Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
File:                     a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft (raw, json)
Hash identifier:          l/XI39swJWOUYh/gkOQtfMkc0HYFRoEEDPJwux3lc/w=
Subject key identifier:   70:7B:89:F7:E8:7E:EC:50:23:AD:FE:05:3F:B8:A0:0B:DB:39:A2:09
Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
Certificate issuer:       /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Certificate serial:       01964C6B30DC80C33272CB8C89175A223A3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
Manifest number:          033F
Signing time:             Sat 19 Apr 2025 05:00:15 +0000
Manifest this update:     Sat 19 Apr 2025 05:00:15 +0000
Manifest next update:     Sun 20 Apr 2025 05:00:15 +0000
Files and hashes:         1: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl (hash: 8mL4vHZfrmjllQC54ewUTL9i9aN9XvpkLM6KIPbpTa0=)
                          2: waNULbcRhTUiNsANSLGcB4J4itI.roa (hash: 9dW8NgonrZBc4IChXkCIdxerNGPGCgwx9gaoEJblTYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:6b:30:dc:80:c3:32:72:cb:8c:89:17:5a:22:3a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
        Validity
            Not Before: Apr 19 05:00:15 2025 GMT
            Not After : Apr 20 05:00:15 2025 GMT
        Subject: CN=707b89f7e87eec5023adfe053fb8a00bdb39a209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8d:16:62:9c:eb:f3:86:68:2f:af:3a:b2:27:
                    6b:8a:50:d8:58:15:a8:f4:0a:4b:74:b9:78:94:6d:
                    c6:0b:74:3b:02:ec:5c:e0:c1:22:67:cf:0c:95:44:
                    49:df:76:a9:16:56:85:50:3a:60:c8:ba:f8:1c:ed:
                    8f:0d:b1:a6:f8:ff:35:6e:56:26:35:d2:71:f4:6c:
                    c6:0b:73:2b:86:35:61:0d:8d:bc:9e:5e:f0:e3:6e:
                    e6:a1:10:99:2b:da:49:c5:e1:6b:6e:b3:c5:9d:8d:
                    8a:fa:00:55:64:56:6a:64:b9:81:5a:50:90:e3:71:
                    c6:45:42:1f:d1:18:3f:fb:40:d1:8e:68:23:c1:9b:
                    95:04:d2:c7:9f:9a:b1:3e:15:12:b2:a4:6b:8d:52:
                    21:28:45:63:5c:a3:d0:d0:bb:24:17:15:3e:18:20:
                    d5:02:69:54:e4:f1:03:c9:17:f3:bf:36:a6:40:f5:
                    a7:6f:94:f3:ff:23:e9:47:cb:1c:8f:46:0e:82:41:
                    94:6a:bd:fd:98:db:6d:7c:1e:4a:1a:65:6c:9b:df:
                    8b:86:a8:e2:6d:cf:9e:70:c1:76:c3:a8:ea:0e:ef:
                    3e:03:c2:f4:6a:5a:fe:0a:ae:71:3e:8e:7b:60:5a:
                    d2:a3:8f:3c:36:0d:f7:f6:ee:3e:3b:f9:a5:b7:a7:
                    77:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7B:89:F7:E8:7E:EC:50:23:AD:FE:05:3F:B8:A0:0B:DB:39:A2:09
            X509v3 Authority Key Identifier:
                keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:bb:d0:56:1a:41:a4:2e:8a:30:13:64:7d:63:6d:a4:ec:0b:
         07:73:32:de:7c:55:e1:fb:5c:ce:b2:11:8d:7d:21:9b:3c:c3:
         f0:07:2f:f1:e6:bf:66:e1:49:a9:23:75:dd:3b:ef:39:20:a6:
         f3:c4:3e:26:90:6b:a9:20:a7:72:c2:3d:4a:9f:cd:e1:ef:ad:
         4c:0a:be:8e:f3:ab:d5:7c:c9:b0:6c:02:aa:25:a7:46:dc:9c:
         96:67:db:4f:12:b1:94:48:3d:54:3c:fb:d3:5c:70:70:a2:9d:
         c5:8d:bf:a1:ce:f6:5b:7c:1a:3c:ab:1c:d3:47:ff:0d:a0:80:
         31:16:4c:8f:03:8a:65:fa:cf:d3:37:30:47:1c:e5:ae:93:c1:
         05:45:40:ff:56:06:ef:8e:5e:60:fb:5a:30:27:c5:79:2c:1b:
         77:b8:5a:e7:15:18:53:9a:b1:30:6d:b2:88:b8:95:65:70:cd:
         07:59:b6:21:d9:1c:6e:ef:a1:14:97:6b:a4:04:1f:f0:f1:f0:
         bd:cb:92:25:ac:fa:a9:95:7c:0b:cc:f4:80:bf:15:31:d0:ba:
         f1:6e:9c:31:a1:ff:43:b0:f1:8b:43:88:d6:6e:86:c9:05:4b:
         ad:bb:94:27:c9:8f:da:55:af:40:b0:4a:94:6b:ca:e0:56:6f:
         7c:e1:8d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:12:19 2025 by rpki-client