Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
File:                     OtyOotHlv55F8F2VQFb4yQR6NgU.mft (raw, json)
Hash identifier:          XJAS8s3Klxp8i5iB/TYVpS/chR43skziEWMsscjMtcM=
Subject key identifier:   B0:43:0D:3E:E1:14:F4:1B:55:C0:C5:9A:43:06:82:F7:7E:E7:6D:DA
Authority key identifier: 3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
Certificate issuer:       /CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Certificate serial:       01974EC59769E6F9996302066A8BAF526A13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
Manifest number:          157B
Signing time:             Sun 08 Jun 2025 09:01:01 +0000
Manifest this update:     Sun 08 Jun 2025 09:01:01 +0000
Manifest next update:     Mon 09 Jun 2025 09:01:01 +0000
Files and hashes:         1: OtyOotHlv55F8F2VQFb4yQR6NgU.crl (hash: wTnUCj/UGHolTw/+Z8AYgNoV5u6vkq5BMx0HMeVzpSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:c5:97:69:e6:f9:99:63:02:06:6a:8b:af:52:6a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
        Validity
            Not Before: Jun  8 09:01:01 2025 GMT
            Not After : Jun  9 09:01:01 2025 GMT
        Subject: CN=b0430d3ee114f41b55c0c59a430682f77ee76dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4c:e8:04:82:02:b3:50:6b:19:5a:81:8b:ac:
                    a0:45:63:fe:c2:92:1c:f6:4e:97:c7:5e:a2:29:90:
                    99:68:04:8a:aa:3a:56:94:21:5f:e4:0d:19:60:87:
                    8b:a6:0b:e0:d2:15:39:85:fd:d7:fb:61:26:1f:d2:
                    f6:8b:da:eb:51:b0:7c:c9:45:ca:d6:93:61:2d:ad:
                    d7:a5:2c:d2:b4:d6:3e:a8:a7:b2:43:68:11:2b:a9:
                    16:63:2e:1f:5e:d4:cd:9b:94:d1:78:0e:2e:90:26:
                    f6:e0:e7:9a:19:f9:69:92:e2:53:5e:12:6a:d3:61:
                    9f:fa:73:aa:2c:06:e7:9b:0f:da:cf:2d:c4:ee:e4:
                    79:38:41:83:7f:d9:4a:3c:cb:db:23:af:ec:32:0c:
                    9e:8d:a6:f9:dc:70:6a:98:b3:1f:a7:f5:0f:dd:b0:
                    d5:4f:06:c6:3e:a0:1c:2c:4e:93:ce:1c:6d:e2:40:
                    cc:01:91:c3:d6:f3:8d:8f:e1:47:3d:8e:36:5c:76:
                    0c:22:cc:45:e8:64:97:d6:12:1e:ef:2b:33:3f:96:
                    e2:be:c8:94:d4:4c:00:40:35:3f:41:31:96:54:9d:
                    ae:9f:fc:55:e5:e9:64:7d:43:fc:bf:6d:e0:ba:91:
                    91:ab:9a:c6:62:61:36:25:fb:73:cc:c0:8c:a7:22:
                    aa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:43:0D:3E:E1:14:F4:1B:55:C0:C5:9A:43:06:82:F7:7E:E7:6D:DA
            X509v3 Authority Key Identifier:
                keyid:3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a3:c0:4b:48:69:b3:f5:fe:1a:6b:32:97:a1:14:7a:e0:2f:
         08:20:d3:73:3f:6f:a4:59:bb:cf:25:8e:80:ec:44:6f:bc:7e:
         e5:72:31:21:71:a7:3f:c3:47:3a:12:5f:4f:58:b8:e8:14:f6:
         28:92:57:a3:3a:c0:6e:f3:18:7e:72:f9:19:78:54:4a:34:1f:
         1d:06:d7:29:30:74:42:d1:09:32:48:b4:48:f2:51:d6:5e:f2:
         58:33:f7:03:aa:82:2e:37:46:d9:c7:49:49:25:09:2e:a4:51:
         5a:a7:f5:84:31:b3:d7:b1:62:a3:f5:30:5a:74:86:f2:61:e0:
         d9:15:f0:05:91:30:3f:28:5e:f5:a6:5d:95:af:9e:69:12:8e:
         4c:95:e9:77:3d:31:12:3f:d0:41:5d:b0:69:bf:84:a5:47:0a:
         51:b8:6a:f2:c2:ed:92:cf:a0:ad:c2:12:46:83:a4:41:34:32:
         51:14:35:00:7a:55:77:c9:f7:17:91:e4:d4:95:e7:79:c2:33:
         4b:2c:6a:69:a0:2e:05:97:e0:81:77:b5:55:46:cb:e8:33:04:
         da:82:74:e0:39:58:1d:a6:b7:7a:55:51:87:bb:54:e7:ea:93:
         9b:14:c7:8c:d7:c0:e4:84:28:1e:30:46:e8:97:7e:a4:52:df:
         a6:99:5e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:38:24 2025 by rpki-client