Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
File:                     Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft (raw, json)
Hash identifier:          HwAqr/Ab9xNgaCapgbfPjAGUgWL8ceG0X3Zw/i3v57g=
Subject key identifier:   7B:01:A3:53:D5:FE:4F:B3:11:AD:06:DA:05:A4:FE:C1:F2:9E:FB:FB
Authority key identifier: 23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
Certificate issuer:       /CN=233adc97f9826262007f46286591830df58fc55e
Certificate serial:       019748F9F53BFFCC064B4B1C5ADE7D7F23B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
Manifest number:          09A7
Signing time:             Sat 07 Jun 2025 06:00:30 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:30 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:30 +0000
Files and hashes:         1: Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl (hash: TZmgCgZ/QbiQIhEQHdXlG1lQ2ga8A1PGFJE0FMd4T9k=)
                          2: R7UR19A8DA5u7WHUKAJI549nkdo.roa (hash: 4PQK0W7UKUZhH5u+a1D7FV7JRsd1931HwX1XToed8Vs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:f9:f5:3b:ff:cc:06:4b:4b:1c:5a:de:7d:7f:23:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233adc97f9826262007f46286591830df58fc55e
        Validity
            Not Before: Jun  7 06:00:30 2025 GMT
            Not After : Jun  8 06:00:30 2025 GMT
        Subject: CN=7b01a353d5fe4fb311ad06da05a4fec1f29efbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:65:17:5f:71:83:2c:66:b4:f2:db:5a:33:32:
                    09:72:df:73:5f:5a:da:6d:0a:fc:31:d6:4c:b2:c6:
                    bd:ee:d2:3b:6b:fe:d2:02:d2:29:98:07:95:43:4c:
                    75:cd:90:e2:b3:0e:f8:ed:ca:43:93:c3:27:c7:5f:
                    27:12:47:75:d9:4f:06:83:fe:e8:3f:b0:52:4a:8a:
                    a9:6d:cd:1d:da:0f:38:72:1b:29:f0:e5:03:a2:13:
                    c8:a7:04:b9:6e:9c:dd:52:45:84:34:75:61:b9:77:
                    7f:a0:ee:d7:f9:8a:c1:51:37:f1:3a:3d:42:b3:df:
                    7d:dc:19:6a:dc:7b:67:03:f2:38:1b:67:20:46:b9:
                    ba:a2:fe:57:01:f9:48:06:49:d8:25:12:e1:d8:90:
                    2f:cc:82:9e:08:29:46:3a:47:9e:24:a0:9f:0b:17:
                    de:22:f8:f9:02:0c:1d:74:e5:cc:67:95:8c:93:28:
                    f8:33:61:15:50:f6:e0:f0:5b:d1:44:f6:45:07:be:
                    a8:73:b5:4a:81:2c:5a:68:76:bd:c6:ef:2c:90:b3:
                    56:cc:dc:29:f5:b7:b7:eb:8c:9e:87:ef:d4:aa:61:
                    3b:11:b5:40:ab:96:ec:f7:59:7c:65:9d:aa:6d:ea:
                    ec:45:8f:63:95:1a:36:01:c8:a9:14:ac:03:dd:bb:
                    71:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:01:A3:53:D5:FE:4F:B3:11:AD:06:DA:05:A4:FE:C1:F2:9E:FB:FB
            X509v3 Authority Key Identifier:
                keyid:23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:47:e5:a5:04:da:36:3f:58:f6:0d:19:71:54:09:f6:3b:d3:
         64:52:79:c3:4b:cc:da:0d:94:f9:37:56:0f:24:aa:3c:bf:f7:
         cd:27:01:81:d3:6c:60:80:ec:d2:62:2e:bc:80:4d:6b:28:fa:
         10:3e:8c:d8:f2:20:22:f3:eb:a4:7b:eb:4c:3a:01:05:1f:25:
         96:c1:55:cc:c7:9f:95:9b:fd:5e:22:21:e2:8f:6f:2e:fd:7d:
         f2:58:c0:db:7d:a0:1f:e3:9b:03:22:05:87:8f:39:ee:a8:f4:
         bd:58:25:be:87:45:9e:df:00:57:b6:fa:aa:f1:fd:a7:ee:82:
         68:59:98:bc:09:3d:61:1e:db:79:e7:fd:b3:61:c6:3b:76:7d:
         63:28:0e:a6:b3:ab:e0:a1:48:2c:1d:73:d7:f4:b9:b1:58:f5:
         d4:f2:1a:17:bf:46:c3:84:34:28:46:fc:fa:8f:ca:62:6d:9b:
         73:ce:d1:b0:50:ef:bb:dc:fe:bb:17:4a:39:29:e0:4c:fb:f1:
         83:b0:62:ee:3a:6b:23:62:28:8d:ee:fe:39:3a:1a:8a:cd:2d:
         c9:c0:a8:df:31:0e:fe:fb:a1:e2:30:2b:1a:1b:1f:d0:53:54:
         af:c3:fa:67:2e:6c:36:5d:30:22:44:5e:cc:e4:38:14:87:ae:
         d9:d5:d9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:20 2025 by rpki-client