Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
File:                     VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json)
Hash identifier:          1wAa/YsVzm0s4IsyDXvBRqBqT9c3dKFmElJ5BmNouMI=
Subject key identifier:   58:91:8D:52:41:B1:13:D1:FC:6B:81:46:CF:08:15:AA:C9:DF:A5:4D
Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
Certificate issuer:       /CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Certificate serial:       01964B909C7C32DF758D17B9D33D28FEDDB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
Manifest number:          118E
Signing time:             Sat 19 Apr 2025 01:01:30 +0000
Manifest this update:     Sat 19 Apr 2025 01:01:30 +0000
Manifest next update:     Sun 20 Apr 2025 01:01:30 +0000
Files and hashes:         1: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: SZ1YTv5H6ubyPktwXBp0apwaf5ZaZF2q41PBOhCV0pE=)
                          2: k3QEGek6OEeL5SsPbREF1e2K4Yk.roa (hash: NiaroSVfhsYQcW9nN+bvyMvN1j0QK242NmOTmwcSA2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 01:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:90:9c:7c:32:df:75:8d:17:b9:d3:3d:28:fe:dd:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f
        Validity
            Not Before: Apr 19 01:01:30 2025 GMT
            Not After : Apr 20 01:01:30 2025 GMT
        Subject: CN=58918d5241b113d1fc6b8146cf0815aac9dfa54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:54:5a:f6:b4:ce:3f:7e:89:87:30:d3:28:98:
                    3d:0d:ac:54:0c:a2:44:9d:64:75:a9:29:24:78:dd:
                    00:e6:a1:81:18:29:2b:8c:c2:89:5f:e1:ba:2d:b4:
                    9d:8b:01:a5:a4:8d:81:e0:90:01:1d:20:3d:20:94:
                    72:b4:aa:68:b9:07:97:09:58:e5:72:ee:0f:70:3b:
                    4d:cd:84:44:f6:b1:f0:59:51:94:dc:8c:6d:ab:90:
                    44:1a:61:af:46:2a:98:24:50:2a:e8:94:13:d5:e9:
                    43:d2:95:b1:5e:bd:d6:64:81:1e:91:a5:52:59:9e:
                    ab:b7:b1:3a:97:7f:16:a2:dc:08:7a:a5:de:e9:a1:
                    a9:8d:92:46:1f:1e:19:b3:1b:c7:d8:f2:8a:7c:f1:
                    4f:48:00:c7:27:f6:87:d4:26:9c:32:5a:66:0c:22:
                    0b:79:b9:16:bb:52:e7:20:0a:9c:52:68:ad:7b:5b:
                    01:16:9e:b9:11:88:41:67:5b:e2:8f:0a:32:a4:09:
                    94:78:82:62:84:a4:73:83:8e:2b:6c:05:bd:ff:f1:
                    44:ef:17:59:23:ee:af:f5:53:b4:20:4a:91:3f:8a:
                    df:5e:dd:ad:be:d0:0b:51:4a:33:ce:f3:5f:ba:a7:
                    f1:d2:f1:15:2a:85:c3:50:eb:d3:5b:b6:76:6f:4b:
                    75:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:91:8D:52:41:B1:13:D1:FC:6B:81:46:CF:08:15:AA:C9:DF:A5:4D
            X509v3 Authority Key Identifier:
                keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:37:7d:e5:62:e7:8a:dd:52:6d:a5:ac:fb:02:59:9a:fd:80:
         cf:5e:c7:dd:84:f2:66:0a:57:d3:40:07:12:d3:78:01:ee:c1:
         9d:f0:09:1a:8a:98:5a:54:1a:a9:d0:6c:8b:82:71:69:01:24:
         7a:78:fb:b7:8a:fc:cb:52:47:bc:c5:16:00:70:b8:38:ca:b8:
         c5:70:a9:2c:ff:fa:12:96:dc:b5:d1:e6:32:0f:11:7d:69:5a:
         4e:22:8f:bc:6a:21:81:19:9e:7a:31:4f:9f:9d:4f:66:3c:d1:
         ec:20:22:be:a0:99:2e:35:37:38:52:be:d7:41:7c:cf:27:f8:
         3c:bc:e3:ed:5c:e2:c0:20:90:a0:75:ec:15:a0:be:2b:2d:7e:
         7c:d8:0c:3e:65:04:14:49:d0:35:7c:52:1d:2d:b4:f0:e4:f2:
         1d:9b:e8:73:b2:ee:3c:55:10:c1:e2:1e:79:37:a4:6e:d6:51:
         00:7e:9c:53:df:76:e5:18:17:6f:14:af:4c:7c:ed:d7:4a:a3:
         68:bf:a7:dc:20:2c:38:71:58:19:bf:6b:ca:ac:ee:31:59:d3:
         6b:62:14:8e:cb:91:76:ef:dd:af:2e:95:a0:cf:22:03:47:bd:
         6e:85:e9:8b:e6:84:de:34:ec:c7:f8:15:c2:45:e6:b3:9c:29:
         16:6b:b4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 09:45:22 2025 by rpki-client