Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
File:                     cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft (raw, json)
Hash identifier:          xakoJ+aUELNURz4+RHDk6ZXVIIj81dkWLHVh60Omz/M=
Subject key identifier:   56:F9:E7:3A:7F:2B:15:47:61:9B:60:E0:E5:BB:A6:E3:28:72:4C:E6
Authority key identifier: 73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2
Certificate issuer:       /CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
Certificate serial:       01964C6BD28E21AF84F9682D7457645F5333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
Manifest number:          0194
Signing time:             Sat 19 Apr 2025 05:00:56 +0000
Manifest this update:     Sat 19 Apr 2025 05:00:56 +0000
Manifest next update:     Sun 20 Apr 2025 05:00:56 +0000
Files and hashes:         1: cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl (hash: rNFHrQwvy8TH5dSuYBhhvWK/iTfGgb/fhMwl3+aCuD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:6b:d2:8e:21:af:84:f9:68:2d:74:57:64:5f:53:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
        Validity
            Not Before: Apr 19 05:00:56 2025 GMT
            Not After : Apr 20 05:00:56 2025 GMT
        Subject: CN=56f9e73a7f2b1547619b60e0e5bba6e328724ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:48:3d:e4:84:a4:59:d7:c2:62:a5:3b:c5:fa:
                    cb:cd:d3:d1:71:13:e7:76:56:a6:9d:83:a2:12:a5:
                    3f:fe:54:16:44:f2:75:d2:35:2f:f4:0a:1a:cc:06:
                    dd:21:40:da:b3:f2:1d:97:53:e4:fa:df:84:59:bb:
                    43:5e:e8:aa:5a:80:4b:7b:0b:c9:4c:e5:6c:9d:2b:
                    66:dc:b7:99:14:54:45:8d:92:75:f9:7d:ea:a7:3c:
                    c0:b5:d6:14:62:ab:f4:90:2a:88:5e:b7:5f:cd:f4:
                    e5:e8:74:07:d0:02:75:6d:62:14:4a:6c:71:92:21:
                    c9:25:1e:b7:52:d0:e9:79:f0:39:23:21:96:0c:c6:
                    40:b4:70:dc:64:e9:ff:11:fc:88:fd:5d:23:d0:aa:
                    24:25:c5:65:1e:77:8a:bc:ee:4f:d1:f7:65:86:9b:
                    2e:90:43:ad:c8:35:5c:1f:c6:5b:c6:61:71:f3:78:
                    23:81:bd:03:1f:ad:ff:ee:13:e0:20:f4:fb:19:e0:
                    58:ec:a7:0f:b3:0d:73:1b:41:2e:47:a2:61:0d:1e:
                    09:d4:b7:4d:e0:e8:2e:4a:a7:23:c2:d3:e9:25:d7:
                    55:59:2c:52:2c:1a:35:07:06:81:b2:fd:88:54:28:
                    6d:3e:74:1b:98:9a:48:47:41:23:6f:0e:45:2a:7a:
                    99:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F9:E7:3A:7F:2B:15:47:61:9B:60:E0:E5:BB:A6:E3:28:72:4C:E6
            X509v3 Authority Key Identifier:
                keyid:73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:7f:1c:45:4d:1e:ca:ea:28:73:4c:75:88:75:e9:4f:ef:0e:
         59:16:7e:b6:0a:03:02:c0:02:45:ec:6f:5a:f8:e5:d3:22:0e:
         ea:10:41:cf:d7:dd:ee:6f:85:ed:f6:2b:9f:26:0c:0e:29:57:
         8e:49:72:2b:76:e7:ad:10:ff:f4:86:6e:ee:3d:d8:8d:ae:cd:
         89:7c:07:c3:1d:d3:53:9f:76:57:2c:59:db:de:f3:6c:21:4b:
         7c:9c:0d:06:37:76:c1:3e:31:a7:b2:67:01:3f:62:6f:c9:0d:
         ca:88:30:aa:2d:59:ab:93:c0:f8:38:3e:63:a0:91:a9:ef:83:
         b2:ed:43:27:be:1c:6a:d4:77:4b:fd:b4:e2:ec:1c:6a:a9:74:
         42:30:d7:b5:1d:f9:7c:03:1f:ad:5f:01:37:54:51:fb:2e:c2:
         30:15:a6:d9:42:a2:fa:b5:cb:92:04:a7:92:c1:90:ba:c0:10:
         73:bd:c7:3c:18:70:bf:52:2e:0c:fd:f1:bd:7d:60:4c:3c:80:
         65:a1:dc:f2:19:ea:a1:07:8f:31:33:f7:db:5c:3d:2e:c6:fc:
         78:e7:bf:07:01:5e:a3:59:80:53:ef:1e:3d:07:65:96:61:54:
         da:dd:78:2e:44:c1:79:b6:5c:bb:c5:82:dc:70:5e:58:a9:c6:
         a5:42:dd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:43:57 2025 by rpki-client