Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File:                     NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier:          gWjXmdvbeSWTWO3tIQ1xUH2q24YWMMW4avkU2990494=
Subject key identifier:   90:E7:A7:71:E9:61:BC:61:05:9C:BF:AC:3E:BE:D2:DB:E3:34:67:3E
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer:       /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial:       01964C6B73529458BFB43FE736852550A8D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number:          0BDA
Signing time:             Sat 19 Apr 2025 05:00:32 +0000
Manifest this update:     Sat 19 Apr 2025 05:00:32 +0000
Manifest next update:     Sun 20 Apr 2025 05:00:32 +0000
Files and hashes:         1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: s+nidBBfyH1cD4pLyKw3F9vfvAMxVLFqIbjlUkYxf+I=)
                          2: apGrLeQXGFDnmjDGU5J1xhLa7ts.roa (hash: TvPWK0JX9FOtKwbjXZr2maaJZh4hwmSWvBJ0nfoejxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:6b:73:52:94:58:bf:b4:3f:e7:36:85:25:50:a8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
        Validity
            Not Before: Apr 19 05:00:32 2025 GMT
            Not After : Apr 20 05:00:32 2025 GMT
        Subject: CN=90e7a771e961bc61059cbfac3ebed2dbe334673e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:16:df:93:53:11:e8:c6:ea:2d:e1:bb:59:a3:
                    b8:35:82:aa:f9:d2:6c:41:2a:a1:b7:99:44:5d:27:
                    ac:e4:55:4e:05:e6:ad:81:20:e2:3a:4b:94:02:6d:
                    0d:ef:be:43:bf:d8:eb:0f:00:4e:15:91:e3:15:13:
                    b3:47:a1:a2:c8:39:c6:a5:0b:43:76:7f:32:10:64:
                    c9:43:c2:fb:e5:48:a1:7e:a5:7d:17:d2:b7:70:a5:
                    bb:3e:cf:0f:c6:86:00:64:b9:80:a2:2c:e9:40:1b:
                    be:16:06:fa:af:30:42:6f:9c:e6:05:84:37:77:d6:
                    ae:49:76:80:f9:fd:89:93:c2:78:a1:2a:15:e4:85:
                    b3:d9:47:21:87:bd:78:bc:e2:b8:2a:a9:5b:46:43:
                    9d:f6:93:b4:a4:79:31:ea:47:4e:6e:6f:1e:d8:b5:
                    7c:2e:ce:b3:9c:f7:48:51:20:15:76:18:80:63:de:
                    ed:ca:5a:63:42:cf:53:db:4c:ea:0c:de:b4:a1:44:
                    46:95:72:47:55:87:1a:0a:a3:55:5f:18:8f:45:4d:
                    0e:8d:37:46:96:19:c8:d9:bc:a1:a1:1d:60:e4:29:
                    86:14:c1:b0:cd:a3:81:5f:28:a6:2f:27:41:9f:ec:
                    58:07:89:28:5d:88:bb:bc:ae:96:87:9e:65:5e:70:
                    f2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E7:A7:71:E9:61:BC:61:05:9C:BF:AC:3E:BE:D2:DB:E3:34:67:3E
            X509v3 Authority Key Identifier:
                keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ef:c4:eb:18:57:b7:a3:ee:2d:e1:d7:a4:76:0c:cf:4a:3d:
         75:3a:a9:f1:5a:dd:17:3d:31:3c:0e:db:9b:75:c2:9e:e1:81:
         3d:3b:a0:64:a0:6f:da:af:35:54:9a:61:15:50:17:35:26:01:
         7d:cf:dd:7d:ee:15:b0:8f:bf:fe:83:9a:27:70:6a:36:43:b2:
         c9:c9:1d:6e:ea:b9:d4:56:37:3c:35:89:55:a6:0c:0c:37:b1:
         f9:6f:3b:a9:7b:4c:fc:fa:04:67:a0:84:b1:57:84:32:85:86:
         b2:f6:94:89:ea:30:e8:85:71:e9:53:7c:06:83:69:d2:bb:c8:
         b1:71:1b:25:0d:b3:c9:4b:6c:c8:44:d8:2f:46:4b:95:df:d3:
         98:16:f9:a9:41:5e:f5:3a:ff:cb:23:62:9e:2e:de:f3:07:8c:
         5e:b6:3c:a1:1e:78:da:93:f7:15:60:8f:90:ca:5f:80:9f:47:
         59:6f:64:6b:9f:fd:4f:e7:d9:7d:58:6b:65:a8:06:12:b5:48:
         96:bc:54:63:53:63:51:32:20:b2:df:d1:de:b6:88:6b:42:96:
         5f:82:bd:0b:76:72:85:da:8a:ea:6e:9a:b6:bb:24:d3:d3:a9:
         e9:95:c0:f8:1a:1e:e5:f9:1e:af:36:1b:ac:50:eb:fe:86:d6:
         80:2f:d2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:12:14 2025 by rpki-client