Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
File:                     36JPgpi-GMimnxgSjwZOcAPh090.mft (raw, json)
Hash identifier:          Bv4AenbQ0QYJJPgqhSbpBw7rj9akf+c5Z/akQYFKBGg=
Subject key identifier:   F5:3A:06:23:6B:BC:2A:1D:E5:C2:60:A1:22:C9:FE:3D:1E:E3:69:EA
Authority key identifier: DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
Certificate issuer:       /CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Certificate serial:       01964CD9258A4DDB7B46941CC3A31C261A88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
Manifest number:          0BEF
Signing time:             Sat 19 Apr 2025 07:00:21 +0000
Manifest this update:     Sat 19 Apr 2025 07:00:21 +0000
Manifest next update:     Sun 20 Apr 2025 07:00:21 +0000
Files and hashes:         1: 36JPgpi-GMimnxgSjwZOcAPh090.crl (hash: IGpXLDlzJu3DQDGt5L+VE+3ngLR9SnjyFcXbriRdsHs=)
                          2: Ng0Z_Y8YOqJU-aJwUaovvEl0tDk.roa (hash: hZn0EBlBpjbO2T+dcLbeLS+VLWtfhrO+ME9lcig54Mc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:d9:25:8a:4d:db:7b:46:94:1c:c3:a3:1c:26:1a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
        Validity
            Not Before: Apr 19 07:00:21 2025 GMT
            Not After : Apr 20 07:00:21 2025 GMT
        Subject: CN=f53a06236bbc2a1de5c260a122c9fe3d1ee369ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:a0:36:6b:81:fd:cc:41:93:7c:cb:a4:05:
                    e4:5c:46:f5:49:cc:14:6f:75:f6:dc:d4:10:a3:e9:
                    84:18:83:9e:e0:45:cf:45:fd:e2:ad:78:62:8a:2e:
                    19:7b:e8:0e:03:55:40:fa:ce:7c:de:76:dc:8e:14:
                    d5:4a:c1:85:dd:bb:8c:7a:98:06:45:0f:e2:f0:bb:
                    45:4d:8d:92:a0:a6:72:3a:d7:18:cd:52:1c:f9:5e:
                    f5:c9:d8:e3:17:06:bc:11:f0:70:cb:85:3c:f7:f6:
                    9e:da:ab:f4:33:8a:0d:b3:10:af:7a:dd:98:fe:9a:
                    00:65:0b:0e:7b:4c:1a:26:e7:7c:2b:ac:04:17:15:
                    b8:e5:af:75:38:a4:f5:f6:8a:d4:03:e6:c2:76:d7:
                    67:46:48:04:08:db:76:01:f4:05:73:21:32:9a:56:
                    e9:2a:cb:a5:63:67:22:9d:2c:3a:27:81:9a:67:08:
                    ce:ae:a7:af:eb:2c:b9:49:97:a8:f0:28:a5:c8:aa:
                    e1:41:f5:2a:27:1f:d3:74:9b:11:81:85:88:fc:c0:
                    03:a5:9f:7c:05:b6:1f:10:ab:27:84:2a:44:5e:50:
                    44:28:b6:9f:c2:70:45:b8:ed:58:80:79:38:d6:c0:
                    eb:01:a2:54:7d:fa:f1:6a:73:b4:f1:49:fa:db:3f:
                    8b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3A:06:23:6B:BC:2A:1D:E5:C2:60:A1:22:C9:FE:3D:1E:E3:69:EA
            X509v3 Authority Key Identifier:
                keyid:DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:17:b1:0e:ee:c4:c0:81:6a:0d:85:d1:17:23:b8:ee:3e:7b:
         40:6a:13:07:c6:a6:eb:a6:d9:11:ad:c0:1c:f8:0e:8a:84:72:
         79:b8:ba:f1:ff:77:1d:a9:1e:40:f1:fb:74:25:46:cc:6c:87:
         8e:44:a6:e5:06:57:e8:ac:a4:0a:6b:96:13:e4:7f:1b:e2:6f:
         f2:85:2f:0c:ad:6d:20:91:63:57:c0:1f:7a:31:b1:7d:8c:d9:
         76:a8:e3:a3:1d:34:3a:57:f9:79:58:cc:11:70:38:0f:5b:f2:
         b3:58:1c:26:70:59:1b:79:03:dc:95:6a:39:05:71:00:86:4d:
         ed:03:1e:88:9a:3d:ab:fa:dd:08:9b:e7:4a:0f:ec:24:71:d9:
         bd:08:0b:b4:64:62:be:fe:df:c8:1c:4b:79:ba:d5:70:cc:9c:
         00:1e:0a:c8:e0:f1:54:9f:69:f1:d1:0b:ab:61:72:e2:40:25:
         df:f4:e6:80:4e:ac:5b:a9:d8:9f:d6:6d:45:07:39:37:d5:61:
         b8:42:15:2c:0e:f1:1c:0e:1f:14:37:c9:1c:36:46:0d:3c:4d:
         42:c0:00:f3:80:2c:f1:10:39:fd:f1:5b:1c:25:1a:b5:2a:6e:
         bf:e4:7e:5a:d3:96:e6:7a:d2:d7:4d:09:ce:ed:c4:9d:56:dd:
         ac:d1:9b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:11 2025 by rpki-client