Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft
File:                     Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft (raw, json)
Hash identifier:          HdJeFYYy+GEMoDcTYWmwtDpVSBbtyZviG3JfxvRVq/w=
Subject key identifier:   E5:D6:BF:9F:72:8B:90:48:24:01:A5:BA:B9:3F:8F:88:38:BE:B9:6B
Authority key identifier: 53:37:DD:FA:65:30:FC:C6:7F:76:93:7D:EB:E3:D8:20:8C:B9:90:2C
Certificate issuer:       /CN=5337ddfa6530fcc67f76937debe3d8208cb9902c
Certificate serial:       01964A4660A23CDB28992A959A762ED41D7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft
Manifest number:          069B
Signing time:             Fri 18 Apr 2025 19:00:48 +0000
Manifest this update:     Fri 18 Apr 2025 19:00:48 +0000
Manifest next update:     Sat 19 Apr 2025 19:00:48 +0000
Files and hashes:         1: Uzfd-mUw_MZ_dpN96-PYIIy5kCw.crl (hash: Als9Yer+cvqPZT0PW5XIzFY8JaARI+SJsQuaeO/xeWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:46:60:a2:3c:db:28:99:2a:95:9a:76:2e:d4:1d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5337ddfa6530fcc67f76937debe3d8208cb9902c
        Validity
            Not Before: Apr 18 19:00:48 2025 GMT
            Not After : Apr 19 19:00:48 2025 GMT
        Subject: CN=e5d6bf9f728b90482401a5bab93f8f8838beb96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:d9:b8:a4:da:f4:28:38:15:49:e8:7a:3a:
                    d3:62:76:55:e2:16:f2:02:75:fa:80:5d:87:36:3f:
                    ac:3b:a6:1d:12:84:da:d4:ff:49:78:cf:59:3a:9a:
                    c2:e6:c4:2b:7a:fe:93:da:a3:b0:ad:e8:19:f6:41:
                    ff:e4:55:23:c0:34:56:08:b2:e4:d8:a8:2f:a6:1d:
                    00:6d:f2:a2:36:c3:72:18:93:7d:1b:a6:0d:8a:bc:
                    8d:82:ca:fd:f4:74:56:0c:ea:9f:11:2e:c3:7c:ef:
                    51:09:87:d1:d3:1c:c9:0c:6c:78:38:95:2f:33:30:
                    9b:98:c9:e2:9a:1d:ab:ca:74:03:58:60:d8:d1:39:
                    34:c7:56:52:33:20:d5:aa:c9:b7:ee:6c:60:5d:29:
                    9a:e3:03:6a:00:da:db:a5:19:e8:e2:f7:c2:ae:5d:
                    c3:0c:b7:20:4d:b5:35:9f:cc:14:92:f8:f8:91:47:
                    e7:bc:0a:b8:19:ad:3a:2f:5d:fb:8d:92:d7:1e:69:
                    bc:d1:60:03:4d:36:4b:4a:3c:29:33:d3:f4:fa:a0:
                    98:96:95:8b:b0:9b:1c:b1:ad:78:c5:c1:74:02:0b:
                    6b:33:cf:01:d5:47:c9:8e:db:27:65:55:95:f2:4e:
                    5b:a6:15:84:dc:29:94:ee:de:68:9a:f7:d7:b2:fe:
                    28:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D6:BF:9F:72:8B:90:48:24:01:A5:BA:B9:3F:8F:88:38:BE:B9:6B
            X509v3 Authority Key Identifier:
                keyid:53:37:DD:FA:65:30:FC:C6:7F:76:93:7D:EB:E3:D8:20:8C:B9:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:3d:01:ba:09:40:6e:f3:9d:8a:60:63:78:de:fc:32:83:b1:
         fa:a2:e3:82:82:01:31:15:8e:55:6a:9e:66:a5:e4:ad:31:94:
         ac:f0:bc:74:77:70:55:c0:9b:e8:3a:05:0b:af:86:6c:f9:84:
         61:ab:2e:4b:e7:15:a5:fa:7a:70:c9:dc:a8:08:e9:29:74:26:
         4a:29:bd:98:0b:92:cf:d9:1b:b0:2e:6c:24:09:50:34:fd:c0:
         34:35:f8:9f:fe:00:f3:03:a3:4d:ed:1e:bf:33:28:e3:55:57:
         6e:76:4b:4a:d3:5f:55:59:b4:ef:c5:27:55:62:67:e6:ad:c4:
         8a:d7:6a:ac:f3:7d:4b:3d:a7:6b:1a:c4:c5:65:62:56:eb:d6:
         d8:42:94:f2:7f:dc:1b:5c:4e:51:21:3f:0b:6c:df:59:da:5f:
         8c:9c:c6:30:c8:f6:af:de:be:74:27:b5:9e:95:7c:82:54:9d:
         a8:6a:c2:94:e1:36:fc:38:63:6d:ba:be:91:c9:80:5d:07:62:
         c1:56:91:0a:cf:71:92:a8:e0:f5:89:51:f8:9f:a8:f6:e1:52:
         ba:1a:28:ef:22:45:2e:19:4b:19:fb:88:30:7f:a8:1f:9d:98:
         72:82:6c:47:ad:5d:67:fa:f1:e4:03:bb:a3:e4:f6:8b:90:c3:
         c2:15:31:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:39:06 2025 by rpki-client