Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
File:                     skX7DTNtIH91Ns4pX55phiihTuQ.mft (raw, json)
Hash identifier:          RvrvTQ/f4lOjTvNJCcZErvmxMkAJO6RMCMQT8/8lUK4=
Subject key identifier:   16:09:8D:4E:25:D5:F2:26:6D:E7:BD:5E:67:F4:19:DA:83:14:7B:73
Authority key identifier: B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4
Certificate issuer:       /CN=b245fb0d336d207f7536ce295f9e698628a14ee4
Certificate serial:       019647B2E2CD4B5E18C5D5D77FDA9695E221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
Manifest number:          0903
Signing time:             Fri 18 Apr 2025 07:00:27 +0000
Manifest this update:     Fri 18 Apr 2025 07:00:27 +0000
Manifest next update:     Sat 19 Apr 2025 07:00:27 +0000
Files and hashes:         1: skX7DTNtIH91Ns4pX55phiihTuQ.crl (hash: 8Uta4OImcZW5GCKSX0Bd6kqMjV+AzX3VLgGzGBKMQ3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 07:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:47:b2:e2:cd:4b:5e:18:c5:d5:d7:7f:da:96:95:e2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b245fb0d336d207f7536ce295f9e698628a14ee4
        Validity
            Not Before: Apr 18 07:00:27 2025 GMT
            Not After : Apr 19 07:00:27 2025 GMT
        Subject: CN=16098d4e25d5f2266de7bd5e67f419da83147b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:78:37:51:ee:ff:fa:00:7e:c8:ec:9f:7a:ba:
                    b3:77:8d:0e:e6:50:76:74:2d:be:79:2e:7b:09:15:
                    8a:b5:7d:ac:48:ef:35:c9:b7:a5:65:52:3b:9a:61:
                    8c:ef:b3:37:48:9a:50:29:fc:a6:f8:e3:8d:9c:29:
                    77:b9:06:42:2e:52:c3:7d:d6:ad:c5:23:29:83:59:
                    f1:15:44:49:ce:e8:e1:98:3b:db:9e:b5:c7:fe:09:
                    c1:66:43:bf:57:63:83:39:8c:14:16:48:ff:be:92:
                    4c:9a:74:c4:1b:6a:ea:dc:ae:e1:ba:38:af:fc:b0:
                    3c:7c:bb:9c:c3:ed:6e:74:d0:79:07:29:69:bb:ca:
                    e1:06:68:9c:aa:22:54:6c:7c:b2:3b:d8:9d:f2:0f:
                    a5:21:46:8f:2b:21:b5:ee:33:ce:5d:37:ff:dc:27:
                    65:ac:03:a5:9e:10:8c:ea:d9:d7:eb:26:ad:09:3d:
                    64:ce:dd:26:fb:b3:6f:f2:c9:70:4a:69:7b:d6:4c:
                    fd:e2:91:86:c9:0e:b8:08:e5:35:4d:16:50:b1:33:
                    f8:b6:de:70:a7:49:f7:c2:97:6a:05:0d:74:32:fd:
                    26:b0:1b:c4:9d:86:9e:74:85:69:a5:3c:40:6d:f7:
                    74:ff:c4:d0:ac:64:58:e3:37:5e:17:01:8f:7c:18:
                    2e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:09:8D:4E:25:D5:F2:26:6D:E7:BD:5E:67:F4:19:DA:83:14:7B:73
            X509v3 Authority Key Identifier:
                keyid:B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:c6:88:39:79:83:67:21:a2:f3:dd:3f:48:c0:ee:4f:24:43:
         5f:4f:30:a2:9a:d6:ff:31:d9:86:05:5d:7a:ef:33:59:97:66:
         bc:ed:75:c1:5a:34:6b:ea:6f:e3:0b:5d:4b:ae:67:e2:53:11:
         90:e3:58:52:12:99:1b:6a:9d:31:6f:e2:55:aa:51:08:58:67:
         79:a2:9c:be:c7:fb:55:ae:b7:84:ca:d3:77:00:d3:9f:72:99:
         03:4c:32:5e:ed:b3:f5:76:3f:df:dd:07:74:94:57:c9:37:fa:
         e3:af:56:eb:f1:e7:d4:4c:ba:f5:6b:18:d8:fb:ce:3d:3e:22:
         27:5a:97:eb:ba:3c:ee:f4:7c:b8:21:f6:73:83:6d:d7:6d:e8:
         53:c0:6e:4d:81:ce:1d:37:b0:10:5e:68:d8:ef:04:0c:61:b7:
         7e:0a:ad:07:7e:44:fc:c4:b4:96:35:2e:ce:84:94:e3:68:b8:
         70:10:4c:6c:53:87:f6:06:8e:5e:a2:57:66:79:27:cc:b1:ef:
         80:8f:a4:fc:d4:0c:83:8e:28:b2:33:a0:e7:fc:34:f4:36:52:
         cf:a2:00:bb:16:19:74:46:b0:6a:68:c8:7d:12:f6:d5:d1:95:
         cb:69:91:2f:6d:37:8a:85:19:29:b2:4f:0b:be:d6:63:8e:6d:
         91:fb:43:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:21:37 2025 by rpki-client