Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
File:                     uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft (raw, json)
Hash identifier:          wTny/Wu9WI+C6FrJ6hTvUwdgM11xOwZ14YpClArhaO8=
Subject key identifier:   9F:EE:5B:F7:BB:77:57:8B:07:6A:D8:62:36:7B:4E:B9:A1:57:72:AA
Authority key identifier: B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50
Certificate issuer:       /CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
Certificate serial:       019652A4EC3450F916BE18B8B1A09EF90DE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
Manifest number:          0BE3
Signing time:             Sun 20 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 20 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 21 Apr 2025 10:01:01 +0000
Files and hashes:         1: eRHIy3mv3BXwoLavV3BtZjDi-Hc.roa (hash: 6bAq9inqYNzefNG/gsv4hHUEJeNDRT5tgQx9TwbA0k4=)
                          2: uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl (hash: 2kVhyemw2+c2Honv4Q7nktZvLbohhbuQLjVNDJPiWcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:a4:ec:34:50:f9:16:be:18:b8:b1:a0:9e:f9:0d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
        Validity
            Not Before: Apr 20 10:01:01 2025 GMT
            Not After : Apr 21 10:01:01 2025 GMT
        Subject: CN=9fee5bf7bb77578b076ad862367b4eb9a15772aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:92:27:52:40:7f:da:c0:ba:8c:0f:51:79:61:
                    55:ba:40:c3:a9:f7:3c:cc:e5:f8:02:ff:7a:3e:9b:
                    e0:1e:dc:28:d3:e8:b1:6a:f1:11:32:5a:fd:d0:f2:
                    bb:ed:45:ee:20:1e:89:b1:45:e3:1f:5e:77:9c:db:
                    f0:08:1b:d3:a1:b0:c1:a7:b7:2c:c3:7e:c6:05:de:
                    79:96:55:b8:fa:3c:63:9b:0c:8e:cd:8d:56:cf:df:
                    58:08:61:02:d8:4d:77:11:d9:2f:08:01:e3:4a:b8:
                    98:81:28:c3:bc:a2:7c:ea:fe:a0:e4:1d:8c:7f:6f:
                    04:73:69:91:a0:c7:b6:f3:fb:bc:3e:13:a2:9c:56:
                    67:0a:10:b8:02:b6:b0:0b:6b:b2:d2:c8:82:1e:89:
                    42:a8:23:7a:8c:44:eb:6e:2a:82:b5:43:d7:fc:84:
                    6c:59:f1:66:7c:44:b4:a2:10:99:f8:a7:c6:55:37:
                    97:dd:9e:89:b9:4b:ab:18:c1:23:2a:12:ab:ef:6f:
                    c4:87:42:83:71:42:65:72:86:cb:dc:0f:8a:50:72:
                    2d:30:15:dc:b5:7a:93:7b:15:a1:a3:49:5a:a0:46:
                    6e:4d:6d:63:92:a3:9e:e7:a0:ef:6e:ff:05:84:ce:
                    b9:59:5b:80:7c:00:e9:5e:2d:8e:77:69:68:20:7a:
                    c3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EE:5B:F7:BB:77:57:8B:07:6A:D8:62:36:7B:4E:B9:A1:57:72:AA
            X509v3 Authority Key Identifier:
                keyid:B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:7b:f1:7b:58:f7:ce:36:bc:b2:96:1b:5d:d9:20:94:ca:09:
         2c:97:8a:6a:26:e6:df:8b:51:31:df:62:98:e0:dd:24:c3:54:
         40:dd:6e:da:ef:67:46:aa:ad:8a:84:9f:20:5f:9c:15:85:8c:
         82:b2:92:05:4f:03:97:df:e6:9a:a1:64:02:5f:3b:9d:89:00:
         2c:ae:fd:8b:a0:07:e4:f7:80:01:79:a8:db:f5:a1:83:f2:ea:
         00:7a:72:42:74:c8:7b:79:ae:16:89:d3:05:d2:43:15:b3:5a:
         d0:fa:e2:27:ef:3f:14:45:8a:cb:1d:9b:0f:21:af:1a:76:b2:
         dd:3b:2e:9d:a8:11:56:67:df:a8:3e:bf:f8:b4:d2:f4:65:f2:
         6a:34:66:69:3e:76:8f:8d:87:12:5b:87:60:bb:11:9f:78:e3:
         e6:14:68:05:c8:da:a2:22:4c:d9:55:aa:7e:7c:e4:c1:e2:ba:
         b8:93:84:a0:55:9c:50:72:aa:7d:ad:cd:6c:00:c5:28:10:76:
         75:f3:1e:d5:5e:17:a2:3c:5d:a5:c6:7f:b7:e0:ad:d9:42:c0:
         5c:57:4e:1a:a6:0e:36:f6:9e:ec:ae:4c:a2:01:11:b7:73:52:
         5f:e9:58:a9:3b:1b:ac:9e:a1:a9:dc:66:bf:38:3e:cd:7a:bb:
         02:34:75:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:15:36 2025 by rpki-client