Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
File:                     EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft (raw, json)
Hash identifier:          laFpqObXCi/14ubK51+qDJXAAqv0shg6/hAxte3aKsM=
Subject key identifier:   AC:D6:3C:8B:4A:41:E3:14:43:A1:0B:D1:DB:1A:3C:0D:3C:93:E2:93
Authority key identifier: 11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
Certificate issuer:       /CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Certificate serial:       01958C974B5DF42C70710B5DBE61A1BEEE2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
Manifest number:          1497
Signing time:             Wed 12 Mar 2025 23:01:20 +0000
Manifest this update:     Wed 12 Mar 2025 23:01:20 +0000
Manifest next update:     Thu 13 Mar 2025 23:01:20 +0000
Files and hashes:         1: EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl (hash: plcPtrte/X/nYwfrPr+00AEORZNhgMygRczotdCAnYU=)
                          2: KxHo3PH5XqAW_e-4RbCvU_gAQWc.roa (hash: dw0fO1xhc9eufYQ0WpteBCztc0/BFVhz2enclISvMos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:97:4b:5d:f4:2c:70:71:0b:5d:be:61:a1:be:ee:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
        Validity
            Not Before: Mar 12 23:01:20 2025 GMT
            Not After : Mar 13 23:01:20 2025 GMT
        Subject: CN=acd63c8b4a41e31443a10bd1db1a3c0d3c93e293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:cb:bb:c3:30:1b:d7:2d:9b:7d:a3:2a:e1:
                    d5:37:14:4d:24:b9:c4:43:b3:05:98:6f:d2:4f:02:
                    7b:6a:57:87:2a:3a:87:02:9d:85:60:f9:08:ea:38:
                    cb:d8:3e:11:c3:c1:db:b3:46:7a:37:51:2b:d9:f2:
                    cf:f9:ed:05:f6:72:46:68:ad:21:81:5d:09:59:17:
                    12:a2:8a:73:4e:34:da:87:97:e8:6d:65:b8:93:6f:
                    fe:dd:f4:a4:e3:97:ed:f1:1d:9b:70:73:e8:9e:7a:
                    ea:ce:d0:7c:6c:87:54:39:fd:2e:92:95:9b:b4:ea:
                    e3:1f:2d:ad:82:cf:18:b9:3f:0b:1c:67:ea:8d:66:
                    6d:a3:da:c1:61:5e:5c:ae:fd:31:71:2e:6f:60:d7:
                    b3:f1:7c:86:05:c9:5d:83:f3:f3:67:ea:52:d6:6a:
                    dd:ac:d8:7a:92:12:e8:9c:16:32:44:e5:f2:79:9d:
                    09:79:9a:b5:8d:37:34:65:b0:0e:0e:e9:58:bd:c1:
                    cf:4c:5e:22:15:29:6d:79:8d:86:b1:cd:1c:d4:9e:
                    c7:97:4d:1a:d8:a3:5a:33:58:f4:57:3c:74:0b:87:
                    5c:b0:60:14:37:48:0d:9a:d7:ae:30:38:91:8f:16:
                    5c:44:fa:4b:b4:25:c2:ef:09:6a:15:32:d8:4f:c5:
                    82:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D6:3C:8B:4A:41:E3:14:43:A1:0B:D1:DB:1A:3C:0D:3C:93:E2:93
            X509v3 Authority Key Identifier:
                keyid:11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ea:c4:05:96:fe:8f:da:46:6f:21:83:f4:8c:7d:e3:01:7c:
         d5:43:fa:62:d4:cc:54:eb:db:a7:00:cb:85:81:3d:e6:f4:9a:
         7c:30:22:cf:80:6f:fd:dc:70:ba:0e:e5:1e:7b:a1:76:27:57:
         2e:ae:6c:64:aa:64:42:0b:25:1b:eb:26:07:59:34:17:15:45:
         64:dc:4b:44:17:ca:fc:59:77:3b:28:ad:0f:f7:ab:5e:b6:a2:
         db:c8:af:65:e2:c5:4c:64:71:e8:6e:f0:dc:92:50:01:b5:65:
         82:3f:7a:3a:e4:85:da:fc:f0:1f:2f:0d:46:45:cd:5b:b8:2f:
         60:92:65:33:72:ae:02:28:b2:08:07:e4:57:27:48:cd:23:c8:
         02:77:8c:4a:59:f8:2b:1d:a3:36:51:6c:7d:4f:fd:f3:1a:37:
         23:d4:cc:b8:db:a8:80:a7:6c:1f:98:77:90:87:e4:fd:52:0b:
         6b:8e:7e:02:c2:35:2c:12:39:d9:6b:3e:52:b2:65:e3:3e:bb:
         34:98:f6:ae:91:cd:90:00:5f:74:30:78:3f:12:69:8c:62:c2:
         3d:50:f8:9d:4e:cb:9f:5e:49:10:73:46:82:b2:bc:0a:dc:38:
         ff:79:02:cb:6d:0e:f3:8e:03:7f:71:5a:0d:28:3b:59:a7:2f:
         05:36:1a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:04 2025 by rpki-client