Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
File:                     mInX-DdYfC8jMrsJs-GtmZPXlyw.mft (raw, json)
Hash identifier:          hUkBjqAFF5hLHkH1K4F6rRyrd2zmTxUqAKb+N/EzbKY=
Subject key identifier:   F1:43:B7:B8:86:39:48:6E:98:5E:1B:13:EE:12:12:FE:E5:CA:4E:9E
Authority key identifier: 98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
Certificate issuer:       /CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Certificate serial:       01963F8B952D26A24A778BBD615A8CB99A13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
Manifest number:          1484
Signing time:             Wed 16 Apr 2025 17:00:34 +0000
Manifest this update:     Wed 16 Apr 2025 17:00:34 +0000
Manifest next update:     Thu 17 Apr 2025 17:00:34 +0000
Files and hashes:         1: mInX-DdYfC8jMrsJs-GtmZPXlyw.crl (hash: Ire8nqZ4zNTMoH4RI+AC7sr8uM+SGSAMRr4hT40lJlM=)
                          2: zpGvhyYRAmjs5EUuaL_qNrktFtE.roa (hash: 24VotJmvmJDfDZLcY9ERb5W8a78zlapyR9WGVJQ5ABc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:8b:95:2d:26:a2:4a:77:8b:bd:61:5a:8c:b9:9a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
        Validity
            Not Before: Apr 16 17:00:34 2025 GMT
            Not After : Apr 17 17:00:34 2025 GMT
        Subject: CN=f143b7b88639486e985e1b13ee1212fee5ca4e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:02:ac:71:b1:c4:07:a8:8e:d5:a4:4e:96:3f:
                    0e:3a:50:c8:25:f5:f5:13:a0:49:8d:4d:00:2b:e0:
                    d6:f4:3e:2e:1c:ea:29:21:7a:0a:4b:41:b4:5a:e5:
                    5c:6c:82:74:31:2e:a2:47:cb:96:f0:90:ad:8f:1b:
                    09:6e:01:39:69:e4:14:b3:45:a4:4a:b0:d2:50:84:
                    3c:94:5d:d0:5f:10:a5:96:9c:3c:bb:b8:1b:cf:c3:
                    e7:03:26:24:55:70:af:33:ed:c5:a8:0a:5f:d7:45:
                    52:8c:e5:b9:a2:8e:b6:8e:af:23:8c:d8:70:12:32:
                    34:0c:95:01:8f:ff:ad:3e:d9:75:24:31:4d:a5:cc:
                    89:d2:4a:58:9c:a1:6a:32:b0:40:b0:28:9e:3d:b1:
                    2e:3d:62:b8:54:1c:50:dd:a0:a6:01:ce:ab:39:64:
                    fa:35:85:cb:27:8c:d5:99:75:c3:7e:d2:e9:12:66:
                    33:d5:f1:48:ae:6b:13:cb:8c:26:30:2e:5e:f6:31:
                    11:00:72:01:6e:83:d7:83:b2:2b:13:f2:d0:d1:6d:
                    8c:05:36:70:5f:52:d3:d3:69:fc:36:b4:26:57:02:
                    fb:80:96:db:e7:6e:e4:41:07:74:6a:5d:79:f6:85:
                    81:a0:d6:93:c0:a9:97:30:09:05:a7:18:4a:b7:70:
                    aa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:43:B7:B8:86:39:48:6E:98:5E:1B:13:EE:12:12:FE:E5:CA:4E:9E
            X509v3 Authority Key Identifier:
                keyid:98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:31:3c:25:cf:d5:f4:66:47:1c:b4:de:e7:a7:d3:69:32:4d:
         70:68:f4:14:c3:6a:cf:13:81:a4:f1:ec:a9:ab:b1:59:02:62:
         e5:ac:45:29:87:56:fc:4c:91:e1:62:f7:91:a5:14:37:03:6b:
         d8:6a:70:39:d6:d3:a6:53:9c:e7:bc:3f:62:b6:87:63:3a:48:
         70:e8:7f:10:ce:0a:1f:20:81:89:7b:13:db:6a:78:3d:c0:f3:
         72:f0:b8:bb:fd:56:8f:37:c2:bc:67:06:71:a6:59:ee:89:98:
         01:8c:c9:75:18:1c:9f:8b:43:7c:5d:8a:44:8c:70:f8:96:53:
         e9:42:78:b0:f9:32:6b:0f:19:b4:7a:36:85:d7:b4:b8:ca:63:
         c6:31:bf:f2:1a:58:23:9a:94:5f:3f:f9:ac:e8:0a:d8:c4:47:
         2b:53:67:91:04:a0:29:77:42:7e:46:f5:7c:46:09:ac:ef:c7:
         ed:f1:b6:8d:69:d4:67:5a:d9:b7:c4:5d:e6:a9:72:c3:e9:a2:
         92:2e:b7:4d:c6:43:43:3d:6c:c4:8a:7d:0d:ea:16:96:9d:e5:
         a4:fa:8e:70:be:5b:af:7a:cf:09:cf:36:da:1d:c9:02:9d:ba:
         8e:bc:40:d5:7a:24:54:f3:ba:39:6d:06:29:81:be:d1:5f:9a:
         1f:0b:e5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:15:29 2025 by rpki-client