Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
File:                     IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft (raw, json)
Hash identifier:          anZK5Znm6LutL2gJgwLwVPhTyPSqpjMi4P+90Uji2Os=
Subject key identifier:   F9:07:52:9E:DF:C2:37:B3:84:13:47:CA:22:06:8A:B0:CD:E4:B0:87
Authority key identifier: 22:F5:53:FE:F5:C1:85:9D:95:23:00:AD:3E:FB:51:1E:58:AF:DA:01
Certificate issuer:       /CN=22f553fef5c1859d952300ad3efb511e58afda01
Certificate serial:       01964669D2C08AFF053C60D1A1AC6EBA1CA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
Manifest number:          14F1
Signing time:             Fri 18 Apr 2025 01:01:02 +0000
Manifest this update:     Fri 18 Apr 2025 01:01:02 +0000
Manifest next update:     Sat 19 Apr 2025 01:01:02 +0000
Files and hashes:         1: IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl (hash: b16Cebx7ib+lV1dfr48QhX2VUfyJRXfjjviJXnawzQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:46:69:d2:c0:8a:ff:05:3c:60:d1:a1:ac:6e:ba:1c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f553fef5c1859d952300ad3efb511e58afda01
        Validity
            Not Before: Apr 18 01:01:02 2025 GMT
            Not After : Apr 19 01:01:02 2025 GMT
        Subject: CN=f907529edfc237b3841347ca22068ab0cde4b087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e8:53:f6:dd:34:00:36:bb:c7:39:d9:02:08:
                    a7:54:f1:dd:9d:2f:43:15:e4:e2:ec:eb:eb:b9:fa:
                    31:9f:9b:9c:a0:80:a1:e1:0d:77:b7:ca:3a:32:2f:
                    da:3e:38:29:27:60:d1:ba:2e:9b:d0:5b:7f:d5:ec:
                    6d:d4:e3:c5:aa:6b:97:20:51:dd:71:9d:00:7b:d3:
                    b1:94:e4:76:21:f3:68:27:67:8f:6b:2e:4f:c9:f0:
                    de:c6:b0:60:4b:58:7b:c4:9c:89:a7:60:82:f6:7b:
                    ff:d1:8d:84:1d:c8:3c:82:1d:2d:b1:69:f4:44:e9:
                    4a:47:70:dd:74:86:b9:1f:6a:29:8d:16:a7:80:a8:
                    be:b3:0d:99:94:f1:47:e2:04:de:c1:66:58:5d:99:
                    a2:3c:23:93:e5:5e:66:22:28:1b:69:7a:13:20:9c:
                    93:a1:0c:98:52:f2:69:0d:d5:c0:8b:9d:93:e5:71:
                    a0:88:9e:65:c0:35:d7:d4:06:56:f5:a9:a7:5a:df:
                    e5:e7:64:c7:00:53:a3:f7:63:6a:72:79:00:32:21:
                    c4:b8:c9:e9:d3:75:6e:da:8c:fb:26:2b:4d:08:8e:
                    39:5e:68:2d:41:26:26:52:45:04:80:d4:42:4a:49:
                    08:79:69:87:05:63:d6:2f:0b:87:01:36:6b:10:ab:
                    45:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:07:52:9E:DF:C2:37:B3:84:13:47:CA:22:06:8A:B0:CD:E4:B0:87
            X509v3 Authority Key Identifier:
                keyid:22:F5:53:FE:F5:C1:85:9D:95:23:00:AD:3E:FB:51:1E:58:AF:DA:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:cb:b0:c1:ef:7e:98:17:3d:b2:6e:77:fc:c1:a3:d8:53:d1:
         f4:6c:18:af:05:92:d0:14:53:c9:cd:52:9b:a8:77:49:09:e0:
         08:3d:3f:2b:27:2b:7e:aa:fa:54:d8:99:3f:ae:c0:6b:51:fd:
         33:a1:30:44:3d:be:b2:ff:e0:75:ea:2c:b0:bf:83:de:cf:c5:
         57:70:df:6b:9e:1f:7c:4c:72:8c:71:4d:2d:fe:7e:29:67:13:
         dc:98:d8:0f:fa:a4:e6:97:66:f9:8e:d7:4a:53:1b:3c:46:52:
         49:3d:9e:b5:e8:40:4c:b2:7d:8a:56:eb:95:d9:c5:9c:74:64:
         4e:21:01:9c:5a:41:e6:7c:24:c3:0d:3a:13:cf:1f:96:96:8f:
         fc:b7:d7:76:87:5c:04:db:9e:61:2b:25:8c:10:57:c3:6d:c8:
         fc:43:de:af:73:1f:f8:df:ab:23:5f:5a:c2:8a:6c:69:05:ec:
         f1:0e:76:cd:03:44:7c:a2:10:a6:a6:ca:fe:ab:15:a1:ff:03:
         bb:8c:a5:78:36:17:09:51:da:19:0f:11:b5:01:13:17:cc:4e:
         39:9a:e5:01:84:ba:61:b4:8e:8e:cd:07:6b:30:63:44:81:98:
         61:e7:92:a1:44:54:26:dd:42:e6:8a:dd:e1:e8:96:fa:e5:9d:
         c5:b6:9f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:52:24 2025 by rpki-client