Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
File:                     4AEry55udHI3ckeBpMkZ_FyUGWU.mft (raw, json)
Hash identifier:          ouYU0dyM4cfJ0a+aLDsT8zguwtddZFxqbJqgcESHIt0=
Subject key identifier:   57:18:51:34:68:A3:01:AC:CF:47:18:11:1B:9B:DE:0A:5F:F9:7F:7C
Authority key identifier: E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
Certificate issuer:       /CN=e0012bcb9e6e747237724781a4c919fc5c941965
Certificate serial:       01964067DCD8CADD4F6617FC1BDC633F12B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
Manifest number:          0574
Signing time:             Wed 16 Apr 2025 21:01:10 +0000
Manifest this update:     Wed 16 Apr 2025 21:01:10 +0000
Manifest next update:     Thu 17 Apr 2025 21:01:10 +0000
Files and hashes:         1: 4AEry55udHI3ckeBpMkZ_FyUGWU.crl (hash: W9xzsbHB9QhU7Fo6JQGkP2StjakFWB+2yRFIGYg5tMY=)
                          2: MYSNIQYUaSC8ss7EtwLxh0CCkZs.roa (hash: AWgu8sQIv0FgWnatk16HiARuSleHz/0dfX9flEkjltg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 21:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:67:dc:d8:ca:dd:4f:66:17:fc:1b:dc:63:3f:12:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0012bcb9e6e747237724781a4c919fc5c941965
        Validity
            Not Before: Apr 16 21:01:10 2025 GMT
            Not After : Apr 17 21:01:10 2025 GMT
        Subject: CN=5718513468a301accf4718111b9bde0a5ff97f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:78:db:2f:f0:28:31:d6:fc:5e:b4:f6:e2:a8:
                    f0:93:4d:22:04:0b:f2:58:8c:e4:78:b4:3c:92:58:
                    1a:e7:92:ad:e7:f1:ab:7d:40:0c:74:2b:7d:8f:dd:
                    09:49:60:84:61:9f:39:4d:34:9a:e4:d2:e9:e2:c5:
                    70:fc:87:a9:f3:74:8c:f0:9c:ff:d1:0c:63:63:f8:
                    dc:0d:c3:81:cf:ec:db:83:be:b5:ad:ea:1e:bc:58:
                    1e:fe:09:c8:f2:8f:04:ba:cd:88:60:49:e4:4c:29:
                    62:4c:f3:87:7e:c6:9a:6c:95:44:58:62:0f:eb:67:
                    bc:71:60:31:8e:4a:78:65:d8:b6:af:6e:88:0f:3a:
                    25:1b:fe:64:4b:47:9c:4f:ab:b8:0c:29:28:6b:e6:
                    f1:af:58:28:83:04:05:52:2f:af:5c:c5:1c:c7:f7:
                    d3:75:33:80:dc:dc:15:4e:93:e2:c8:4f:07:1b:39:
                    cf:60:7b:a2:62:7c:db:99:04:e0:48:30:97:df:58:
                    20:56:fe:bd:48:7a:e8:f4:e1:69:9a:4a:6f:67:d0:
                    3c:72:23:ac:1e:01:1d:e0:96:b7:2c:42:4f:fc:c7:
                    08:c9:b7:be:1c:e2:96:73:7d:22:b2:89:4e:d2:2e:
                    b1:1f:e2:6f:37:c5:56:49:b3:73:4c:28:55:84:b1:
                    3e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:18:51:34:68:A3:01:AC:CF:47:18:11:1B:9B:DE:0A:5F:F9:7F:7C
            X509v3 Authority Key Identifier:
                keyid:E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:87:b4:e0:83:a6:28:ef:cb:dc:97:fe:b3:c0:4a:67:73:83:
         41:b8:37:25:26:fc:6e:04:98:81:8f:e7:66:17:e9:28:29:4c:
         e6:25:75:d0:36:c0:96:b2:ae:0f:c1:b8:3b:c2:7c:b7:ee:f2:
         d3:90:ce:da:86:f5:34:5e:95:a9:5f:08:ea:34:b5:8e:e7:0f:
         f3:d0:41:79:c6:56:3f:3a:41:73:d1:63:4d:d0:d5:a5:28:99:
         a3:6e:01:d0:ea:01:97:92:ce:4f:ac:a5:11:e8:2c:ae:f2:42:
         27:11:9f:31:b7:eb:50:1e:c9:bf:59:b2:91:8c:2f:ac:39:df:
         c9:69:de:d0:0b:88:7c:2b:26:2d:fc:bc:b9:98:5d:ec:03:1d:
         5c:f5:4d:92:99:da:95:36:4a:2d:60:6f:8e:0e:74:de:fc:f9:
         11:78:26:bd:05:0a:74:e7:5b:6d:cd:4f:45:4f:4d:68:94:be:
         e5:ec:7e:e7:25:f8:ab:80:25:b2:c5:3d:0a:21:02:9d:93:37:
         8f:b6:9c:fc:0d:41:ce:d5:47:39:6c:a6:53:43:ef:90:3a:50:
         85:aa:8a:a1:a7:7a:51:7d:62:99:78:97:77:c8:37:4d:fc:e3:
         53:04:9a:55:12:3f:96:1d:ba:de:36:a9:bb:d0:66:d8:a8:43:
         47:ef:22:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:41:42 2025 by rpki-client