Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
File:                     A5Wt2Guvay0G_0H1Um00f3HutBA.mft (raw, json)
Hash identifier:          Bp10XX4PIBtDU1CUnIbXr91iwhUD6jM9N/HYDOs5ax4=
Subject key identifier:   17:F4:DA:9D:E3:AF:4D:EA:49:B6:A2:83:2D:37:DF:D9:78:81:6E:DE
Authority key identifier: 03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
Certificate issuer:       /CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Certificate serial:       01964443CB2398727625EDE5EAFE62A86A33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
Manifest number:          1487
Signing time:             Thu 17 Apr 2025 15:00:15 +0000
Manifest this update:     Thu 17 Apr 2025 15:00:15 +0000
Manifest next update:     Fri 18 Apr 2025 15:00:15 +0000
Files and hashes:         1: 1VRLJKU_iS-J5hpp2gSlpHTKJrM.roa (hash: wMqFEiKVsvmfTXQPWnG9RRXDiwBKVCmwH1hZAvPWe5Y=)
                          2: A5Wt2Guvay0G_0H1Um00f3HutBA.crl (hash: bsTx21FO+YfJpAlsDliadSuax/frh6Hvx3JSWuYT8eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 15:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:43:cb:23:98:72:76:25:ed:e5:ea:fe:62:a8:6a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0395add86baf6b2d06ff41f5526d347f71eeb410
        Validity
            Not Before: Apr 17 15:00:15 2025 GMT
            Not After : Apr 18 15:00:15 2025 GMT
        Subject: CN=17f4da9de3af4dea49b6a2832d37dfd978816ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a2:e7:fd:ae:fb:89:bd:22:2e:a6:34:c8:4e:
                    af:8e:b2:f4:4a:45:bc:12:e0:43:73:c2:6a:03:6e:
                    3d:4f:4a:5f:d0:f0:07:3c:d7:3c:ee:59:12:24:f9:
                    1b:57:10:f6:fa:54:90:20:bf:a7:9e:3c:a1:79:2f:
                    b7:ab:57:da:06:42:0a:73:4e:3c:9f:cc:9b:41:d3:
                    7f:73:cd:c1:48:bb:cb:38:db:3d:ca:fa:e2:c2:e5:
                    7b:c6:50:ca:46:d5:f6:14:20:0b:78:92:45:80:2e:
                    ca:4c:96:e7:1f:0d:e0:fe:75:0e:84:32:cd:d9:9e:
                    68:f7:d3:0e:c1:b2:34:25:de:6e:94:8a:6c:9c:b8:
                    4c:a0:71:2e:83:b0:fd:7b:42:87:a9:66:c7:d6:c8:
                    63:73:6b:c7:2a:96:ec:4e:b6:79:cd:74:51:35:5d:
                    d6:d0:10:2e:a0:66:f0:9d:05:ce:d2:7f:c0:3c:5b:
                    4b:d2:e2:6d:1d:8c:52:e0:84:dc:25:48:fa:92:ce:
                    b4:75:bb:ac:65:99:31:20:43:b7:4a:5b:68:df:1d:
                    36:06:45:fc:7c:eb:8b:2c:f0:dc:a1:1e:bc:cc:4e:
                    c8:b6:de:f8:75:5d:f3:32:ca:84:f0:41:35:55:14:
                    04:f2:46:93:c4:22:7f:c3:3a:2c:d1:70:ad:37:18:
                    9a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F4:DA:9D:E3:AF:4D:EA:49:B6:A2:83:2D:37:DF:D9:78:81:6E:DE
            X509v3 Authority Key Identifier:
                keyid:03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:8c:21:85:43:2e:c1:87:f3:75:82:20:12:26:06:89:a1:5a:
         18:8d:f8:26:67:76:70:78:1f:55:82:97:12:8a:08:42:56:e4:
         97:2f:43:76:42:34:1e:bf:6c:7f:f5:ef:44:39:71:bc:19:7a:
         b8:10:bc:cd:d3:39:7d:82:30:34:5f:dc:c0:96:42:9e:77:d0:
         a6:3e:9d:b9:11:52:91:53:f2:18:e7:cc:8c:2e:3c:e8:0c:56:
         51:c1:bc:12:12:22:2d:d4:8d:fa:be:21:06:95:d5:b8:5e:76:
         91:5b:45:cd:92:44:26:86:74:df:04:5d:74:bb:72:0a:d8:7b:
         92:c3:e0:8f:95:dd:56:26:84:84:3d:07:5c:81:be:3f:86:52:
         74:94:c2:6c:8d:c7:80:58:37:eb:3c:2a:1f:ac:04:48:a1:92:
         9b:a5:f2:03:cf:17:87:15:dd:d8:26:bd:df:a8:6d:06:6e:4b:
         b4:d0:9e:c0:fc:4b:b6:67:8d:95:62:a4:18:04:06:85:97:fe:
         3f:a9:f6:48:95:b7:ce:35:ee:16:09:07:21:ca:12:42:79:b2:
         fc:bd:cf:8b:35:32:c4:ac:90:06:b9:63:16:fb:3c:9c:80:cd:
         5d:09:95:f0:8a:29:08:a2:35:32:2d:a2:bb:3b:e3:98:dd:10:
         5c:31:0f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:00 2025 by rpki-client