Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
File:                     k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft (raw, json)
Hash identifier:          nrxyYuLd70QMh9URhC+0EHqp6yOvEIQjYTstfeTCh3I=
Subject key identifier:   44:4D:C7:13:BC:00:98:C5:28:1C:D4:5C:59:2F:D8:00:DC:53:1F:27
Authority key identifier: 93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE
Certificate issuer:       /CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde
Certificate serial:       01964D104C60672824A447B4AAC0A51FC4BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
Manifest number:          0453
Signing time:             Sat 19 Apr 2025 08:00:35 +0000
Manifest this update:     Sat 19 Apr 2025 08:00:35 +0000
Manifest next update:     Sun 20 Apr 2025 08:00:35 +0000
Files and hashes:         1: 28GUm6MyGmDzZNaWznfWcQv0e_Y.roa (hash: C7L+FDUEfqbFey+e0t8jNl/x+IFvC1I+YVSxl7oinY0=)
                          2: k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl (hash: rNVmzx3uY2DA3AdYcokTFOB/Sxl5WIfqPmOeIFhXEZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 08:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:10:4c:60:67:28:24:a4:47:b4:aa:c0:a5:1f:c4:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde
        Validity
            Not Before: Apr 19 08:00:35 2025 GMT
            Not After : Apr 20 08:00:35 2025 GMT
        Subject: CN=444dc713bc0098c5281cd45c592fd800dc531f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:c0:1d:3d:4d:88:a6:eb:f4:ff:78:e3:0b:
                    ba:b1:1b:58:64:00:e9:29:27:b0:55:f2:80:61:6e:
                    db:7a:15:55:2c:7d:27:5e:6a:fc:4b:17:ee:73:45:
                    e9:de:94:d1:62:12:a1:fb:f9:ce:49:8b:3a:6b:cb:
                    74:ef:f1:94:ac:51:cd:8f:85:45:44:79:93:e2:ac:
                    5a:89:fa:6a:74:b2:f6:d2:ba:50:b3:7a:34:4f:8f:
                    a7:29:59:f1:f7:e1:75:97:fc:1a:05:08:c9:3f:6d:
                    54:49:13:6c:7d:0f:e8:c5:8a:88:e4:4c:d1:a6:fe:
                    32:18:06:cf:91:d9:20:36:94:a1:1d:0c:22:a9:70:
                    39:83:1e:d8:26:55:2d:f2:15:ff:ca:17:7b:ff:f0:
                    15:a5:0c:0b:c5:28:09:3e:b9:77:d3:47:4e:dc:dd:
                    4a:8a:bc:7a:67:fb:58:0c:0c:8d:10:c5:dd:52:b6:
                    b9:81:df:c4:e7:a9:5b:ed:b7:8a:d4:80:8d:26:93:
                    e8:75:88:df:eb:a7:6f:58:e5:71:30:26:bb:0c:95:
                    88:08:67:dd:73:df:22:e3:ae:40:87:95:c9:5a:62:
                    e7:f5:7e:25:d1:59:bf:78:63:99:87:db:59:ba:67:
                    dc:ac:41:b0:87:fb:d5:c2:d4:e5:bb:2f:5b:42:48:
                    3a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4D:C7:13:BC:00:98:C5:28:1C:D4:5C:59:2F:D8:00:DC:53:1F:27
            X509v3 Authority Key Identifier:
                keyid:93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:ac:8a:38:20:31:d4:66:04:7e:93:b8:c2:b5:76:e3:0d:b4:
         99:4f:c4:c3:ec:e6:c8:f9:ba:02:bf:f1:b1:12:43:89:78:8d:
         74:9e:f7:66:ea:87:50:f3:e3:25:18:8d:21:46:e2:ca:37:a5:
         34:c7:2f:15:fb:db:dc:19:7d:3f:ef:9f:fa:0b:8a:df:00:95:
         98:e0:62:77:d1:23:24:60:ff:34:e6:88:79:4a:80:19:ff:f5:
         41:f6:59:b6:4c:08:a8:c8:64:41:3d:fa:ce:5a:b5:f8:06:a1:
         86:43:f9:bf:c3:c7:b9:31:6c:12:97:78:ee:44:de:7e:ca:40:
         75:b6:b3:34:64:d3:23:de:12:14:e2:ef:15:6e:0d:02:3d:d4:
         e4:86:9a:66:89:cf:91:93:3c:b7:70:a6:20:89:2e:cb:84:dc:
         0b:83:3b:b3:93:6d:8f:7a:72:dd:34:0c:e7:ca:b9:21:3f:e6:
         69:68:42:c3:c1:c5:91:ba:cb:18:47:57:2d:f6:1a:19:7a:a7:
         b9:76:2f:2d:59:78:41:0b:46:c0:f8:44:15:93:bc:c2:aa:6b:
         17:cd:4c:ca:9d:ef:a8:be:9b:a2:40:c8:95:ab:d3:42:05:e4:
         cd:b3:0a:13:51:98:20:c6:dc:34:d7:cb:f1:bf:e4:e6:42:78:
         f9:83:46:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:22 2025 by rpki-client