Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft
File:                     NPuMu3pio_Drqk5fRqvjHiXRfP0.mft (raw, json)
Hash identifier:          by9QduBThXoUlsbV0lx5fPNViP8pd3Q31WT5fRWral0=
Subject key identifier:   44:AF:3C:1B:A4:55:25:4E:AE:03:0D:BE:C2:F8:63:58:48:E9:E1:88
Authority key identifier: 34:FB:8C:BB:7A:62:A3:F0:EB:AA:4E:5F:46:AB:E3:1E:25:D1:7C:FD
Certificate issuer:       /CN=34fb8cbb7a62a3f0ebaa4e5f46abe31e25d17cfd
Certificate serial:       01962AF2FE4DCFF1D9EED8B834417AE980A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPuMu3pio_Drqk5fRqvjHiXRfP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft
Manifest number:          040C
Signing time:             Sat 12 Apr 2025 17:01:29 +0000
Manifest this update:     Sat 12 Apr 2025 17:01:29 +0000
Manifest next update:     Sun 13 Apr 2025 17:01:29 +0000
Files and hashes:         1: NPuMu3pio_Drqk5fRqvjHiXRfP0.crl (hash: b1vEzAgKYf6QHk9GzalSXPv7kVOAsTWituyjnogES2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NPuMu3pio_Drqk5fRqvjHiXRfP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2a:f2:fe:4d:cf:f1:d9:ee:d8:b8:34:41:7a:e9:80:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34fb8cbb7a62a3f0ebaa4e5f46abe31e25d17cfd
        Validity
            Not Before: Apr 12 17:01:29 2025 GMT
            Not After : Apr 13 17:01:29 2025 GMT
        Subject: CN=44af3c1ba455254eae030dbec2f8635848e9e188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e5:7f:1a:00:d0:0c:c4:31:da:0f:d7:65:0a:
                    3c:42:11:fa:d0:fe:02:15:5b:c6:7e:18:0f:17:ed:
                    da:df:79:28:61:3b:d0:21:d6:dd:44:eb:40:e4:6b:
                    75:4b:ff:e1:a0:76:43:42:67:9a:ce:a1:d5:71:2b:
                    05:b1:ff:b1:4a:74:cb:b3:82:71:15:83:05:cf:01:
                    2c:0f:92:18:a5:20:ca:43:38:72:40:20:62:73:13:
                    e1:f2:f6:8f:90:0e:11:73:2c:41:7f:1e:cd:ca:be:
                    37:40:12:e8:3f:71:2c:b1:1b:de:da:e8:46:10:d5:
                    3e:30:3f:71:b0:f4:09:df:1b:9a:db:65:87:10:29:
                    0d:85:f2:fd:32:8c:db:8e:c3:5f:78:9a:c7:be:8f:
                    cd:b3:27:2b:03:86:52:cb:3d:61:2e:65:1b:72:4e:
                    65:08:34:ef:aa:41:b9:4c:2b:c1:55:3a:bf:1f:8b:
                    70:a5:2b:bf:f9:25:b5:d0:2c:2a:c6:84:57:69:f7:
                    37:e8:89:61:67:70:5f:c7:bf:b4:d8:3f:d1:d9:6d:
                    e1:97:47:cb:b9:1b:7a:a8:bc:4e:14:14:80:98:de:
                    cc:0e:98:92:30:99:44:26:73:60:bd:d6:e4:67:3b:
                    a7:6a:53:c3:6e:6e:b2:b8:aa:34:28:72:86:a2:f2:
                    5f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AF:3C:1B:A4:55:25:4E:AE:03:0D:BE:C2:F8:63:58:48:E9:E1:88
            X509v3 Authority Key Identifier:
                keyid:34:FB:8C:BB:7A:62:A3:F0:EB:AA:4E:5F:46:AB:E3:1E:25:D1:7C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPuMu3pio_Drqk5fRqvjHiXRfP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:0d:a0:b5:43:73:83:c0:a7:a6:7e:4d:35:9b:fd:04:36:d5:
         2e:7e:f7:ac:6a:c5:43:9d:b8:5f:02:a0:08:f9:ca:da:4b:59:
         ff:95:5b:37:73:0f:5d:9e:ee:a2:29:7d:40:f5:8f:22:6d:74:
         18:d5:12:94:61:88:a3:c4:d2:2d:11:34:17:6b:5a:59:c5:59:
         bf:2b:98:12:35:85:07:6e:0f:53:5a:eb:6d:6c:fe:1f:cb:77:
         6d:82:af:49:67:bf:87:39:1b:ee:9f:30:e9:61:44:6f:5d:ee:
         c8:33:f1:0f:4a:a9:c8:79:56:55:e8:c1:95:36:e2:24:38:7c:
         e9:b0:32:00:5a:01:69:1e:bc:fe:35:1b:c5:a9:76:a4:73:69:
         38:09:21:dc:d8:33:b8:20:c9:0e:56:52:cf:28:b2:1f:77:29:
         50:85:fb:ec:4b:28:ad:7c:72:2c:e8:ca:5e:47:02:9e:9b:44:
         29:af:e7:1f:40:87:52:b1:21:c6:1b:e9:8d:aa:c4:a0:f5:5d:
         c7:66:43:67:b2:d3:bb:37:8f:b0:02:dc:e5:63:ff:02:19:53:
         8b:32:3e:26:13:45:f5:0d:fa:2c:a8:46:30:10:eb:a7:52:31:
         30:22:f6:3d:06:09:2f:96:c3:1c:2c:ef:8b:01:c8:cd:22:c7:
         ed:8e:45:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:42:17 2025 by rpki-client