Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
File:                     oVKeqYh_ni_mqUWpfUgha8FqS0E.mft (raw, json)
Hash identifier:          ZoxsQPwT0DaMCyB59Bb8X5+HoZF3hBe8qxH2nafDMEc=
Subject key identifier:   D0:17:B6:17:39:0E:AB:73:68:5D:9D:26:FD:8A:D6:66:FA:3F:7D:CF
Authority key identifier: A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
Certificate issuer:       /CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Certificate serial:       01962CAA88D0DDB4ED2017489130E558326A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
Manifest number:          0FD6
Signing time:             Sun 13 Apr 2025 01:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 01:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 01:01:35 +0000
Files and hashes:         1: oVKeqYh_ni_mqUWpfUgha8FqS0E.crl (hash: 1PRi/vz2MKgRbjIG4MpkOxXPcaA7Dx+JF0oByk+jeTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2c:aa:88:d0:dd:b4:ed:20:17:48:91:30:e5:58:32:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
        Validity
            Not Before: Apr 13 01:01:35 2025 GMT
            Not After : Apr 14 01:01:35 2025 GMT
        Subject: CN=d017b617390eab73685d9d26fd8ad666fa3f7dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:c4:b8:5c:5a:a4:84:91:cb:2a:eb:74:be:
                    6c:05:76:e2:42:3c:48:bd:9e:c2:b9:73:81:d4:43:
                    d2:a4:bb:3d:cd:19:c6:89:f3:8b:31:92:c8:20:98:
                    43:62:3a:e9:be:9d:d6:2a:b4:e6:25:43:9d:f3:5e:
                    31:5a:54:96:d5:26:50:7a:12:2f:ac:e0:76:d1:fd:
                    78:e8:19:1b:0e:69:98:99:5d:26:86:12:03:ef:38:
                    3f:81:5b:8a:c0:e7:86:50:6d:ab:9a:81:33:40:02:
                    bd:b8:35:ab:1e:ac:99:a7:dc:8d:e2:82:84:99:5d:
                    9c:65:80:27:f7:62:10:7f:81:f3:68:ba:53:fc:09:
                    7b:af:a6:8f:c6:19:5c:1c:bf:ee:2d:43:06:3e:56:
                    d2:d5:b4:f5:e7:f7:67:ee:d3:cf:93:60:59:a8:1b:
                    c3:d9:7f:fd:e9:71:bc:85:af:c6:65:86:58:1b:a2:
                    2f:64:a4:0e:71:f3:58:53:c6:57:04:2f:7d:ef:82:
                    6c:22:72:1e:f8:7a:cd:60:04:1b:ac:db:f7:a5:4d:
                    b0:f7:79:1b:91:bf:b5:5d:de:d8:6d:44:bd:26:78:
                    73:72:3c:c2:0b:d5:04:cb:0a:b2:cb:1c:27:d8:c2:
                    7f:f4:e0:42:99:14:99:94:d3:83:47:4b:11:61:d9:
                    a5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:17:B6:17:39:0E:AB:73:68:5D:9D:26:FD:8A:D6:66:FA:3F:7D:CF
            X509v3 Authority Key Identifier:
                keyid:A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e0:cf:cc:0c:b1:a0:2f:ac:68:39:26:43:db:36:cc:36:61:
         94:93:c9:55:46:9e:bc:f0:bf:97:41:ab:79:2b:2b:c7:02:15:
         da:ed:7a:c7:d9:db:4e:fd:d1:03:70:a9:27:45:81:87:d5:a1:
         63:85:9f:48:28:18:e4:af:b7:58:f5:41:b3:dd:f2:d1:13:ed:
         f7:b4:3c:61:8b:80:37:a5:63:81:d6:47:2e:8f:b5:c9:8d:67:
         68:f9:64:d4:d3:08:9b:ce:d8:60:9b:59:c5:29:b1:d2:cd:2d:
         88:b1:6a:ec:1a:e9:d4:25:b5:79:4d:a3:6d:07:6f:8f:5d:9d:
         b3:05:1c:86:66:79:96:da:63:5f:11:58:40:c9:82:21:64:bf:
         ae:6b:e3:c9:15:bb:f6:28:8d:f1:0a:c0:80:c7:6c:fd:4d:03:
         ae:b6:98:48:30:09:9d:4b:90:0f:c0:fd:1f:e5:03:df:88:28:
         74:3d:86:4a:ed:63:99:ba:9a:a0:36:cf:ad:b9:d4:95:6d:e4:
         84:47:1f:c4:8a:12:6a:c0:bf:54:19:6c:b9:10:a6:5d:d1:27:
         9b:fe:82:c1:28:58:d2:96:e3:ac:71:e9:96:d0:70:62:4c:10:
         e6:d2:1e:2e:39:c8:e1:56:06:c0:45:9e:21:50:5b:61:87:f0:
         a2:5c:4b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:49:11 2025 by rpki-client