e1:bd:a3:58:99:f1:87:54:ec:5a:15:
                    bd:f5:c8:5c:a5:91:e1:64:fb:f3:52:67:a5:8b:fb:
                    c7:69:47:0e:2c:bd:8a:9c:5c:8b:dc:92:e9:2d:fa:
                    ad:59:e5:6e:63:a2:ca:ed:0b:7e:41:4e:a2:ba:0e:
                    fd:fe:74:ad:17:bd:e6:95:1d:01:d8:b5:67:20:4a:
                    15:b4:a9:eb:ce:cb:02:30:6f:df:b1:3f:29:97:82:
                    cc:5d:cb:ac:a0:48:94:29:4f:08:f8:d9:42:3d:45:
                    24:47:ce:d3:e8:cd:e8:8a:a5:fb:61:be:4d:22:ca:
                    7b:a2:29:ad:e2:86:ed:6b:9f:be:be:84:c5:f2:50:
                    8f:5b:25:69:0e:f1:e0:ab:ca:5a:1b:d8:ed:96:15:
                    e6:b6:21:e5:05:e4:4d:fc:5e:fb:c1:be:c3:8c:03:
                    31:70:89:b4:61:4d:f8:5f:ff:04:68:f7:18:a8:0d:
                    6d:da:38:65:1e:cf:7f:b5:24:05:b6:44:31:38:2e:
                    cc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:68:1A:67:DB:99:5C:A7:14:D3:60:4E:1C:2C:4A:23:78:4D:AC:3C
            X509v3 Authority Key Identifier:
                keyid:E0:2D:79:2C:97:DB:D4:48:2E:B8:15:CC:9A:4F:B9:F5:47:AF:7A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C15LJfb1EguuBXMmk-59Uevegk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:9a:94:c1:a2:35:bf:70:67:ad:af:be:f3:76:9a:76:b7:42:
         85:e2:ba:4a:45:7e:26:5b:a9:dd:62:a7:83:64:03:8f:18:b8:
         17:f8:a8:e6:87:b4:6b:84:2a:ef:26:66:c4:b5:b2:0e:17:70:
         95:a9:c5:03:84:51:ea:83:dc:47:6d:cb:ce:63:16:44:3f:eb:
         05:e7:01:09:21:14:70:52:a4:dc:3f:67:f3:dd:f7:a5:c6:62:
         22:48:d6:0c:67:14:97:8b:62:43:f9:c7:5c:f1:c3:f3:53:95:
         46:c5:3e:77:c2:31:f8:94:71:0e:7c:25:e0:4e:be:63:7b:18:
         32:dd:41:9c:99:f1:c3:2c:9b:ad:df:fe:48:32:02:09:ef:33:
         0c:48:ee:1c:f8:ad:83:02:c8:d3:1c:66:a3:32:07:14:a2:3f:
         1b:79:41:72:64:89:31:21:30:d2:ab:af:44:bb:a7:9e:95:33:
         91:a3:19:61:01:6b:f1:26:9d:50:21:b3:51:f2:d7:3a:e2:17:
         56:61:d7:1a:d8:d7:d1:0d:ae:81:45:b0:e0:25:6c:d8:7a:39:
         5b:44:6b:6d:67:2f:26:25:a5:d8:e0:42:86:bd:9f:90:f2:0b:
         3d:99:10:53:04:4c:e5:ef:e4:78:86:cc:cc:b0:06:a5:4d:d3:
         35:b5:3f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:49:52 2025 by rpki-client