Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
File:                     dcqnmRKIh2aA16yQqFafP8IDh_o.mft (raw, json)
Hash identifier:          R7fFyTUv4AXRbPemBgD1L+hOCEeujFQQOJUm8V99Y60=
Subject key identifier:   87:29:D0:B4:BC:00:CA:5A:79:9F:EA:31:27:15:59:2F:67:64:4B:58
Authority key identifier: 75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
Certificate issuer:       /CN=75caa7991288876680d7ac90a8569f3fc20387fa
Certificate serial:       01958EBCD2247FEED64412D4E4921FF7C7EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
Manifest number:          1494
Signing time:             Thu 13 Mar 2025 09:01:33 +0000
Manifest this update:     Thu 13 Mar 2025 09:01:33 +0000
Manifest next update:     Fri 14 Mar 2025 09:01:33 +0000
Files and hashes:         1: dcqnmRKIh2aA16yQqFafP8IDh_o.crl (hash: ZoLl40V40TIoBB512zthzEhJQknDY9G66OTTjLEbXWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8e:bc:d2:24:7f:ee:d6:44:12:d4:e4:92:1f:f7:c7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75caa7991288876680d7ac90a8569f3fc20387fa
        Validity
            Not Before: Mar 13 09:01:33 2025 GMT
            Not After : Mar 14 09:01:33 2025 GMT
        Subject: CN=8729d0b4bc00ca5a799fea312715592f67644b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e5:28:07:c6:3a:3c:e7:18:a4:87:ea:b9:71:
                    31:45:0e:c7:40:37:ca:40:47:1e:1d:b2:21:33:72:
                    4f:3c:ed:13:52:0f:22:48:a6:d8:05:bb:57:27:37:
                    b2:0c:a7:3e:81:bc:39:c5:e2:f2:f9:f1:81:91:56:
                    f3:e8:fa:ac:41:34:fb:0b:32:a6:21:b0:c8:65:34:
                    c5:9f:92:7d:ad:4c:d8:d8:f8:67:80:21:80:14:9f:
                    f5:cb:76:04:47:56:05:5f:1e:53:59:fe:3e:86:c1:
                    1e:1e:f5:43:43:d3:74:b5:31:b4:8d:65:e2:67:57:
                    b8:12:6e:34:5f:fb:a5:aa:22:1d:d4:0e:6a:95:2f:
                    62:3a:f3:94:a2:29:ac:1f:62:10:f4:04:42:aa:37:
                    65:9b:ec:c7:1b:e5:35:36:fd:3b:c2:47:63:ac:53:
                    c1:43:89:7d:16:76:5d:65:b5:c8:8d:64:6e:c9:4e:
                    0d:ba:d2:6b:5b:2d:93:f9:12:6a:3f:51:e5:83:c3:
                    69:2e:dc:7a:da:42:bd:9f:42:39:f8:34:3e:de:2a:
                    c6:3f:58:a6:ca:c5:89:cd:c7:07:7d:a8:4e:09:a5:
                    20:9f:05:c6:f9:9e:85:f6:42:6c:bc:32:e2:7c:ae:
                    33:6f:73:29:92:3b:dd:39:cd:e0:83:9e:85:e3:3e:
                    a7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:29:D0:B4:BC:00:CA:5A:79:9F:EA:31:27:15:59:2F:67:64:4B:58
            X509v3 Authority Key Identifier:
                keyid:75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d6:f7:b7:f8:11:06:91:ad:3d:96:95:48:39:c4:5d:f2:0e:
         a2:62:10:8b:b5:a8:34:e8:b4:8e:71:d9:7d:11:c3:0d:ca:3d:
         d0:6f:59:92:b7:af:be:0c:6c:26:cd:b5:b3:c5:3f:a2:ee:63:
         bf:a1:0a:72:6c:a2:4a:c1:dc:4e:3f:65:11:18:57:16:43:c0:
         7b:4e:1e:f6:12:6d:0c:41:d6:3b:25:04:67:c7:c8:19:79:f0:
         fc:02:af:f1:8e:a6:dd:53:b1:d3:27:a7:a9:8e:b0:2c:7d:5b:
         27:92:fd:a9:09:95:57:4d:99:22:99:f0:b8:f5:4d:ba:64:19:
         25:cc:1e:08:84:1d:00:01:c5:0c:b1:e5:2c:25:9a:6c:8d:8a:
         1d:1f:b2:d0:c9:b1:6e:98:19:5a:a7:aa:3d:0c:9e:47:cb:10:
         e9:69:1f:13:32:69:a8:28:8d:37:3d:39:62:f3:26:11:7a:d2:
         b4:2b:a1:09:b9:59:81:a4:80:39:33:38:cd:96:f4:89:ff:8a:
         05:d2:25:c8:f5:e8:9b:0c:4b:e6:c0:28:ed:6b:55:f2:08:5c:
         48:fa:ab:02:32:ee:f5:29:fc:ed:41:f2:82:7e:2d:ef:74:bc:
         5a:db:f1:7e:56:6e:80:c2:65:6f:7f:94:59:ea:70:6f:cb:4d:
         e1:e2:94:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:10:55 2025 by rpki-client