Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
File:                     FjB9KfVUPyHqMAm5Uj_nG48Taco.mft (raw, json)
Hash identifier:          6JyHy+LfJ/QvL3zDaWGd093pT5Srfi6PwSn9YCHP2jQ=
Subject key identifier:   72:4A:AB:45:48:0D:9C:69:66:5F:1D:95:DD:3F:B2:FA:1C:C9:BF:A7
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Certificate issuer:       /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial:       01962E61B561C732B5E442D8E58F668697AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
Manifest number:          1504
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: FjB9KfVUPyHqMAm5Uj_nG48Taco.crl (hash: kVLb3pi/8MpOpnrug0d3rrddVcqFhKvU/ZtgSR3YQ2I=)
                          2: Ky4bLo9J6pOGQKNm7HdTTpVyXUQ.roa (hash: Nz/bgREWmfO74J020d6hSSWbUR82qaNTZZa/sGleP5Q=)
                          3: ZuxCaM0jvO8dT69rrtCo-UU_fGM.roa (hash: mTx3iBU5+gUzCuwkRIlwRwR4OdmyhWs/YLzJTZWJgsk=)
                          4: _ZHo0DXp29WN4BOS9yj8UgLowqU.roa (hash: k2O5B28gMEUS5GB1MDIowIqcob2fshstanyKIafnymc=)
                          5: i4MzjZTpbtZK_ZPjW181XA_QlOs.roa (hash: a3SMnVU0VU8ASpu/GP3SPdiJleFoyqLmWwLdGByzs8I=)
                          6: s09aV916ePc245Z9GMH4Ts0cTn8.roa (hash: hdMuDE9zUjm2uLsuj9BEHmHlQ1AMBc0s6keoHZxmUYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Apr 2025 09:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b5:61:c7:32:b5:e4:42:d8:e5:8f:66:86:97:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=724aab45480d9c69665f1d95dd3fb2fa1cc9bfa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:27:81:df:00:75:e9:5b:7c:47:48:66:f2:6e:
                    24:32:13:63:70:40:29:17:e4:b1:b1:83:3f:39:17:
                    10:5c:fa:cd:46:a7:33:6c:ed:5b:53:7d:4b:13:56:
                    52:6a:d1:8b:2c:29:59:4c:96:05:c5:2c:09:b9:ca:
                    4f:24:9b:65:17:66:db:4c:16:87:e7:2f:ba:63:e8:
                    96:60:46:b1:d3:13:13:7b:55:f9:90:8d:50:87:71:
                    e0:b4:61:b9:01:3c:36:2e:17:34:b9:f4:47:b0:86:
                    5d:c8:dc:86:72:12:7b:02:0d:11:63:93:3c:a0:2b:
                    0c:ea:5c:e2:c8:cd:3d:e6:b4:43:68:73:af:c7:e2:
                    71:ca:0e:03:41:72:78:7b:33:0b:32:75:a7:f9:23:
                    fa:fd:e5:c5:5f:17:d1:c8:03:c7:0d:8e:4b:4c:67:
                    a6:39:51:41:9b:2e:78:a7:06:85:01:05:fb:54:bf:
                    85:18:7a:90:31:d9:58:9a:16:b2:40:f1:c9:40:72:
                    92:9f:f3:f7:25:3a:87:63:38:bc:69:6a:02:04:2b:
                    e6:97:38:e8:a2:46:45:28:05:a8:80:cf:1f:c4:7b:
                    55:73:f3:a3:98:fe:0f:f6:dc:22:fc:39:cf:93:32:
                    fb:9e:da:6b:f8:27:bc:de:48:e7:ab:f9:5e:f7:3b:
                    25:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4A:AB:45:48:0D:9C:69:66:5F:1D:95:DD:3F:B2:FA:1C:C9:BF:A7
            X509v3 Authority Key Identifier:
                keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:8d:a8:77:d2:e9:24:bc:bf:77:7e:f5:79:ae:c0:88:00:2e:
         a3:1c:3c:e1:11:17:d1:bf:f0:33:58:89:42:b2:aa:8d:20:70:
         e2:92:c9:7e:98:8f:b5:b1:6c:16:77:63:73:d3:c0:0a:17:36:
         13:1f:56:4c:d0:59:63:99:49:63:db:3f:e3:f3:b4:dc:3b:c5:
         80:d9:fd:a5:b5:8e:8f:00:57:19:92:1d:fe:c7:5d:ca:8c:11:
         e1:6d:da:7d:f9:88:7c:5c:24:74:d6:2a:c5:30:d5:89:cb:bc:
         c6:a9:9f:e3:79:31:c2:72:3e:ee:4e:2f:b3:5a:5d:bb:e6:0d:
         75:19:8f:d0:ab:50:41:de:68:79:6a:7e:3e:ea:db:33:eb:aa:
         47:a3:84:b4:45:b7:25:f8:9c:ad:0e:4d:37:fd:36:e2:e1:8c:
         e6:35:9e:90:43:f4:67:e6:43:0b:d4:70:08:44:bf:8b:eb:75:
         4a:c7:93:cd:da:e5:0a:a6:6b:42:de:65:88:8f:bf:79:a2:09:
         30:47:ae:32:91:e3:12:84:5f:c0:4f:de:ba:27:bf:24:79:c4:
         1a:5a:38:7c:78:7c:e6:3d:18:fa:6d:55:7d:fa:53:c9:53:f9:
         af:51:5f:5b:a9:10:f8:02:24:54:33:eb:1b:66:89:78:7b:74:
         ee:e5:23:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 20:12:04 2025 by rpki-client