Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
File:                     DjGYqYJ97q-rHSe1U3lPRLkabAY.mft (raw, json)
Hash identifier:          JesdiFdzoA98dS2mWccQH3sqPqqui7jEl6fzwApZme4=
Subject key identifier:   52:A7:76:C9:D8:0F:ED:CF:68:B7:88:34:DD:4F:72:16:49:81:11:4F
Authority key identifier: 0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06
Certificate issuer:       /CN=0e3198a9827deeafab1d27b553794f44b91a6c06
Certificate serial:       01958C97504E450F3D361764F66B166E0E87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
Manifest number:          1494
Signing time:             Wed 12 Mar 2025 23:01:21 +0000
Manifest this update:     Wed 12 Mar 2025 23:01:21 +0000
Manifest next update:     Thu 13 Mar 2025 23:01:21 +0000
Files and hashes:         1: DjGYqYJ97q-rHSe1U3lPRLkabAY.crl (hash: U25CfLfugWg1cKU7ZL8JS1Dyzm9iIem4Jb4cT+W16YI=)
                          2: Q2G86FF3yJmX8igU3QYVD4ZCivo.roa (hash: 6/LUNvPV45MHYpMpmogqr8zL/TAfgvM+oAX3YS1oNRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:97:50:4e:45:0f:3d:36:17:64:f6:6b:16:6e:0e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e3198a9827deeafab1d27b553794f44b91a6c06
        Validity
            Not Before: Mar 12 23:01:21 2025 GMT
            Not After : Mar 13 23:01:21 2025 GMT
        Subject: CN=52a776c9d80fedcf68b78834dd4f72164981114f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:52:05:36:40:eb:52:19:33:95:88:dd:e0:6b:
                    ad:9d:52:9f:b4:aa:38:f5:4a:f1:51:32:13:64:f7:
                    8f:89:90:11:4c:5a:ff:a1:4b:90:68:1f:a0:81:04:
                    3a:70:89:79:b3:20:16:0c:cb:53:93:1e:62:3d:db:
                    72:b9:3d:0e:fd:cb:2a:4a:06:c6:68:c8:02:76:91:
                    01:d6:31:ed:3e:f6:b4:04:f3:b1:d4:68:45:83:ba:
                    52:cb:0d:e0:17:78:e8:44:a3:bd:ee:2b:a7:fb:92:
                    a4:d9:55:65:24:2a:4e:cc:8e:9d:96:d6:3b:20:78:
                    f1:66:63:3c:6a:88:98:46:c9:73:79:6e:68:9f:95:
                    b8:eb:4b:9a:2d:39:12:5e:81:92:92:f9:c1:16:e6:
                    99:d3:98:d6:9b:d9:93:dc:e5:d3:e1:cc:e4:3d:9b:
                    84:7f:08:0d:1e:98:93:bc:cd:bc:d7:d0:74:3d:f0:
                    3c:42:44:e2:75:ad:f0:45:09:7c:ee:7e:fe:81:5d:
                    ff:75:cd:a8:f5:da:0a:b0:d4:0b:8d:b0:ac:a7:dd:
                    44:88:ef:81:1b:9f:5d:9d:cc:92:6c:c4:56:b0:80:
                    71:38:49:c3:34:0c:f7:0a:be:80:4c:24:c9:55:2b:
                    36:40:c0:fb:72:30:87:40:a9:0f:7c:86:58:d9:17:
                    33:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A7:76:C9:D8:0F:ED:CF:68:B7:88:34:DD:4F:72:16:49:81:11:4F
            X509v3 Authority Key Identifier:
                keyid:0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:31:e5:98:b9:2c:e2:0a:96:61:0e:dc:e9:71:b9:46:b4:c9:
         83:26:32:c3:2e:86:a2:c8:89:b3:c5:74:b8:2a:51:ba:f8:b8:
         b2:74:7d:0a:26:1c:e3:8e:89:61:e4:8d:de:92:56:64:4f:a6:
         d5:b2:65:4c:e5:93:38:1f:d1:a4:07:db:79:da:63:34:05:e1:
         44:a6:c3:48:f2:4e:2f:dc:dc:a7:1e:02:98:d1:ce:4e:b5:14:
         94:0a:1e:d4:0d:f3:0a:be:30:50:53:9a:d3:3b:52:5e:44:a1:
         66:b9:02:81:6c:ad:58:8d:17:3b:8d:cb:36:36:50:c0:10:78:
         5d:7b:f8:e2:e0:20:23:96:ff:ca:5e:a6:65:d9:c0:c7:1e:44:
         ec:24:ce:5c:84:8c:db:8a:5b:92:31:32:8d:18:bb:ca:8d:e6:
         4c:79:61:88:27:3b:2f:7a:72:72:ae:13:58:e1:e2:30:b8:0e:
         6a:e1:3e:bb:bf:ab:ba:18:ef:de:30:31:0b:18:c1:f4:f4:e7:
         75:e7:ae:25:c9:ad:7b:1a:c2:42:29:27:00:62:92:e7:67:24:
         4f:9b:93:90:a6:dd:8b:74:7f:6c:63:15:e2:27:86:9a:c4:7a:
         f6:88:17:d2:ee:af:e1:95:22:03:f9:53:92:4f:a3:ca:03:74:
         80:23:78:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:03 2025 by rpki-client