Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
File:                     byfoswfmVum-2aQOmbTwOXe3qNA.mft (raw, json)
Hash identifier:          ZYuOZyfaR+ULOnW1e7jsvXssBWt4gyhJPJ4UbNT4oXw=
Subject key identifier:   D6:CA:88:29:1C:3E:8C:5F:EC:06:33:FE:93:6D:38:C9:6E:21:53:A5
Authority key identifier: 6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
Certificate issuer:       /CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Certificate serial:       019644442592AFC60AED6A080D9EA439B50B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
Manifest number:          04D8
Signing time:             Thu 17 Apr 2025 15:00:38 +0000
Manifest this update:     Thu 17 Apr 2025 15:00:38 +0000
Manifest next update:     Fri 18 Apr 2025 15:00:38 +0000
Files and hashes:         1: byfoswfmVum-2aQOmbTwOXe3qNA.crl (hash: GaUwwjWe/X5UfcpIUerBl5S2CaswYK63VR8GMRc+tXY=)
                          2: jcl3DEDvFDbe2n1OkuP9O1mNtE4.roa (hash: zm9D2SdmmGYoULIl+hQH6eijqdwsjK8xxtq2NuIqYhs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 15:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:44:25:92:af:c6:0a:ed:6a:08:0d:9e:a4:39:b5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
        Validity
            Not Before: Apr 17 15:00:38 2025 GMT
            Not After : Apr 18 15:00:38 2025 GMT
        Subject: CN=d6ca88291c3e8c5fec0633fe936d38c96e2153a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d6:9d:76:18:b5:c7:a8:38:1e:9a:06:46:08:
                    32:bf:2f:36:63:14:56:ec:93:bf:30:9b:0f:26:22:
                    4e:2a:ec:f0:67:c0:7c:ca:1f:be:09:c3:5e:e6:a8:
                    11:34:90:b6:cc:24:09:98:61:dd:ac:b0:11:a4:2a:
                    1e:37:03:f7:db:3d:ef:0d:5c:2a:a1:7e:78:25:1b:
                    18:fd:20:02:0c:a4:68:b1:f5:12:c5:3d:5e:a3:a0:
                    39:53:d0:65:c2:63:62:90:1b:ea:95:51:f3:95:71:
                    68:7e:3b:4c:c0:88:73:af:a0:e8:fd:ef:7f:c3:82:
                    b9:9e:88:b6:93:71:6f:d0:6d:09:a1:5a:0e:40:e6:
                    b0:1a:ed:e9:c1:8b:7c:c4:cc:8b:f8:3a:a6:c4:f5:
                    cb:a4:ea:37:6a:e7:92:ae:ae:1e:a4:85:14:78:1f:
                    8e:4e:bc:e0:0b:5f:16:c5:54:57:16:46:ba:48:8b:
                    8c:c4:5c:5a:f1:ab:ae:af:30:29:2a:9c:88:ce:9e:
                    84:b0:33:fc:6d:6b:7f:5e:25:d7:27:7b:8d:3d:6e:
                    68:ee:cb:8f:9a:39:bb:e8:b6:6f:ac:51:53:7a:43:
                    5a:e3:03:c2:66:bd:41:56:3b:1e:fa:4a:f8:95:e7:
                    e0:ee:51:70:92:d5:40:11:86:92:73:0d:0f:75:b2:
                    ce:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CA:88:29:1C:3E:8C:5F:EC:06:33:FE:93:6D:38:C9:6E:21:53:A5
            X509v3 Authority Key Identifier:
                keyid:6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:31:6e:96:3c:74:73:68:74:43:ae:00:02:53:f6:2c:c7:dd:
         ae:e7:d2:c7:4b:75:6f:be:d8:94:4b:d6:47:37:07:2a:cd:70:
         ef:be:f1:cf:54:4b:09:0a:de:32:a7:8d:df:d9:f1:1d:c4:02:
         76:07:cf:9d:ff:31:66:b9:7f:2b:c0:75:bb:b6:4f:d3:bb:97:
         9f:21:87:ab:0b:d4:e7:65:df:86:f9:29:b7:4a:00:61:79:e6:
         58:4b:be:00:d5:9b:61:c7:20:66:28:ab:15:a9:fd:f7:dc:36:
         9a:2e:9d:9b:15:7c:ad:a2:3d:2d:f1:5c:15:4a:75:22:f2:1a:
         b7:49:90:9a:b4:fc:e6:c8:d4:0a:39:66:78:44:41:a6:1c:da:
         a5:82:45:b1:68:53:00:f7:1d:f1:7e:b2:95:25:76:f1:4c:cd:
         bd:c7:e3:5a:56:21:0d:73:e3:66:b1:78:cc:fe:30:12:00:c2:
         bc:ed:65:d6:83:d7:5b:f1:76:52:ef:07:39:79:65:56:d2:ee:
         76:61:6a:8a:86:d7:68:61:4a:5b:ad:16:c7:94:dd:60:45:93:
         25:37:e9:b1:13:d8:e5:54:d9:66:46:68:cb:0c:e2:75:2c:87:
         7e:c0:3d:f2:9a:0b:35:97:f9:2a:f4:9e:06:b3:1c:e3:79:9f:
         80:47:4a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:12:28 2025 by rpki-client