Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
File:                     Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft (raw, json)
Hash identifier:          k2DsqvlpeiFuPE4YY703Z/h7nENd5ptxy9CYfdsi1I4=
Subject key identifier:   C6:D1:ED:8F:40:C6:01:C2:ED:5B:B9:F8:57:D0:B7:E3:0D:1F:10:33
Authority key identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
Certificate issuer:       /CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Certificate serial:       0196458D8152D0FACD5D185B628D8695F4B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
Manifest number:          14F5
Signing time:             Thu 17 Apr 2025 21:00:23 +0000
Manifest this update:     Thu 17 Apr 2025 21:00:23 +0000
Manifest next update:     Fri 18 Apr 2025 21:00:23 +0000
Files and hashes:         1: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl (hash: ZTzUJG/aMN0z58/EbF278PJMAO+opj7hgpZc+7ve0ec=)
                          2: auDMGKuBUFekwr1pbKCTw36W0Cg.roa (hash: Ih8H6tUaVW1XZmrRDrxRFmcbfxbignoEn1fpBpsApWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 21:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:8d:81:52:d0:fa:cd:5d:18:5b:62:8d:86:95:f4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
        Validity
            Not Before: Apr 17 21:00:23 2025 GMT
            Not After : Apr 18 21:00:23 2025 GMT
        Subject: CN=c6d1ed8f40c601c2ed5bb9f857d0b7e30d1f1033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3d:74:74:60:07:1a:53:23:e0:41:8d:1d:57:
                    55:43:7b:40:89:57:2f:2b:3b:1c:02:79:9a:26:a9:
                    f8:7f:4a:cc:e2:c2:83:61:e5:25:08:75:70:62:c7:
                    e2:40:3d:38:bb:7e:d1:ee:b3:aa:5a:db:d3:70:ec:
                    c0:6b:0e:c8:31:0a:63:88:8c:d2:eb:ba:43:b9:29:
                    6e:bd:1b:e5:cd:16:dd:7d:0b:30:ff:43:92:bd:bd:
                    02:67:62:70:6a:96:33:dc:98:af:47:da:f7:38:67:
                    e7:56:77:7f:8e:0f:5c:f8:9b:d3:d0:94:1e:65:65:
                    a3:65:45:43:eb:10:48:36:1a:2b:ae:02:b1:1e:4e:
                    2c:36:08:41:31:73:69:1c:94:82:30:1d:e5:78:e0:
                    e2:85:1c:ca:b6:ee:61:ac:8e:f4:1e:62:44:e8:aa:
                    55:4e:7c:da:da:2c:f0:ac:5b:eb:ba:25:9b:11:1b:
                    c5:78:68:0e:0e:e2:7d:dc:ce:3e:da:c0:20:d8:60:
                    30:0f:b8:22:49:31:4d:b0:fc:54:fc:94:e8:0b:bd:
                    1b:43:7a:8c:1a:82:50:35:18:dc:44:18:73:2f:4a:
                    b3:53:05:07:d9:de:a2:48:fe:64:4e:f4:16:fe:94:
                    44:af:b3:74:05:74:5c:87:c7:f1:26:9f:c9:75:ea:
                    e4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D1:ED:8F:40:C6:01:C2:ED:5B:B9:F8:57:D0:B7:E3:0D:1F:10:33
            X509v3 Authority Key Identifier:
                keyid:65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:66:a7:0a:67:62:19:90:ec:ea:48:4d:ba:e9:fc:10:74:8d:
         13:e9:fa:1c:eb:38:69:60:25:8d:94:86:a7:1b:9a:73:73:3c:
         41:9b:7d:e1:d5:2d:c4:f8:4c:80:ec:9b:0a:24:d1:8c:cf:2a:
         81:05:48:75:04:05:d8:99:54:d2:c2:a1:ee:38:e9:15:b8:52:
         c9:8c:1e:62:81:8b:92:3d:86:fc:86:dd:3c:ca:7e:26:88:0d:
         fd:fd:ec:ba:18:c8:a6:f5:6b:b2:a1:c3:75:c1:fa:1a:fd:fe:
         79:cb:ea:02:ef:54:ae:a7:5c:dc:00:42:22:35:83:ad:f6:c6:
         db:4d:4d:62:e7:30:5c:91:5f:af:3b:b9:35:3e:26:0d:04:6d:
         9f:26:4f:5c:ae:89:15:93:77:db:24:64:4c:31:ae:3e:c2:d3:
         4e:28:39:70:a9:5e:12:d3:f7:0c:fa:0d:2e:50:b5:47:6b:10:
         dd:24:4d:96:fc:4c:75:e2:d0:8f:75:21:75:3b:e5:86:75:6e:
         72:c0:2f:b4:e6:d5:3e:67:8c:7c:cc:46:e0:b5:48:86:fe:26:
         1e:2f:41:9a:f1:09:3f:8a:b2:04:17:1a:e2:95:ba:0d:1d:01:
         c8:6a:f7:20:bb:86:96:b5:44:e5:e1:7c:9b:91:0f:a8:e5:df:
         88:ee:45:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:56:56 2025 by rpki-client