Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File:                     OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier:          kuqqaBi039Zep8qWXLx5RO1P7L2cc0EaEIomnxZT40E=
Subject key identifier:   D7:41:E6:44:D6:88:2D:5B:FD:D5:5F:27:5E:7D:84:14:F9:FC:E3:B4
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer:       /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial:       0196447B4ED9FCB78D5C485B6EC8B98AB0AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number:          1489
Signing time:             Thu 17 Apr 2025 16:00:53 +0000
Manifest this update:     Thu 17 Apr 2025 16:00:53 +0000
Manifest next update:     Fri 18 Apr 2025 16:00:53 +0000
Files and hashes:         1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: n3qfpvER2ifH0vQ3mVRRcZ5yqu7mzLyuHCKif1n81A0=)
                          2: o1Ho1AoDVivcPIuSoHTiqdRiLsw.roa (hash: 2VRi6zWzRrWILpFGgvS4R1+SnUUqoGeAipP4Ra7rcD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:7b:4e:d9:fc:b7:8d:5c:48:5b:6e:c8:b9:8a:b0:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
        Validity
            Not Before: Apr 17 16:00:53 2025 GMT
            Not After : Apr 18 16:00:53 2025 GMT
        Subject: CN=d741e644d6882d5bfdd55f275e7d8414f9fce3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:96:8d:91:1e:72:26:79:82:85:cf:75:68:4e:
                    c6:f0:7a:18:c4:5d:9b:02:c2:f1:89:9c:bf:ad:d5:
                    2f:7f:7c:cf:e1:2b:c9:f5:a8:f4:20:90:2d:4d:e2:
                    34:91:ca:d9:f4:ce:aa:3a:ac:4d:7b:23:3c:0b:7d:
                    46:26:50:e0:6f:79:91:22:64:f3:b3:ff:fd:25:94:
                    27:d2:c7:d9:cc:50:6c:73:19:92:29:bf:94:43:69:
                    cc:ed:81:6e:10:63:ff:f7:c7:5c:2b:79:0f:48:1f:
                    03:c6:9e:e6:42:c3:fc:a6:15:41:78:4b:ec:b1:a2:
                    80:31:c6:f2:9f:be:f8:d1:55:5f:ee:0b:8f:89:fc:
                    a6:87:61:c5:57:a6:76:6c:77:d1:19:8e:5d:06:55:
                    de:e8:b1:3c:23:49:72:1a:67:da:83:e1:31:d5:df:
                    3b:19:10:d4:db:8d:78:e8:bb:5e:b5:c8:4c:09:e4:
                    a0:a7:2f:ce:4d:fb:70:b5:76:0e:37:aa:85:eb:cd:
                    fd:02:1f:31:9b:86:a0:57:3d:72:a6:dd:1c:a6:a2:
                    95:86:c5:a4:9f:7a:2f:86:da:6d:ac:40:bc:d0:3f:
                    6c:c4:37:e1:d2:f3:2e:f5:80:96:ca:ee:9e:7d:fd:
                    42:32:bf:3e:3c:d1:29:f0:45:ec:e5:05:35:66:32:
                    ff:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:41:E6:44:D6:88:2D:5B:FD:D5:5F:27:5E:7D:84:14:F9:FC:E3:B4
            X509v3 Authority Key Identifier:
                keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:eb:8c:f3:b3:58:a5:cd:20:8a:50:c5:b1:74:ac:e9:a3:f9:
         ff:5a:c9:a8:0a:70:fd:03:e6:95:09:e1:9e:d0:49:bf:23:b5:
         a3:b0:83:51:35:b5:37:83:5c:4c:3f:d3:a8:3e:42:55:d5:c5:
         55:9f:13:91:b0:27:4a:96:bc:b2:1b:25:3c:3f:b0:3c:e0:0d:
         0b:94:d7:81:53:0a:02:3b:83:e8:ee:8a:6f:43:57:90:e2:fc:
         77:d0:8b:12:6e:2d:55:c1:66:9d:fa:c9:fd:37:63:ec:94:e5:
         3b:48:9e:fd:01:45:da:81:18:41:83:97:ec:47:06:38:30:72:
         40:8c:4a:06:1d:5f:4f:46:03:ff:92:dc:a7:5d:df:b7:72:74:
         57:7b:46:cc:a0:0a:0c:c9:98:dd:3b:ce:43:95:f4:07:78:30:
         e4:fb:0e:1c:4b:cb:99:a0:5f:47:f5:12:29:e8:2e:27:f2:d4:
         14:60:6c:bf:1c:ae:d0:a1:a8:60:6f:35:f6:17:ef:75:98:79:
         c0:ea:6f:08:a1:1d:82:6b:3d:ef:02:40:18:7f:4d:3f:67:63:
         33:af:db:35:26:b8:4c:5c:22:fb:9b:5b:e7:ea:93:9d:8d:cb:
         fd:85:bc:14:e1:16:fe:39:6d:a2:6c:e8:ac:81:f7:78:ea:6f:
         84:e4:99:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:08:43 2025 by rpki-client