Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          +TerdzzhezQ2REbvEVCd4fozgXc+gfHEN/CKcNQrIuc=
Subject key identifier:   34:19:B1:BF:98:AD:A1:1B:43:B3:A1:F1:8A:13:C1:44:6F:65:D3:23
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       0196146AE539823F9B4D9B7872DE554C27A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          14FE
Signing time:             Tue 08 Apr 2025 08:01:11 +0000
Manifest this update:     Tue 08 Apr 2025 08:01:11 +0000
Manifest next update:     Wed 09 Apr 2025 08:01:11 +0000
Files and hashes:         1: 19QpkXgghLM3Nv0nEMVJTVhhYlk.roa (hash: J5AzJxFSrkUz6NEqgZpKHFp1Qkuuq+hf2j4tyd26uK8=)
                          2: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: nPh8yNj9iNAtLOmJ17px+B8gfqd9S23+acMNGdYJzJo=)
                          3: aUt9STDYB4WpJzoIeOhkBXlmRGY.roa (hash: OBmceRN0cnIIMX2WS5mLBG1wMtaz4OUFUqNkNJhbrA8=)
                          4: c9sXvnnFKQwKh05j0TaYAQugLQM.roa (hash: eyB+ysjYhGow5lnf5FUGFEiyTh1wZN2qzaaHi/6zhTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 08:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:14:6a:e5:39:82:3f:9b:4d:9b:78:72:de:55:4c:27:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Apr  8 08:01:11 2025 GMT
            Not After : Apr  9 08:01:11 2025 GMT
        Subject: CN=3419b1bf98ada11b43b3a1f18a13c1446f65d323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:55:5c:2b:5a:84:7f:37:20:46:d2:f6:dc:
                    83:46:f3:92:d7:4e:3c:b0:24:de:2e:33:4e:d6:78:
                    75:fd:30:fe:5f:c6:5c:1d:24:c6:d4:ee:af:b7:35:
                    4e:00:f7:55:0f:c2:ad:e4:a1:54:1b:25:18:f8:8d:
                    ee:db:73:80:d5:a5:ce:eb:65:d9:cf:51:7b:fd:97:
                    f8:e5:b4:76:c3:60:aa:50:b1:77:cb:b5:90:da:f9:
                    48:54:0a:c5:8d:ac:9e:63:99:c1:a2:66:06:66:6b:
                    2e:0a:da:ae:4b:f0:d2:b3:e7:c7:6b:a1:13:00:71:
                    3c:eb:dc:2c:a6:ac:ea:ee:d9:d2:5a:93:4d:3c:e4:
                    c8:bf:b1:b8:46:bc:1c:e8:6d:cd:69:a2:bc:37:3d:
                    4f:b4:f0:c4:51:92:c5:0c:87:c2:30:68:1e:34:39:
                    99:0f:32:48:48:8f:e9:b8:0a:d0:76:07:df:30:1e:
                    2a:a2:aa:51:a4:04:95:20:97:cb:a8:ac:bd:ef:e3:
                    93:06:bf:17:bd:c8:95:d4:65:93:50:9e:72:22:c6:
                    42:15:b7:a8:09:e6:68:8c:b2:89:ec:5e:ab:4d:1b:
                    4b:6a:66:3a:3b:94:38:b2:b9:c1:26:80:7b:36:5f:
                    b4:ee:01:e2:23:b2:ea:52:8d:ab:0f:5e:aa:73:7f:
                    2c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:19:B1:BF:98:AD:A1:1B:43:B3:A1:F1:8A:13:C1:44:6F:65:D3:23
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:9b:37:13:ed:4d:90:46:39:e6:57:56:e9:18:98:70:e4:b1:
         bf:0f:92:c2:3e:c4:e2:7d:b1:d9:8c:e2:29:a2:00:86:6b:d4:
         6c:6f:a1:fe:68:bb:06:7c:8f:ca:ff:55:c8:1f:b6:02:43:c8:
         42:cf:6e:6b:c8:0b:52:9f:2d:20:e4:8b:64:02:b1:6e:4f:a7:
         33:cd:75:ae:85:e2:5e:9d:35:8f:97:55:13:dd:64:87:32:dc:
         b1:35:1f:26:3f:23:20:b0:68:11:80:8b:f1:a9:e0:af:58:f8:
         d0:96:74:41:6f:b7:79:2d:04:2e:2c:5f:80:48:8e:34:6b:38:
         0c:27:76:ee:65:b4:c8:fe:aa:71:c7:ef:5c:7b:88:0d:54:be:
         dc:67:c4:ef:a4:9f:16:c4:e8:12:66:dd:9e:ab:33:09:16:7e:
         cf:86:d3:37:c9:27:93:bd:bc:62:19:81:5c:0c:92:2d:fc:a0:
         4b:0a:c7:68:38:a1:84:cb:1c:f3:02:ba:08:1b:b1:92:06:3f:
         ea:97:3e:a3:75:4a:05:18:3f:19:21:e4:95:02:45:56:cb:e4:
         46:68:ed:46:32:5a:3d:cd:38:2a:6f:8d:b8:e4:81:72:fc:5e:
         9f:c9:e5:79:03:3a:35:ae:26:71:a7:56:4a:e2:a3:13:70:e5:
         7f:fc:b5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:25:24 2025 by rpki-client