Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
File:                     5trj7-CjZ5faQ8vVj23_mcO73Y0.mft (raw, json)
Hash identifier:          Ohkv08b997zF+w+8t2Kzh1RCbhmYx+K+CrBkuMJOfVk=
Subject key identifier:   86:6E:97:5F:3D:77:30:CB:17:39:20:09:25:F1:54:92:CF:94:8D:04
Authority key identifier: E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
Certificate issuer:       /CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Certificate serial:       019651241F4BCE9CF413F8918D87354DFA39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
Manifest number:          14FB
Signing time:             Sun 20 Apr 2025 03:00:43 +0000
Manifest this update:     Sun 20 Apr 2025 03:00:43 +0000
Manifest next update:     Mon 21 Apr 2025 03:00:43 +0000
Files and hashes:         1: 5trj7-CjZ5faQ8vVj23_mcO73Y0.crl (hash: /hSdv55N7PwxzEHbKU54wgD3017JvHbPXIjVDfxyF6s=)
                          2: jtdGItGjIscVK6iUpNCTUSGRedQ.roa (hash: FnwkKHIg+SdV2PfeNPF4IQR2s2fhTwukNFGZU8AgQ9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 03:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:24:1f:4b:ce:9c:f4:13:f8:91:8d:87:35:4d:fa:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
        Validity
            Not Before: Apr 20 03:00:43 2025 GMT
            Not After : Apr 21 03:00:43 2025 GMT
        Subject: CN=866e975f3d7730cb1739200925f15492cf948d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f2:d4:af:ea:f9:33:9f:77:e0:8a:11:89:1e:
                    41:84:a8:5f:ac:34:27:81:ec:09:9a:8e:21:38:f0:
                    31:59:72:6f:7c:98:2c:ca:06:ba:12:2c:90:3d:69:
                    fd:ee:81:a9:53:17:38:b8:d3:d2:25:ff:2c:be:9c:
                    e4:5f:6e:33:4a:1d:f7:87:f0:7b:d7:39:f3:14:e8:
                    85:28:d5:bb:22:94:c0:fa:2b:14:be:80:7d:5d:18:
                    e7:33:f5:86:fe:b4:bb:c2:9c:08:04:91:ef:68:4a:
                    c7:69:8b:f3:f2:70:b3:79:e8:08:ad:f0:32:3d:1c:
                    da:56:ad:cb:08:ff:e6:04:f5:e2:12:ce:1e:f9:2f:
                    92:c7:c3:2a:b4:5e:e8:cf:7e:4e:91:ec:73:29:6f:
                    c3:7e:35:ff:e9:c0:3a:d2:87:05:ae:84:33:2f:08:
                    4f:aa:4d:3f:6f:e3:86:78:05:45:98:e6:2a:98:77:
                    03:8f:f5:81:c0:d0:2c:43:1a:c0:a4:e1:de:e1:b2:
                    af:ef:31:ce:c8:07:f7:d5:f8:05:e3:44:7a:fd:ec:
                    05:0f:b6:a3:63:22:21:1a:5c:32:41:22:b4:7e:be:
                    c2:2a:5e:af:8d:8f:a6:73:1a:21:e7:31:41:20:30:
                    0a:09:59:e8:59:a0:50:03:85:72:2d:d3:03:bb:78:
                    1c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6E:97:5F:3D:77:30:CB:17:39:20:09:25:F1:54:92:CF:94:8D:04
            X509v3 Authority Key Identifier:
                keyid:E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:54:b1:6a:1a:81:b4:4e:34:4a:86:4b:8a:89:a7:15:aa:fe:
         c1:1a:1f:35:c3:e5:00:a9:d8:eb:6d:20:34:86:97:e5:f4:19:
         6e:40:37:20:ba:90:33:a6:17:c9:89:26:4d:f9:24:52:09:1f:
         b5:ab:8a:2d:8d:a8:06:9b:06:3c:04:ef:73:9c:05:1d:08:b1:
         b4:56:c1:70:19:71:8f:22:39:ba:c1:39:6a:1b:81:ab:99:d4:
         8f:30:d6:83:2f:bf:48:f9:1a:c6:57:b0:c9:92:22:6b:18:4a:
         73:a1:d8:06:4f:6b:3a:ec:0c:2c:5a:2a:5d:df:03:a7:c6:4d:
         2d:62:a9:b5:f5:3b:49:5a:d8:de:a7:d8:47:6a:35:03:ac:c0:
         0f:38:e9:bf:e7:f9:48:c2:57:e1:c8:0a:99:25:6e:2a:f1:1b:
         4c:b3:20:dc:89:e8:2e:13:16:d2:49:a1:23:66:5d:27:4e:82:
         3f:6b:04:35:59:2e:7a:4e:f6:4a:32:ed:80:cb:49:7e:75:c5:
         9d:e8:57:58:d3:c7:6d:ff:dd:79:83:8a:a2:33:fc:4a:b6:d2:
         17:c9:de:bc:b9:d5:e5:ff:59:69:33:0c:ba:65:ae:d7:c6:56:
         1f:bb:4d:40:bc:0e:b2:01:fc:0f:78:6c:0f:41:55:fc:aa:bb:
         34:eb:43:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:03 2025 by rpki-client