Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
File:                     oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft (raw, json)
Hash identifier:          8yXLPV8f49MJAYCB4Nj3Gdyz8exnv6zGUFTY7uBTbD0=
Subject key identifier:   49:C7:D5:FB:1F:09:76:66:99:09:BE:DA:49:15:20:20:35:C3:2A:1C
Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
Certificate issuer:       /CN=a16512b8a262bad599a3b023358c5ceccac9e085
Certificate serial:       01964E90DBBCFF9BDC45C0FF5441369E805B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
Manifest number:          01E9
Signing time:             Sat 19 Apr 2025 15:00:38 +0000
Manifest this update:     Sat 19 Apr 2025 15:00:38 +0000
Manifest next update:     Sun 20 Apr 2025 15:00:38 +0000
Files and hashes:         1: oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl (hash: KRzMLxS+ecg+LUy/Vta56puwnAnSK+E6kIc2pOwWlpU=)
                          2: vdKJ4VP8I-i-guYkkpwttCVrQIU.roa (hash: p+JgyUOEURGu3VWxUcx0JVwt9sD2Q41aSbbM15KWS1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:90:db:bc:ff:9b:dc:45:c0:ff:54:41:36:9e:80:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085
        Validity
            Not Before: Apr 19 15:00:38 2025 GMT
            Not After : Apr 20 15:00:38 2025 GMT
        Subject: CN=49c7d5fb1f0976669909beda4915202035c32a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:77:7f:ea:cb:7f:dc:44:30:56:c3:d6:dc:fc:
                    e8:95:d0:39:26:2f:f1:6e:53:16:f6:55:a1:df:c6:
                    fb:5a:f4:28:f8:3b:59:57:9b:4f:9a:d0:92:2c:b7:
                    0c:e4:90:f2:e3:80:5f:fd:48:c1:a8:1c:87:ba:79:
                    c0:e9:0c:7b:06:1a:8e:57:07:c4:19:0e:a8:06:05:
                    bc:40:47:c9:e4:76:15:05:09:d8:f2:92:2d:06:a0:
                    f8:9f:8a:ec:12:f7:46:7a:fb:7a:bf:97:d8:9d:1d:
                    61:a7:a6:61:25:c6:e1:f3:2e:b2:e9:e0:24:63:cd:
                    43:47:80:66:b1:5b:8b:a8:ef:c1:e5:3c:8f:35:bc:
                    08:c0:ee:e7:04:53:d5:74:6d:98:c6:02:c7:c5:4b:
                    1f:69:d9:ac:8e:b0:ae:35:c5:6b:e8:0b:ee:a8:c6:
                    37:d6:26:c0:8a:b3:dd:9c:58:39:a6:c9:a5:56:9e:
                    b3:cb:a8:66:f2:52:e4:5f:a3:4c:3a:55:69:4b:59:
                    6e:14:60:91:9b:99:4a:01:c4:3f:5b:e2:ed:2c:df:
                    b6:1b:32:fc:c0:c7:2c:92:ce:69:42:a1:ca:37:80:
                    24:16:39:21:9c:05:e5:8c:04:99:be:7d:24:e0:8e:
                    1f:5f:8e:1c:87:d3:af:1b:81:ae:4c:eb:bb:35:2f:
                    71:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C7:D5:FB:1F:09:76:66:99:09:BE:DA:49:15:20:20:35:C3:2A:1C
            X509v3 Authority Key Identifier:
                keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:1a:b6:4d:39:ad:48:41:aa:f3:fe:fe:fb:41:f4:35:a0:df:
         86:ea:24:38:9a:32:62:a0:e5:d7:b7:06:df:b7:eb:e3:7e:fa:
         35:1f:3b:d2:4c:e9:57:27:91:b6:5f:bb:02:d5:b2:99:e0:7f:
         e0:4e:05:0d:87:9e:7a:83:02:16:06:51:a7:00:d0:c5:61:5b:
         7a:88:c9:fc:10:f8:7e:9c:e4:d1:d5:c8:50:94:f9:5f:bb:11:
         95:ac:47:33:26:52:df:0a:c5:0b:55:5f:1a:92:af:a7:e5:9c:
         38:c2:00:fe:e2:34:a0:0d:7d:de:dc:08:fc:98:7d:0f:f7:6e:
         8e:c4:f8:31:53:3d:83:1f:29:99:b4:23:5f:96:0c:8f:26:b8:
         5c:5c:04:e1:90:45:04:6a:eb:eb:98:22:c7:50:c9:14:80:17:
         bb:a6:b3:4b:26:94:ed:ae:03:24:f5:aa:9c:53:e6:ef:7c:a1:
         8b:35:6f:84:c7:d1:59:b6:a5:2b:a7:c7:d8:f0:69:44:d0:62:
         da:73:a3:a2:43:64:f2:c8:08:a3:51:65:ad:65:4e:71:31:9c:
         2a:c3:49:af:aa:f6:ed:8a:93:35:1b:9d:99:7e:37:9c:3d:c5:
         32:be:91:8c:2d:99:f6:1e:e0:03:c0:75:48:4b:43:6b:a6:ef:
         38:17:5f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:04:16 2025 by rpki-client