Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
File:                     8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft (raw, json)
Hash identifier:          IE/JUHvCFvtJOsJ5M/AYdGIbJ/519GCYm7VbDmyqPzA=
Subject key identifier:   EE:2F:51:35:D5:97:C7:82:29:EC:7C:6E:89:7A:5B:21:B4:DF:15:4C
Authority key identifier: F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C
Certificate issuer:       /CN=f2bffa2742563265037029a78f9317339053009c
Certificate serial:       01964E5A0618B2B0F526897CFD7CB5D36E66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
Manifest number:          04DB
Signing time:             Sat 19 Apr 2025 14:00:44 +0000
Manifest this update:     Sat 19 Apr 2025 14:00:44 +0000
Manifest next update:     Sun 20 Apr 2025 14:00:44 +0000
Files and hashes:         1: 8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl (hash: YeHunqn6ckhPmM4whhgbkqYc7ZJF1Si2907sO2QIBvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:5a:06:18:b2:b0:f5:26:89:7c:fd:7c:b5:d3:6e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bffa2742563265037029a78f9317339053009c
        Validity
            Not Before: Apr 19 14:00:44 2025 GMT
            Not After : Apr 20 14:00:44 2025 GMT
        Subject: CN=ee2f5135d597c78229ec7c6e897a5b21b4df154c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:84:b8:01:86:1b:1f:3d:58:36:0a:8e:53:06:
                    ed:23:33:33:e6:ca:3e:b3:be:fb:b8:3e:d4:51:67:
                    3b:0b:7a:f9:dc:20:ed:c4:32:35:1c:f5:9d:31:c3:
                    d8:1b:7a:ca:e0:d6:7a:f1:87:23:ef:cd:e4:da:d4:
                    79:f0:25:bc:48:09:51:d8:83:e7:a3:43:c0:3e:c2:
                    6c:06:d1:a3:ac:a3:83:a8:9c:67:85:40:7f:a6:fc:
                    b4:ad:43:4a:85:b8:a3:83:76:bd:53:76:cf:81:1b:
                    70:91:7e:36:68:7a:54:aa:06:b4:62:9e:d3:0e:33:
                    44:b4:8f:da:a8:e0:2a:48:fd:e5:4e:4c:5f:03:cd:
                    8b:bf:a5:a7:fc:a8:7d:8b:ec:61:42:b6:ca:d1:00:
                    2b:eb:64:6c:9f:86:fa:1c:23:a1:51:7a:eb:1d:5d:
                    b4:68:db:96:b1:27:7d:2d:23:c4:b8:af:de:68:50:
                    09:14:2b:2e:1e:c3:59:59:33:9e:c2:12:39:0a:1b:
                    a1:04:64:1f:f1:6f:dc:39:40:85:6d:07:2b:a6:86:
                    67:ff:6a:1e:05:3d:a4:43:f5:3f:bf:a0:41:1e:39:
                    ef:89:01:69:d0:16:db:63:66:d1:d6:21:cc:c4:b6:
                    58:e4:b4:23:84:1c:5b:1f:01:5d:9b:71:9b:13:7d:
                    8a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2F:51:35:D5:97:C7:82:29:EC:7C:6E:89:7A:5B:21:B4:DF:15:4C
            X509v3 Authority Key Identifier:
                keyid:F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:29:3c:85:95:e4:2d:30:00:45:5a:aa:6b:20:a0:56:d4:9b:
         ce:5b:a3:f3:0c:4c:7b:2b:a7:09:2e:75:8b:ec:eb:dd:fb:f1:
         d0:a3:73:be:4e:37:46:2a:02:ea:10:f0:f8:f5:67:6b:dc:90:
         cb:ee:15:3d:03:8d:ce:43:ec:b3:7e:98:c0:ef:ac:ee:bf:eb:
         ad:c8:b6:67:e7:13:21:51:83:79:1c:1b:39:61:0c:53:22:bb:
         71:5f:fd:96:63:b5:a0:24:ae:b4:0f:b4:18:83:e9:cc:60:4e:
         81:08:ac:ac:0c:f1:12:a7:92:a9:bd:4a:56:b5:37:1d:87:c4:
         0f:85:c1:1c:00:5c:5e:8b:61:71:53:29:55:ae:f9:50:a8:cb:
         ff:4f:c1:d6:e7:a3:dc:54:40:d7:b1:93:35:fc:38:6e:d5:90:
         d9:98:72:8e:5b:af:ee:9b:32:be:c8:a1:bd:9f:6b:52:40:9d:
         3a:42:2f:df:fd:74:f7:70:76:94:13:96:96:74:1a:01:04:3d:
         3f:07:23:80:e7:ac:2e:51:47:b5:c6:ca:90:a8:66:d2:24:61:
         13:69:fc:b2:9d:9c:07:f0:11:76:6e:6d:2a:b4:8c:32:27:84:
         69:79:62:c4:75:e7:a4:99:85:45:e9:23:2d:e1:68:23:7c:ff:
         e2:a8:29:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:28:42 2025 by rpki-client