Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
File:                     Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft (raw, json)
Hash identifier:          S+u3iE4ZCDFrap4eUCOIuUvvZSNikb/nYEH4VAlCruw=
Subject key identifier:   67:6E:2F:4A:E6:BE:7C:AD:69:D1:DD:AE:E4:74:57:0F:F9:90:A2:49
Authority key identifier: 36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
Certificate issuer:       /CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Certificate serial:       019653B6DC7D5BB7BDC470AF4F454D71F75B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
Manifest number:          14FB
Signing time:             Sun 20 Apr 2025 15:00:14 +0000
Manifest this update:     Sun 20 Apr 2025 15:00:14 +0000
Manifest next update:     Mon 21 Apr 2025 15:00:14 +0000
Files and hashes:         1: Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl (hash: dsUDNkEWxM1v9AsupqnTc+LRyoS1+0evxODhil1qq6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 15:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:b6:dc:7d:5b:b7:bd:c4:70:af:4f:45:4d:71:f7:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
        Validity
            Not Before: Apr 20 15:00:14 2025 GMT
            Not After : Apr 21 15:00:14 2025 GMT
        Subject: CN=676e2f4ae6be7cad69d1ddaee474570ff990a249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:88:c5:96:5a:af:55:81:cf:5b:4a:62:01:39:
                    f1:00:81:88:64:b5:6d:fe:e7:32:29:f7:d4:4b:83:
                    0e:cb:e0:d0:15:83:13:77:f0:2b:de:ba:56:0f:b0:
                    57:53:4d:df:ee:29:72:f0:e4:63:4e:c1:34:89:ef:
                    43:06:c8:21:1f:5d:b5:75:fd:40:55:25:82:33:2d:
                    26:99:9d:df:84:19:fc:71:a8:1e:0b:6d:0c:ee:b4:
                    b8:5a:e3:20:14:fa:9c:cc:fa:53:c1:10:67:76:03:
                    4a:75:15:0c:ef:91:83:46:98:3a:2f:2a:9c:9e:72:
                    6c:5a:7f:e9:8f:76:01:77:b3:f0:71:df:44:a8:7e:
                    59:a9:fd:07:63:72:dc:89:34:75:c4:1e:50:c6:38:
                    3d:b0:32:13:9e:1f:ed:c4:88:46:31:ba:2b:22:d7:
                    11:74:14:47:47:60:46:8a:a2:2d:09:5f:98:ad:4a:
                    2d:3f:10:20:1f:21:fc:be:b0:c1:49:29:c6:1d:96:
                    cd:9c:88:56:79:8d:63:e9:50:7e:5a:d4:08:01:77:
                    30:8f:0d:79:3c:4f:0d:d2:2b:f5:74:9f:b4:90:85:
                    98:9d:7a:c3:6d:9a:fe:1b:47:12:dc:1a:3d:c1:23:
                    35:7f:f5:8f:52:e0:cf:99:60:c5:7c:07:29:ae:67:
                    c1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6E:2F:4A:E6:BE:7C:AD:69:D1:DD:AE:E4:74:57:0F:F9:90:A2:49
            X509v3 Authority Key Identifier:
                keyid:36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:2f:72:0b:63:59:c6:aa:ce:71:82:36:23:4b:6f:79:c0:19:
         76:9d:9b:da:b6:1b:6a:02:9a:42:f0:39:ab:9a:a3:52:4e:c2:
         e1:ab:19:dc:94:2f:06:91:82:b4:5e:94:b3:37:a2:33:82:30:
         b0:40:60:f3:44:77:22:7d:af:67:30:45:85:a4:0c:6c:3b:6f:
         1b:47:28:eb:ca:e0:b8:57:a7:80:06:34:e7:1a:58:3b:d3:f2:
         31:92:42:cc:fb:2a:b5:89:62:ad:74:65:75:44:d0:7e:10:53:
         d0:cf:17:08:03:73:cc:3a:de:b2:af:18:ee:a5:e4:6e:ae:94:
         06:ee:7c:f8:27:32:22:2a:fc:79:4b:ad:bd:e6:96:d9:ba:19:
         a4:f3:0e:35:74:69:ef:bc:b6:39:2f:1a:2c:b8:6b:a7:65:5d:
         0f:e4:48:62:c0:8f:1e:23:e8:a2:28:94:08:dd:ff:39:dc:25:
         d9:47:35:25:51:1a:aa:12:b5:da:7c:75:3a:cc:27:95:f3:cf:
         30:56:9b:40:92:ab:43:3f:af:eb:73:92:0a:e6:7a:4a:a2:14:
         1d:d2:8b:45:1c:67:bd:d0:e3:f8:88:88:03:ab:11:0f:89:7d:
         0e:18:12:9e:7b:ac:4e:ae:df:10:d5:31:3e:15:62:6c:f5:e1:
         76:70:fa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:39:12 2025 by rpki-client