Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.mft
File:                     1-U_SQY5_CeAdFRE__wBOBV-A_F4.mft (raw, json)
Hash identifier:          rH9MvAe70JNNHmzGmRwavXQFPTvzp/ZEd47AxPwbdXU=
Subject key identifier:   59:4E:A8:7C:18:2F:93:4E:7E:96:81:32:E6:75:1D:8C:05:D0:BC:A4
Authority key identifier: F9:4F:D2:41:8E:7F:09:E0:1D:15:11:3F:FF:00:4E:05:5F:80:FC:5E
Certificate issuer:       /CN=f94fd2418e7f09e01d15113fff004e055f80fc5e
Certificate serial:       019654254CC2160CEE5427CCA849C55D442E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-U_SQY5_CeAdFRE__wBOBV-A_F4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.mft
Manifest number:          0590
Signing time:             Sun 20 Apr 2025 17:00:52 +0000
Manifest this update:     Sun 20 Apr 2025 17:00:52 +0000
Manifest next update:     Mon 21 Apr 2025 17:00:52 +0000
Files and hashes:         1: 1-U_SQY5_CeAdFRE__wBOBV-A_F4.crl (hash: uM0sjEdBm9omRe8lKiTL50L4IKcL577y/4KTtDUzTc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-U_SQY5_CeAdFRE__wBOBV-A_F4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:25:4c:c2:16:0c:ee:54:27:cc:a8:49:c5:5d:44:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f94fd2418e7f09e01d15113fff004e055f80fc5e
        Validity
            Not Before: Apr 20 17:00:52 2025 GMT
            Not After : Apr 21 17:00:52 2025 GMT
        Subject: CN=594ea87c182f934e7e968132e6751d8c05d0bca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d8:a4:2a:2d:7b:b0:8d:6a:d5:c3:3f:42:be:
                    0c:4f:4e:ff:72:ce:a8:e3:8d:00:da:88:f6:b7:3b:
                    2f:ee:b5:0d:b7:69:4e:f8:f4:59:e1:11:40:82:f9:
                    84:4a:a2:1c:fd:aa:80:af:dc:81:e9:d6:89:fa:82:
                    4b:e3:51:fa:49:cb:84:66:e2:83:b6:c4:64:9f:6b:
                    32:61:5a:89:d2:1e:62:fe:e3:73:c8:a5:ef:76:57:
                    f9:b0:12:37:5a:98:e2:b5:63:f5:ec:3e:31:de:2d:
                    81:a4:f6:3a:63:94:04:09:de:53:56:95:92:c1:db:
                    be:5f:5e:10:96:82:e9:7d:32:fe:07:35:ef:5b:50:
                    d9:96:5b:e1:06:61:b3:e6:5e:55:e3:64:a6:8b:68:
                    43:06:d7:40:b2:28:62:79:f8:4a:e2:1a:cc:81:52:
                    ba:bb:f6:89:e3:07:ff:9c:dc:f6:99:ba:52:48:9c:
                    c6:01:72:a3:fa:e0:9f:67:5a:c6:de:58:a5:e6:8a:
                    e8:de:1b:d8:09:ba:0f:a6:41:cd:91:bf:d3:03:e2:
                    e5:c8:f3:8e:3f:dd:97:ac:e1:16:38:41:dd:b9:2f:
                    10:e3:b9:fa:b2:a6:e8:1b:90:1d:75:5a:c1:79:87:
                    0f:2b:5e:0c:88:35:95:6f:62:79:1d:ad:cd:71:d9:
                    6e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4E:A8:7C:18:2F:93:4E:7E:96:81:32:E6:75:1D:8C:05:D0:BC:A4
            X509v3 Authority Key Identifier:
                keyid:F9:4F:D2:41:8E:7F:09:E0:1D:15:11:3F:FF:00:4E:05:5F:80:FC:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U_SQY5_CeAdFRE__wBOBV-A_F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:08:7f:20:e7:95:38:c4:5a:37:65:bd:a9:c0:32:ee:49:18:
         42:95:44:be:79:8f:fd:38:48:89:e5:f2:32:81:fd:ab:5e:71:
         5d:a6:62:41:aa:bd:1d:87:74:98:e4:fa:ff:3b:53:a0:bd:27:
         16:ad:07:0e:0a:86:1e:86:59:e3:03:3f:53:08:31:44:43:14:
         29:3c:e2:71:73:bd:70:fd:46:fe:3d:72:85:16:0a:3e:6c:8b:
         67:29:1f:0a:b0:b9:7b:0a:54:cd:7b:42:0c:e8:57:2b:d7:24:
         2e:ae:a9:bf:01:72:f2:35:ba:f5:d5:c3:31:b6:fb:b7:78:28:
         93:29:aa:5e:5b:66:8e:75:a9:71:72:cf:1e:13:4d:3e:17:b9:
         21:e0:5a:87:7e:b0:4c:c4:d7:c4:03:22:a1:38:29:5e:f1:e1:
         ef:2f:f1:7e:49:c4:8c:cd:fe:49:52:50:b9:e7:aa:a5:9e:d0:
         24:da:bf:62:0d:cb:e8:67:c0:87:56:a6:79:01:e4:e4:66:fb:
         b7:bc:a6:46:a1:77:61:70:82:35:08:62:89:fa:89:73:37:4e:
         c9:6e:2d:06:14:36:73:4c:54:43:ab:fb:8e:9c:c8:ee:68:d4:
         25:e3:6a:3b:1c:05:89:65:1e:6a:03:5b:e9:65:6f:2a:1c:e8:
         0a:02:7c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:42:33 2025 by rpki-client