Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
File:                     n3g9_Cib-qPEuhsyTx27V_WGoB0.mft (raw, json)
Hash identifier:          2g87uFupYwEHi7gB8Ef9WZDnFmdtoH8YpOKp086uzow=
Subject key identifier:   61:8B:A5:72:A6:56:27:70:4B:70:BD:F4:AD:2B:24:ED:FF:95:29:C2
Authority key identifier: 9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D
Certificate issuer:       /CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
Certificate serial:       0196553853DFEDC9BDA6CE0281CF492DBE7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
Manifest number:          0152
Signing time:             Sun 20 Apr 2025 22:01:16 +0000
Manifest this update:     Sun 20 Apr 2025 22:01:16 +0000
Manifest next update:     Mon 21 Apr 2025 22:01:16 +0000
Files and hashes:         1: AE5IQSZ07aDFdSNH0kV7_4HeAEw.roa (hash: urftXRrLYNfHknYhlBilfeq0wuuzqoCnp0BIMu9jSb4=)
                          2: n3g9_Cib-qPEuhsyTx27V_WGoB0.crl (hash: DU8Q1D9BtATe5dyTXXcIefGM3qEz19bzM+85DVIPfss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 22:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:38:53:df:ed:c9:bd:a6:ce:02:81:cf:49:2d:be:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
        Validity
            Not Before: Apr 20 22:01:16 2025 GMT
            Not After : Apr 21 22:01:16 2025 GMT
        Subject: CN=618ba572a65627704b70bdf4ad2b24edff9529c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f6:01:52:01:1f:51:43:1c:eb:24:78:87:53:
                    e2:6c:21:57:1e:ac:35:52:13:94:ce:84:07:8e:a4:
                    1b:ca:fc:cb:09:64:56:ed:c2:85:33:e3:fe:14:a1:
                    1c:98:7a:26:bd:4e:40:fc:ee:1c:ea:cb:76:de:16:
                    82:a5:3a:63:01:98:13:4e:37:fe:b5:7c:15:da:8f:
                    bf:4e:05:be:2a:d4:e0:89:ba:a3:f3:0b:45:f6:b8:
                    58:cd:77:dc:b2:33:78:e1:c8:0c:ae:d7:49:dc:03:
                    dd:b9:87:96:41:c5:22:67:08:5f:f0:60:3b:4c:6b:
                    ce:52:22:89:7e:e3:4f:d8:cd:ec:1e:dd:2f:a4:59:
                    50:8b:14:71:46:c4:ff:02:c0:12:e6:24:05:d0:19:
                    dc:8d:1c:68:61:ea:aa:2a:5a:59:c5:c7:5d:06:17:
                    81:a9:ba:70:02:c6:4e:a8:17:91:1f:c5:9a:e7:e4:
                    1c:3e:1f:ba:9a:b7:85:b5:cd:12:9a:94:b2:20:14:
                    82:ec:50:4d:bf:14:bd:8e:bf:92:7c:02:dc:7a:15:
                    42:12:8c:c2:9f:e1:49:c8:fe:30:6d:b2:59:3b:ad:
                    a9:d2:47:9c:a2:f9:56:5f:3c:15:cb:04:41:17:86:
                    ff:30:27:fd:03:e6:b7:d3:2c:6a:7b:89:42:04:77:
                    37:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8B:A5:72:A6:56:27:70:4B:70:BD:F4:AD:2B:24:ED:FF:95:29:C2
            X509v3 Authority Key Identifier:
                keyid:9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7c:59:91:47:a5:a5:e4:3a:13:95:d4:b6:40:40:34:14:37:
         6d:0a:ea:83:e6:e9:30:62:78:22:c0:e7:bd:92:b2:62:bd:81:
         66:ac:0c:9e:21:8c:35:77:dc:8c:61:53:b8:0c:c4:86:a6:a2:
         48:d2:ce:42:b9:5d:25:86:58:0f:c2:5e:34:e0:05:2e:4b:34:
         db:18:1c:14:da:71:be:17:e5:23:c7:ad:14:05:e5:f5:78:5e:
         74:43:45:fa:82:5c:25:b2:b1:9c:c9:1c:af:51:cd:f1:2f:52:
         1b:e0:50:19:07:2a:1a:a6:23:f3:78:50:77:fa:a7:8b:fa:4b:
         71:98:94:cb:c0:4c:af:79:7f:65:40:9b:ff:3a:96:f9:df:43:
         cc:e5:f5:7e:15:04:27:96:c0:e7:37:86:c4:93:77:f8:86:04:
         ff:39:14:7a:3f:99:69:5e:ff:36:ae:82:73:2b:55:00:ff:5f:
         83:57:e2:78:08:3a:fa:f4:92:19:30:5c:7b:d3:a2:1a:d1:4e:
         8a:01:ec:79:42:f7:00:67:1a:89:9c:74:f2:a4:29:68:54:2c:
         c7:02:98:2e:26:17:db:fe:27:f4:e8:ca:60:27:7d:20:58:11:
         8a:5f:19:bb:26:19:db:85:cc:99:75:b3:8e:73:a1:4b:71:d0:
         e2:56:1b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:27:43 2025 by rpki-client