Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
File:                     IsX-stJfrE3YuqT3HY3CJoGGoDk.mft (raw, json)
Hash identifier:          kkQGBM7kpyefNMRAc8/2XvgUpcZPlZXpQsWAVFTHykM=
Subject key identifier:   56:64:16:B3:44:56:8F:FE:C4:8B:D6:A7:B8:0A:76:FF:C2:B1:84:50
Authority key identifier: 22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39
Certificate issuer:       /CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039
Certificate serial:       01964C6B2629DBE33CECE5C3139C3A90C526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
Manifest number:          14F9
Signing time:             Sat 19 Apr 2025 05:00:12 +0000
Manifest this update:     Sat 19 Apr 2025 05:00:12 +0000
Manifest next update:     Sun 20 Apr 2025 05:00:12 +0000
Files and hashes:         1: IsX-stJfrE3YuqT3HY3CJoGGoDk.crl (hash: w4dAJI5FP77uw1NnaeyKlvNkwnXysGy6Swc5LxL9xgE=)
                          2: X8ZFuM8cVmkTslM54G-NHaJfImQ.roa (hash: HXWB+offeGx+RYH+8cAxZvvU8F4PwjDTMuG2VKd+Z6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 05:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:6b:26:29:db:e3:3c:ec:e5:c3:13:9c:3a:90:c5:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039
        Validity
            Not Before: Apr 19 05:00:12 2025 GMT
            Not After : Apr 20 05:00:12 2025 GMT
        Subject: CN=566416b344568ffec48bd6a7b80a76ffc2b18450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:48:9f:65:5c:cd:87:f7:c1:76:a5:3c:04:11:
                    83:c9:ab:84:80:32:47:0e:d4:ef:f0:8f:9a:2a:89:
                    89:0e:0e:03:05:c2:0b:a5:f6:63:99:8a:39:50:cf:
                    d2:b3:23:ed:d9:92:63:eb:aa:3b:7c:dc:c1:49:6b:
                    f0:e2:46:ac:a9:37:87:b0:ea:89:7e:29:1b:06:d0:
                    0c:81:2d:f9:4c:ad:f2:6d:f7:5e:af:b3:56:9b:5d:
                    f8:c3:c8:f7:8f:dc:1c:3f:36:3d:7d:9c:d4:f8:37:
                    36:ed:1d:15:13:ab:e1:06:b6:3d:ff:cc:e2:9f:b9:
                    ec:8e:67:9d:68:14:6d:9d:84:ba:e4:24:3b:10:da:
                    1e:3f:fb:ea:36:eb:1e:b1:79:42:f1:9c:34:f6:73:
                    c6:b8:c3:da:e2:0f:2d:9c:6f:03:a7:9a:b2:0a:76:
                    9e:bd:ea:a4:46:d3:4e:c1:1c:31:6c:cb:52:c6:f3:
                    92:3f:a7:6c:8c:af:68:c0:fc:c0:7d:f0:d6:c0:68:
                    b7:94:96:f1:ab:86:62:24:56:fa:34:0e:bf:28:46:
                    fc:5a:f6:b1:db:e0:45:1f:2a:96:2f:6f:49:24:57:
                    e2:f6:9f:fd:44:fe:62:ef:c6:7a:f2:bb:e7:4b:7f:
                    10:59:91:c6:39:5f:dd:33:5a:73:0d:18:13:99:c4:
                    e6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:64:16:B3:44:56:8F:FE:C4:8B:D6:A7:B8:0A:76:FF:C2:B1:84:50
            X509v3 Authority Key Identifier:
                keyid:22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5f:1b:38:6b:1b:47:58:55:7f:7b:7b:34:ac:44:1b:4e:b6:
         3a:00:d8:77:6c:87:0c:47:14:12:74:1a:52:60:f0:cf:ab:81:
         a7:5c:dc:ae:66:01:8d:a3:5b:3a:01:1a:f2:86:dc:64:eb:f1:
         8f:d0:ea:89:2f:13:90:70:6f:45:d9:5e:51:1b:62:26:72:43:
         e2:fd:fb:64:b4:75:81:e7:9d:f5:bf:c7:5d:2f:d3:b4:de:89:
         8f:81:13:b4:41:d1:92:13:ea:42:59:09:04:47:09:83:56:98:
         37:fa:aa:94:64:01:94:ea:93:c8:ad:b2:ce:a8:64:e2:fa:8a:
         03:9f:de:a7:2c:b3:12:4b:ef:b5:5a:8e:22:75:59:62:e7:72:
         03:b7:36:f4:e2:e0:b8:7d:56:5e:d1:4a:c3:4f:00:ad:56:3b:
         85:9b:27:15:45:f2:0c:0c:a0:f9:ae:25:b4:ff:0b:14:c8:17:
         3e:6d:2a:a4:1e:f1:67:5a:e5:a5:9f:35:dd:0a:c0:6c:e2:6a:
         f8:e2:55:fe:68:ac:e0:e7:d2:71:35:de:7a:43:ea:dc:c4:52:
         e8:0f:cb:bc:3b:c1:24:49:c2:9b:f8:26:57:e8:45:83:2e:ef:
         8e:b8:5d:03:50:73:46:4f:90:5a:37:9d:54:1c:24:8b:9a:ef:
         64:f2:66:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:03:10 2025 by rpki-client