Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
File:                     2x3NeuqJI6iq_So40dw9BmhAeaY.mft (raw, json)
Hash identifier:          TI3PXajdUqZyiNtBX7uEDxB9rFA1oVXMD3Dr/GGCHGs=
Subject key identifier:   FC:A3:53:EF:91:E5:AD:2D:C2:30:93:7A:B2:39:DB:CD:DB:BD:92:9D
Authority key identifier: DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
Certificate issuer:       /CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
Certificate serial:       01974A7B07AC29D5051E89556AA1F4C257FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
Manifest number:          0814
Signing time:             Sat 07 Jun 2025 13:01:06 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:06 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:06 +0000
Files and hashes:         1: 2x3NeuqJI6iq_So40dw9BmhAeaY.crl (hash: ZywDwhAbSu9XaG33fLwvFOpn6noc2E4wQd6dj1Si308=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:07:ac:29:d5:05:1e:89:55:6a:a1:f4:c2:57:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
        Validity
            Not Before: Jun  7 13:01:06 2025 GMT
            Not After : Jun  8 13:01:06 2025 GMT
        Subject: CN=fca353ef91e5ad2dc230937ab239dbcddbbd929d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:23:c7:76:4d:2e:11:23:49:b9:e5:b7:ad:
                    77:d7:6e:c6:f2:64:89:07:db:ba:e8:ca:23:91:fa:
                    1b:21:ac:ff:6a:1a:45:68:98:48:db:8a:c3:fd:79:
                    50:31:c9:1e:c0:31:65:ff:f1:cc:f6:4a:da:e9:6f:
                    2f:07:4e:ec:9a:e8:72:a0:8d:c2:49:2d:d5:67:8d:
                    77:c3:50:17:04:2b:72:12:1a:8f:e4:2b:04:aa:0a:
                    f6:ec:5e:f1:2f:d5:92:b0:33:d5:12:ad:d0:b8:54:
                    c3:bb:30:c6:b3:38:f3:a7:d6:50:5e:d2:e8:da:bd:
                    22:2f:4c:db:38:8b:9f:0c:da:54:fa:f7:54:26:5a:
                    9d:7d:17:03:ca:e5:54:d2:55:c8:aa:ca:2b:51:24:
                    ec:fb:08:bc:d5:d5:fc:05:1d:86:9c:bd:fd:91:5d:
                    30:ec:5d:72:20:3a:7a:fd:51:13:f3:89:2c:b1:44:
                    97:13:0e:bf:59:51:06:f6:23:24:4d:7a:d4:00:70:
                    ef:91:95:f4:60:8a:af:6a:d3:7f:d6:80:54:5f:ea:
                    a2:d2:4c:c7:7b:76:b9:40:09:09:e2:f2:d8:87:49:
                    14:1e:b3:eb:07:95:66:cc:63:8e:cf:09:80:46:37:
                    f4:48:c6:e6:c2:52:dd:f6:61:86:6a:8a:61:11:a2:
                    a6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A3:53:EF:91:E5:AD:2D:C2:30:93:7A:B2:39:DB:CD:DB:BD:92:9D
            X509v3 Authority Key Identifier:
                keyid:DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:07:4a:d8:c3:03:e0:3e:2f:e6:a4:66:dd:20:e9:fd:46:3a:
         e5:ba:da:9a:01:21:54:b1:be:c3:1b:bb:85:35:b0:41:0e:af:
         55:fc:5e:8b:06:e3:3c:e2:39:7d:74:00:71:23:e3:3d:d0:35:
         f3:ad:6d:15:f7:51:5e:96:ee:7a:7a:2a:37:63:0b:8c:91:d8:
         dc:29:8e:75:8a:90:7f:4c:72:3f:96:15:25:78:87:fa:55:90:
         04:5c:f2:00:90:17:69:c1:80:73:25:04:ff:af:88:74:06:5e:
         cb:5a:7f:72:d6:91:ff:7f:41:b9:0e:79:ae:58:1b:d1:22:12:
         53:01:97:a6:30:25:4d:0f:52:f1:12:82:b1:e9:78:78:1d:d8:
         9a:51:49:ef:85:82:d9:6d:ca:db:05:86:d7:c1:b0:79:82:99:
         05:19:c2:e4:54:67:1f:d7:9c:e4:8c:a4:4b:e7:51:a7:a4:de:
         d8:27:6e:42:1b:d7:6b:4b:e6:ba:2b:65:55:10:32:31:44:16:
         1f:ae:1d:12:bb:74:ae:aa:29:67:d7:77:c1:da:b9:15:66:d2:
         a3:e9:78:e8:fa:5a:93:0f:94:7e:4b:af:6c:bf:e4:99:71:b0:
         83:1b:8f:4d:2b:62:57:92:f9:2a:e2:1e:2b:ba:b0:08:62:00:
         02:dc:fc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:29:26 2025 by rpki-client