Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
File:                     5fbO0n_GD5APrBt1HbHuS_eFqrM.mft (raw, json)
Hash identifier:          kwz9MoykA11pXAUhXlA0CBu0asNbgYoBNef/47AcEH0=
Subject key identifier:   B5:B1:BD:D5:54:A7:A6:33:BE:C0:69:E7:E6:65:BB:7B:6C:81:88:0E
Authority key identifier: E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3
Certificate issuer:       /CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
Certificate serial:       01958B4D499BEE82AA32B7CD3C39C2C02C2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
Manifest number:          1499
Signing time:             Wed 12 Mar 2025 17:00:52 +0000
Manifest this update:     Wed 12 Mar 2025 17:00:52 +0000
Manifest next update:     Thu 13 Mar 2025 17:00:52 +0000
Files and hashes:         1: 5fbO0n_GD5APrBt1HbHuS_eFqrM.crl (hash: Ry1I+hqTFbAcncg2QVP6kkEDeloBAsgjoeVqHzRX6/U=)
                          2: uBEfWIHV8Ysgcm0WjhvS8qePbzM.roa (hash: g7l6o1+EK67dHVtVxC57iUhjiYlLOzwY9EalaarNVkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 17:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:4d:49:9b:ee:82:aa:32:b7:cd:3c:39:c2:c0:2c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
        Validity
            Not Before: Mar 12 17:00:52 2025 GMT
            Not After : Mar 13 17:00:52 2025 GMT
        Subject: CN=b5b1bdd554a7a633bec069e7e665bb7b6c81880e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0d:11:5a:a9:a0:a9:34:eb:11:a9:9e:57:7e:
                    7d:36:c0:e9:d6:16:7f:d1:de:15:ad:b2:2e:df:a3:
                    da:fb:93:4d:98:58:1e:60:71:b3:07:6e:8e:ef:ec:
                    bb:46:ba:81:e5:88:21:7d:22:5e:6b:bf:66:07:02:
                    9b:14:85:f7:f0:03:e3:d3:30:51:07:80:da:48:4b:
                    7b:54:ac:83:f8:d3:86:a9:0f:91:41:af:cc:cc:01:
                    c6:42:bc:9a:5c:1d:7c:86:e1:50:d4:2b:f7:2b:50:
                    88:fb:87:0e:ef:1e:27:5d:ef:e0:88:b3:aa:a8:0e:
                    4d:0f:39:cd:4d:76:9f:7b:d3:48:a3:ca:9a:a0:74:
                    19:8f:37:94:76:d5:49:f9:4b:93:d6:84:31:17:6c:
                    f1:bf:3b:f6:b0:ed:55:7e:8c:bf:04:74:ec:40:75:
                    ce:07:d1:a0:40:b4:bd:3e:b7:bf:87:c3:1e:fe:8d:
                    7b:6a:d1:61:62:0d:f2:da:c8:bc:48:2d:c3:9d:ea:
                    45:45:ad:f7:f5:d9:46:dc:ce:28:1a:5a:bf:63:6d:
                    68:68:6c:68:ee:b3:16:00:41:ff:a7:c6:95:63:d8:
                    38:4b:46:b6:d9:c8:46:20:39:37:d7:09:73:48:70:
                    09:97:ff:1e:c8:da:6c:41:7d:f7:9d:37:3f:d9:f5:
                    23:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B1:BD:D5:54:A7:A6:33:BE:C0:69:E7:E6:65:BB:7B:6C:81:88:0E
            X509v3 Authority Key Identifier:
                keyid:E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:6a:42:df:0d:b1:e8:dd:d4:42:7d:b2:df:d8:11:da:cc:ae:
         46:4b:da:c8:eb:0b:dd:21:a4:85:3f:f3:c8:ff:e4:c2:e0:6e:
         70:6b:fd:cd:2c:53:62:f5:e9:ed:8a:aa:0e:36:45:64:23:c3:
         e4:2b:2a:f7:2f:71:aa:5b:95:b6:6d:ce:a1:0c:29:0e:7b:c9:
         62:ab:b6:92:61:bd:6c:6a:81:69:46:f1:11:14:4c:8a:e3:4d:
         78:6c:58:e5:60:f5:66:fb:c2:79:0e:88:cb:98:c8:5e:bb:0e:
         f2:cd:d1:f1:75:cd:4e:44:91:de:fb:00:3a:65:3f:bd:8e:e8:
         f2:76:92:98:d0:49:de:50:9e:ca:c7:bb:15:a2:c4:f9:51:27:
         0c:5a:df:27:62:d1:64:09:30:f4:bf:f8:91:34:41:3c:68:0b:
         bd:ea:84:6f:8f:49:9b:a2:12:de:73:af:a3:47:6d:96:8d:da:
         77:4f:c7:bb:68:1c:bb:0e:44:b7:cb:92:fb:07:37:fe:4d:37:
         8d:d3:64:a8:8f:68:8d:a5:85:ad:67:67:6f:33:f6:80:fa:a8:
         5c:3e:42:89:b1:df:ab:ae:c3:e7:5b:a1:40:33:fe:e9:99:60:
         32:5b:b1:8e:2c:22:fe:9a:f9:f2:24:3f:55:b2:d4:cf:25:76:
         8f:19:84:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:30 2025 by rpki-client