Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
File:                     Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft (raw, json)
Hash identifier:          hkN7Wu136zjCX+bi4hVK2Nley9ycXDrE0lSdhWQI4g8=
Subject key identifier:   C6:9C:41:9C:29:CA:62:20:10:6C:B9:10:87:EA:74:42:E2:D4:B2:65
Authority key identifier: 32:8E:FF:BB:BF:D5:53:5D:3E:71:BA:6E:A8:15:EE:49:05:C1:C2:0D
Certificate issuer:       /CN=328effbbbfd5535d3e71ba6ea815ee4905c1c20d
Certificate serial:       01964F6CCD90CF40D92619C98944962AC7C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mo7_u7_VU10-cbpuqBXuSQXBwg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
Manifest number:          0AA3
Signing time:             Sat 19 Apr 2025 19:00:52 +0000
Manifest this update:     Sat 19 Apr 2025 19:00:52 +0000
Manifest next update:     Sun 20 Apr 2025 19:00:52 +0000
Files and hashes:         1: Mo7_u7_VU10-cbpuqBXuSQXBwg0.crl (hash: 9F33kBYYBy5rLBSwXmWl8zQNh78jL3ZXqq3FGYjwmIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mo7_u7_VU10-cbpuqBXuSQXBwg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 19:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6c:cd:90:cf:40:d9:26:19:c9:89:44:96:2a:c7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328effbbbfd5535d3e71ba6ea815ee4905c1c20d
        Validity
            Not Before: Apr 19 19:00:52 2025 GMT
            Not After : Apr 20 19:00:52 2025 GMT
        Subject: CN=c69c419c29ca6220106cb91087ea7442e2d4b265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:90:6a:74:c7:33:65:25:2d:0c:b6:33:52:fb:
                    b3:1b:0c:d6:41:65:e2:92:30:57:48:c7:27:38:70:
                    f5:03:37:82:46:24:51:4b:18:e8:64:37:97:b2:3a:
                    41:20:d4:15:f2:ab:29:e3:f2:4e:ae:17:cd:63:ae:
                    81:58:92:4c:1a:09:e3:fe:01:29:9e:d9:8e:a1:24:
                    1d:38:5d:6f:58:99:59:5d:7f:90:a4:8c:a6:ff:5b:
                    8a:8d:72:fd:e3:21:1d:d1:fb:05:42:f2:f6:fc:64:
                    ce:f4:09:4c:95:e1:b4:13:17:9d:84:36:ea:1a:4d:
                    70:49:52:2e:96:86:2a:c0:10:16:37:28:17:d6:85:
                    68:25:d1:cb:6f:d1:0b:14:49:f3:3f:f3:e3:7c:94:
                    e8:98:1d:57:10:53:7f:5b:63:d2:cb:4f:6b:72:c2:
                    77:da:89:97:b5:2d:9e:e6:b0:60:d6:78:a7:91:21:
                    c7:96:8c:5e:5d:db:1e:6d:54:85:ff:e8:4f:ce:e2:
                    ba:40:0c:e0:96:d3:40:cb:1d:95:88:98:2c:6c:74:
                    b7:03:26:a8:d1:ff:80:02:f8:d1:0b:17:32:75:db:
                    b8:ee:dd:bd:1c:67:b8:ef:43:62:d4:b9:d5:1d:0e:
                    e6:da:ec:5c:49:e8:ad:08:35:00:d0:57:60:d2:5c:
                    ac:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9C:41:9C:29:CA:62:20:10:6C:B9:10:87:EA:74:42:E2:D4:B2:65
            X509v3 Authority Key Identifier:
                keyid:32:8E:FF:BB:BF:D5:53:5D:3E:71:BA:6E:A8:15:EE:49:05:C1:C2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo7_u7_VU10-cbpuqBXuSQXBwg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:2d:c7:1e:c3:bb:40:2a:68:22:c3:34:db:6e:cd:4c:93:35:
         7c:46:8a:1d:69:fd:41:38:dc:10:a3:cb:f7:8f:cd:fe:57:4f:
         c6:9d:83:3f:6a:eb:5f:76:43:71:31:bf:82:ae:02:88:9e:b1:
         dc:6a:15:17:41:bd:b3:91:ed:6b:a8:5c:4d:34:e6:c7:56:63:
         2f:0c:cf:6e:a1:d3:21:68:3b:8a:31:76:df:0e:a2:9e:f4:88:
         a9:8f:2e:e9:99:0a:72:24:bf:98:49:21:fc:de:cf:99:87:04:
         f2:b9:2c:61:02:01:92:f2:19:40:a3:ae:bb:65:95:64:8d:75:
         78:bd:ab:93:f9:53:31:e1:6d:f4:01:bc:55:f4:cc:27:44:82:
         72:c4:01:9b:1b:89:87:9d:fb:a9:43:40:dc:b2:c2:65:3e:ab:
         f9:db:ec:6e:3c:da:a5:aa:88:f9:5b:07:b1:27:b3:c7:0f:15:
         56:44:da:9a:35:f4:2a:f4:63:14:22:c9:3a:e9:2a:c6:69:32:
         75:37:8f:8b:cb:a4:2f:07:85:15:a3:e3:ca:d0:3f:f3:bc:4e:
         13:eb:de:1e:97:cb:71:c5:e5:9f:bb:91:c9:1f:50:ed:b7:8d:
         0e:7c:3d:75:d3:e0:10:9b:4f:a9:da:ff:96:5f:f8:e7:69:77:
         3e:39:85:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:58:44 2025 by rpki-client