Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
File:                     SwzeTE-TKZljaA1sT8BgT3yEJDs.mft (raw, json)
Hash identifier:          RtmxK7K4tD7BiLUSu+A/y51i5uIAuwidCWRz5/wkU2Y=
Subject key identifier:   DB:33:98:C0:0C:07:E7:7A:A9:75:4A:CD:35:D8:CB:7B:62:79:A0:EC
Authority key identifier: 4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B
Certificate issuer:       /CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b
Certificate serial:       019649A12E5BA77C088D7ADBD94CDD2912CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
Manifest number:          14F9
Signing time:             Fri 18 Apr 2025 16:00:21 +0000
Manifest this update:     Fri 18 Apr 2025 16:00:21 +0000
Manifest next update:     Sat 19 Apr 2025 16:00:21 +0000
Files and hashes:         1: 83Pa1Fny_wQGf-aBjmuuxzW1qe8.roa (hash: BUZf5O8+Scwp5tYQEgr26uQX4AHjB4ej9Ew9RQ9oFhg=)
                          2: SwzeTE-TKZljaA1sT8BgT3yEJDs.crl (hash: bpQecTDEPH9Hzy/oMkn7MT1C68jAucZeQgeaolYC0/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:a1:2e:5b:a7:7c:08:8d:7a:db:d9:4c:dd:29:12:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b
        Validity
            Not Before: Apr 18 16:00:21 2025 GMT
            Not After : Apr 19 16:00:21 2025 GMT
        Subject: CN=db3398c00c07e77aa9754acd35d8cb7b6279a0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fe:36:76:c3:ca:ff:0e:33:d5:a9:87:e0:81:
                    3a:0c:40:86:72:c9:87:dd:f4:48:ba:1e:0f:05:f5:
                    60:7c:49:a8:c3:06:5b:da:45:e7:1a:7b:32:3e:0f:
                    0a:ce:04:3d:97:e9:5e:7a:d6:1c:9d:13:4e:43:5a:
                    74:c7:3d:5c:9b:d9:88:d2:03:e1:ec:f9:98:54:88:
                    33:63:a3:33:da:ac:e8:23:8f:e1:48:81:11:d9:d7:
                    0a:80:d4:c5:a6:7c:35:26:f4:9a:c9:10:5f:f9:85:
                    3a:13:1c:2f:b8:e4:c3:03:3e:eb:74:7d:42:02:e3:
                    f6:a9:c9:8f:2f:30:1f:5c:1b:e6:f8:f6:44:c7:aa:
                    ee:17:f5:1c:31:12:d8:c1:50:ba:13:0e:74:c8:b8:
                    6d:89:3a:8b:9e:8b:e2:15:2d:86:e4:9e:53:b7:0e:
                    9f:c2:fb:4f:a7:70:12:42:60:ab:0f:d0:20:10:31:
                    b5:9e:67:93:9f:16:3c:cb:59:f0:68:3e:a4:85:49:
                    34:7f:b6:13:21:29:30:73:1e:53:5c:d2:a7:5d:e8:
                    29:6e:83:e0:6d:26:b3:b7:3d:d9:ec:d0:ca:f4:32:
                    76:2d:92:44:50:76:46:74:53:28:3d:ef:d4:3a:f8:
                    36:79:71:33:cf:98:e4:81:3d:bd:5d:17:d8:4e:c0:
                    42:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:33:98:C0:0C:07:E7:7A:A9:75:4A:CD:35:D8:CB:7B:62:79:A0:EC
            X509v3 Authority Key Identifier:
                keyid:4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f4:5f:b0:06:a0:27:bc:ac:b4:3a:17:ed:3e:27:95:c5:25:
         0c:83:25:0e:4e:4c:c8:a8:6d:ce:50:97:a4:5d:c4:ac:a9:14:
         56:a7:d9:09:76:a8:36:86:7d:7e:be:ee:d8:12:92:70:fe:00:
         ae:e9:d4:42:d1:f2:8d:14:9a:b7:a4:09:90:40:c2:71:78:fd:
         f0:73:b9:c3:bb:21:19:94:1c:1b:d6:7f:ec:c3:ea:7d:ed:c6:
         2e:8c:33:1d:59:fc:b0:a1:60:0f:25:8c:92:d0:06:de:e7:5e:
         75:15:36:cf:fb:72:53:48:ad:fa:bb:14:5c:c6:43:16:ee:e3:
         a1:25:01:46:d7:18:48:50:cc:44:b8:ef:8b:1a:e4:ef:a6:8e:
         ff:d5:d0:73:86:78:77:9e:2d:63:db:c6:2f:f2:94:f1:c7:fb:
         b1:31:04:e1:29:f2:16:fc:f3:a5:90:72:4c:b4:22:31:ec:57:
         4f:8a:4e:aa:2f:37:3e:1c:7e:d4:2c:11:50:b5:ed:97:b6:a4:
         6a:95:bc:a2:90:e1:d7:12:84:f6:37:e7:db:9c:5a:c0:f3:0c:
         1e:7f:aa:8c:1e:0c:15:6e:83:76:45:f5:70:78:c6:e3:c6:d5:
         dd:f8:de:73:49:8c:c6:09:58:b4:0f:85:48:ea:03:7c:54:bb:
         3e:28:99:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:20:12 2025 by rpki-client