Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
File:                     EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft (raw, json)
Hash identifier:          eY1nuwc/h+Cf/PHrfjBVpE1ft7N96t3HjTDuhhXDg4A=
Subject key identifier:   FE:8C:17:70:BF:1B:EF:6E:6D:34:F6:56:01:0F:BF:9E:18:3A:80:B9
Authority key identifier: 10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
Certificate issuer:       /CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Certificate serial:       0196447B3F854F1F620039BE8E96C0BD1A72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
Manifest number:          14F1
Signing time:             Thu 17 Apr 2025 16:00:49 +0000
Manifest this update:     Thu 17 Apr 2025 16:00:49 +0000
Manifest next update:     Fri 18 Apr 2025 16:00:49 +0000
Files and hashes:         1: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl (hash: 6ot3BnMh6aHcpLttXrhWasggkm/7bt5ahMVe5JBXb8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:7b:3f:85:4f:1f:62:00:39:be:8e:96:c0:bd:1a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
        Validity
            Not Before: Apr 17 16:00:49 2025 GMT
            Not After : Apr 18 16:00:49 2025 GMT
        Subject: CN=fe8c1770bf1bef6e6d34f656010fbf9e183a80b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bc:dc:03:a8:89:70:f9:c9:fe:d8:41:a2:78:
                    3a:37:48:f8:46:73:ae:8d:22:d2:ad:48:b7:4b:1f:
                    18:fc:6f:42:4d:fc:5e:fc:24:42:06:eb:a2:b9:d9:
                    ef:4d:f4:c1:97:7e:fe:7f:8d:33:77:5a:be:4a:fd:
                    8d:42:9d:45:8e:00:1b:c0:8b:28:46:a8:5e:83:0b:
                    34:3e:87:36:76:9b:4d:9a:c4:b6:5c:6d:e2:6a:7d:
                    c5:8f:ae:a6:1a:83:0c:bf:22:5c:0c:b1:d4:fe:cc:
                    49:93:36:ce:e2:15:ac:30:ae:de:7a:de:78:00:e8:
                    8d:2b:db:eb:18:27:1a:de:c7:17:5c:29:84:c6:14:
                    25:25:69:e5:ff:ac:58:09:a1:28:bb:c3:0e:de:f7:
                    49:b1:b4:c3:2f:b7:0b:87:87:bc:eb:24:e7:34:3e:
                    5e:86:87:6c:90:ac:31:a1:85:d3:2a:80:9f:be:61:
                    c6:1a:c2:05:69:27:7d:b7:93:a7:04:f2:99:9b:7e:
                    16:df:da:ae:99:16:3b:17:1a:c0:3f:b9:6c:e6:26:
                    83:3c:b5:3a:60:9d:be:0d:c9:0a:16:ee:dd:ae:f3:
                    7f:c9:bd:42:bf:3d:a8:06:e6:f6:2b:d2:54:ad:61:
                    c0:56:0d:d3:f9:25:05:f8:0a:a9:02:77:58:f9:4d:
                    76:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8C:17:70:BF:1B:EF:6E:6D:34:F6:56:01:0F:BF:9E:18:3A:80:B9
            X509v3 Authority Key Identifier:
                keyid:10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:09:10:fe:74:26:d4:3d:f2:b9:32:e1:db:ac:5a:d2:a7:c8:
         1f:38:f9:e7:f5:50:34:04:fe:8e:0a:a5:d4:e3:fd:ed:99:e5:
         b0:a4:6d:69:e4:be:3b:5e:eb:71:5d:2c:b9:e2:56:6a:2e:42:
         78:39:a3:c1:ce:e1:ac:4d:56:1d:2d:e2:2f:c0:83:fc:01:4b:
         a2:96:f9:38:76:92:de:47:6a:e4:cf:93:84:62:3c:13:7d:a4:
         39:37:85:f7:af:52:d4:07:27:4c:79:b0:50:62:a2:df:ad:79:
         2c:50:b3:6e:ec:29:62:fb:84:5e:ce:42:34:e0:49:ca:0f:94:
         27:9a:08:73:0f:41:d1:3d:37:36:38:8b:7c:ff:2b:d8:4b:9b:
         2a:fb:67:3c:e4:9d:70:25:35:6b:09:1b:45:cc:11:d8:ca:c7:
         7d:23:5b:16:88:3b:dc:af:35:d6:94:be:ad:92:46:94:c8:86:
         06:22:5d:03:6f:4d:5a:44:c1:53:9f:9f:0a:22:8c:77:52:64:
         c3:fc:7b:f8:ae:0e:bd:cf:9d:a5:c5:b5:b2:d6:75:4f:5a:e6:
         52:6e:db:b5:d1:7f:62:49:15:e8:3f:32:4b:e4:0c:86:14:d5:
         f7:6f:c6:1a:2c:f6:c6:98:3b:f2:4f:1f:98:31:e5:78:9c:97:
         45:19:6c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:35:21 2025 by rpki-client