Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
File:                     ePDYlQwP20Hf1XxZSCglIGEcFsM.mft (raw, json)
Hash identifier:          tkRI1rY68OiibQqpRhivnaM55phwju4Bt3GU/RfFaFg=
Subject key identifier:   01:38:5A:44:6D:BC:84:2F:89:8A:B5:EF:DA:40:F1:7A:8E:4C:5C:80
Authority key identifier: 78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3
Certificate issuer:       /CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
Certificate serial:       01958B4DA7E28A78493D78AD3BA79533759E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
Manifest number:          02A5
Signing time:             Wed 12 Mar 2025 17:01:16 +0000
Manifest this update:     Wed 12 Mar 2025 17:01:16 +0000
Manifest next update:     Thu 13 Mar 2025 17:01:16 +0000
Files and hashes:         1: ePDYlQwP20Hf1XxZSCglIGEcFsM.crl (hash: hLIkhNkucIsYqHiwzYB1xitcuFAz/eHBBDLaHh4TBYw=)
                          2: uI19goGgOdv56r27gyNLoOu7fK8.roa (hash: aRMcCZp6MU/f16sSAZBSSpBFMChXSvZTJUWHCtQ3+qI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 17:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:4d:a7:e2:8a:78:49:3d:78:ad:3b:a7:95:33:75:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
        Validity
            Not Before: Mar 12 17:01:16 2025 GMT
            Not After : Mar 13 17:01:16 2025 GMT
        Subject: CN=01385a446dbc842f898ab5efda40f17a8e4c5c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c2:4b:d3:a8:77:4d:96:9e:8a:7c:b6:d0:19:
                    90:6c:65:88:83:d4:5f:23:b3:04:01:b3:c3:19:bd:
                    13:91:93:f6:c7:5f:1e:0e:82:3e:66:a7:65:e1:36:
                    ab:59:04:35:7c:82:01:57:b5:3a:e7:4e:64:a7:67:
                    0c:6d:fb:ac:9f:5f:57:ba:42:90:0e:17:ca:dc:63:
                    63:8c:ab:b9:a1:d8:02:96:e6:3c:4b:9b:2d:24:79:
                    26:70:2c:24:27:a5:40:5e:49:ea:03:40:5d:a8:cd:
                    a9:0c:d7:33:87:58:79:a9:93:6d:82:ad:b3:72:3d:
                    cb:c7:02:bd:a2:3a:1c:fb:65:b0:1d:39:c1:32:4f:
                    3d:47:af:e2:27:5c:7a:e0:b2:af:19:ae:13:71:cc:
                    57:17:a3:f1:0e:29:18:bc:a3:03:4e:db:25:59:66:
                    63:8c:76:95:1b:04:38:d4:ee:18:e6:b7:d4:4b:cf:
                    3b:e4:2d:e5:66:8a:06:26:3d:16:b9:eb:31:bb:c6:
                    db:d6:ee:a8:38:b7:18:e3:ca:e2:fe:f1:35:35:24:
                    17:5c:d0:e8:65:21:49:02:a8:b6:cb:32:0f:c6:cf:
                    77:c6:ca:30:ef:c2:63:3d:3b:c6:33:a1:ff:4e:7b:
                    55:93:7f:72:32:d9:80:f9:21:bb:4f:07:3a:e5:ff:
                    4f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:38:5A:44:6D:BC:84:2F:89:8A:B5:EF:DA:40:F1:7A:8E:4C:5C:80
            X509v3 Authority Key Identifier:
                keyid:78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:84:11:66:9a:3a:31:c1:06:cf:62:9f:22:a0:b3:78:60:2f:
         91:15:13:06:a2:f7:60:83:12:b3:c0:93:79:02:ac:34:d0:79:
         cf:ed:fc:da:05:09:d0:1f:8b:62:73:c9:6a:9e:c0:f3:00:f8:
         f4:49:ea:f9:c8:41:6e:4d:86:bc:21:5e:d0:b5:a3:b4:4a:b1:
         cc:8c:09:d0:7a:b9:9d:a6:de:e4:6e:20:fc:f5:8d:73:84:fd:
         28:c9:8b:ef:12:e6:9f:1b:4b:e4:3a:69:b8:22:2c:ea:87:c0:
         3e:9a:90:51:5c:2f:b3:03:24:71:7d:8b:c4:0c:ea:a0:a3:57:
         04:26:78:cf:14:70:9d:ab:8a:81:f7:8c:5c:e0:80:56:70:0d:
         ca:02:55:4e:c4:cd:18:ae:ee:5a:54:22:35:e3:aa:73:d6:d2:
         40:86:38:ea:38:4e:fb:57:29:44:34:42:47:ef:79:30:f2:a7:
         f5:76:d1:9f:56:bb:ab:8d:e5:92:45:df:aa:81:33:6c:68:30:
         4c:ba:6e:ad:7e:9d:5d:38:fc:9d:39:30:a5:64:3b:a7:54:16:
         29:4a:fd:12:89:3c:9f:2c:83:18:f7:c7:78:2f:72:c0:d4:fa:
         43:cc:1e:22:9a:97:ad:57:ef:5f:5c:36:9d:67:8e:d1:a1:96:
         15:70:ca:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:54:52 2025 by rpki-client