Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
File:                     sLGxJtrAqgt3lIZADt5yVLJe6qY.mft (raw, json)
Hash identifier:          Jve35dSfuM5updFwTD3ezA+3CzFb9NAeql6je3h0VLs=
Subject key identifier:   B5:6A:D3:43:8B:53:B2:85:D8:DD:AF:FA:B1:C2:CF:C7:16:AD:D6:26
Authority key identifier: B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
Certificate issuer:       /CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Certificate serial:       01963B0A9852221F229CFD5A88EC57B233E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
Manifest number:          1483
Signing time:             Tue 15 Apr 2025 20:01:12 +0000
Manifest this update:     Tue 15 Apr 2025 20:01:12 +0000
Manifest next update:     Wed 16 Apr 2025 20:01:12 +0000
Files and hashes:         1: sLGxJtrAqgt3lIZADt5yVLJe6qY.crl (hash: eB04Fe7G6xxeTFYf10MQYSD077EjaUg8aXrMPz1UpdM=)
                          2: y5aXUBKmtNndMqsBfDwB9q7N1JM.roa (hash: ZtFZGojw6I1xjiF5OKZdPGSKt7iqS59zSaAIueVvxRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 20:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3b:0a:98:52:22:1f:22:9c:fd:5a:88:ec:57:b2:33:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
        Validity
            Not Before: Apr 15 20:01:12 2025 GMT
            Not After : Apr 16 20:01:12 2025 GMT
        Subject: CN=b56ad3438b53b285d8ddaffab1c2cfc716add626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:65:ba:a4:a0:74:25:e2:c9:52:b9:d0:a8:1c:
                    da:0f:47:c3:a4:80:ff:6c:c1:69:69:f1:85:90:d5:
                    15:70:75:ef:8f:8c:9c:65:5e:42:9a:cd:7e:18:3b:
                    2f:d1:94:cb:f3:c7:bd:d6:f5:5f:7e:cb:df:e3:a4:
                    fc:ac:27:ed:49:b1:5d:80:7b:a0:eb:af:2c:c9:c9:
                    70:62:ce:8e:3e:65:be:bb:d9:16:81:22:a4:6b:9a:
                    a1:02:52:64:1c:2e:a9:68:5a:64:03:7d:b9:05:37:
                    08:75:8f:77:2b:da:67:ce:c5:b8:0e:41:cf:85:48:
                    5d:d8:35:1e:ce:fc:3c:8f:4d:53:2f:74:81:be:1a:
                    2e:f6:55:84:79:49:19:e7:6f:8e:df:cf:6b:bd:01:
                    ab:4a:63:c3:39:31:03:02:c8:a9:00:3f:a5:4a:fb:
                    76:95:11:55:4a:47:23:04:f7:30:a8:2f:a8:4e:5f:
                    48:cd:97:5b:be:26:ce:10:23:4b:92:01:1f:10:3e:
                    68:3b:c1:bd:64:91:eb:0d:7c:09:3b:8b:19:3d:89:
                    c2:15:c7:04:23:bf:b3:cb:81:fe:0b:24:95:76:e8:
                    63:34:3c:26:50:27:88:2f:56:87:14:fa:79:9b:41:
                    61:06:99:3c:91:e4:6a:b2:cd:3e:27:ab:03:46:53:
                    f7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6A:D3:43:8B:53:B2:85:D8:DD:AF:FA:B1:C2:CF:C7:16:AD:D6:26
            X509v3 Authority Key Identifier:
                keyid:B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:73:3c:61:e3:3c:82:df:14:d8:c3:42:1c:cd:4d:39:b1:37:
         ee:ec:31:a4:00:4e:72:c1:7a:ff:fb:b4:83:d9:56:ae:67:24:
         a8:cf:f0:d6:e5:89:a0:18:cd:8a:73:b5:bb:3e:19:98:05:e4:
         30:be:ad:86:f0:94:d6:18:5e:5b:b1:00:84:c7:98:7f:64:b6:
         f2:91:71:02:eb:5c:29:51:bc:dc:c4:1d:c0:89:38:36:c6:69:
         db:06:d8:5b:97:fa:35:f8:7d:fb:26:9b:4c:0a:ad:c9:ad:98:
         0a:c0:b1:1c:a9:14:0c:5b:69:e0:f5:fd:7a:80:64:97:ad:29:
         15:82:b8:e5:8d:ff:f6:da:9a:7d:57:df:35:44:eb:bf:c4:ae:
         1f:1a:da:87:13:e9:38:0c:b0:ca:94:38:3b:f8:c2:f3:41:b4:
         00:60:ed:0b:27:e3:5f:19:ef:80:9e:43:d7:96:24:c3:c5:e7:
         0a:fd:61:61:02:27:c4:c7:c4:27:88:e4:21:c6:84:96:5c:9a:
         32:89:a3:c3:ef:2b:44:4d:6e:80:79:0b:04:0d:ca:01:9e:e6:
         2e:b3:5f:44:71:af:b1:2e:ee:21:a6:11:8b:aa:b9:6f:61:69:
         06:24:92:81:74:5b:11:ff:b4:2d:fd:ab:ac:3f:72:43:56:b3:
         0a:67:fe:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:24:19 2025 by rpki-client