Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
File:                     i90HS96_RRVKJr6_3OVTgpFTSwo.mft (raw, json)
Hash identifier:          KSMWokri+bs3JsqcBXlt+o1f2DiLBZGLQkv6dLLNWDk=
Subject key identifier:   1C:73:B3:51:24:E7:76:3E:81:FC:E9:38:9E:48:D8:3A:1B:8F:36:12
Authority key identifier: 8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
Certificate issuer:       /CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Certificate serial:       0196556E791877FE2774EAECAB6EFA0B5241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
Manifest number:          0925
Signing time:             Sun 20 Apr 2025 23:00:25 +0000
Manifest this update:     Sun 20 Apr 2025 23:00:25 +0000
Manifest next update:     Mon 21 Apr 2025 23:00:25 +0000
Files and hashes:         1: i90HS96_RRVKJr6_3OVTgpFTSwo.crl (hash: JsDC84Xhdaj5svHJUXWGAfSAKUYOoCZOOOohDPPsRZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:6e:79:18:77:fe:27:74:ea:ec:ab:6e:fa:0b:52:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdd074bdebf45154a26bebfdce5538291534b0a
        Validity
            Not Before: Apr 20 23:00:25 2025 GMT
            Not After : Apr 21 23:00:25 2025 GMT
        Subject: CN=1c73b35124e7763e81fce9389e48d83a1b8f3612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:79:bc:d4:68:26:19:59:88:73:dd:63:54:71:
                    76:60:a3:96:3f:bf:77:d6:d4:d3:47:3b:98:26:e7:
                    cd:72:5f:32:0c:96:7c:8e:05:6f:84:a3:aa:52:b3:
                    d2:17:1d:73:e3:d6:6e:73:15:bf:be:65:cc:c9:cf:
                    a4:f2:46:f2:4a:b4:30:7c:34:e4:61:0e:02:34:d1:
                    73:12:ad:bd:3b:21:7a:8a:ee:70:4c:44:62:0d:bc:
                    d6:0e:7d:65:05:e3:57:b0:59:61:e0:c7:dc:c4:5b:
                    9c:04:fa:df:da:4d:40:2e:7b:a0:72:a3:a3:dc:9c:
                    ff:8c:b2:cf:b3:35:c6:a9:9e:7f:b3:34:1d:5c:6f:
                    d5:23:40:89:71:fb:1f:33:18:57:4e:f6:84:28:13:
                    07:06:8e:b6:6d:f5:0f:01:e3:9b:be:03:bc:d9:d0:
                    1e:ec:cf:1b:db:17:e2:fa:99:e3:38:d5:71:56:8a:
                    6b:04:cb:c7:70:c0:d5:23:73:a4:8a:ed:e6:9e:4b:
                    ed:6e:fe:d4:9a:51:7e:df:70:d4:74:9b:ae:fb:a4:
                    ef:35:93:13:4d:54:d7:6c:28:e8:26:0b:4d:c2:3b:
                    2b:f4:f7:74:72:e3:1c:0a:aa:01:a0:f1:e2:44:9d:
                    5f:94:85:ef:54:e3:3a:13:0d:df:8f:31:06:4b:13:
                    84:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:73:B3:51:24:E7:76:3E:81:FC:E9:38:9E:48:D8:3A:1B:8F:36:12
            X509v3 Authority Key Identifier:
                keyid:8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:66:11:95:81:41:9d:97:36:0b:eb:c3:f2:06:e5:57:c4:12:
         6d:f7:60:88:4c:d5:ff:40:22:fa:7b:06:72:8f:d0:77:3a:d4:
         6e:2c:99:30:78:bb:c1:e3:4b:8c:8c:06:11:fd:8f:51:88:52:
         09:24:7a:1a:e9:55:da:88:7f:e2:34:a8:28:5d:eb:d6:e8:2a:
         c7:07:5f:a7:fb:41:c5:25:3c:a5:d4:7a:aa:6f:0f:6a:90:ff:
         48:c3:18:b5:4b:24:83:c9:5f:e7:42:17:69:bc:6d:ce:66:58:
         c3:73:b4:9e:1c:a5:db:78:46:80:02:13:4c:cb:a3:27:f7:ed:
         47:f5:ee:3d:14:1f:b9:72:81:dd:b2:d2:47:22:fe:ab:99:4a:
         4c:bf:46:80:0d:11:a7:ce:2c:dd:04:0b:c9:02:20:f8:fe:53:
         da:87:16:15:67:57:c3:15:cb:7e:86:3e:00:ad:13:05:59:82:
         4b:88:aa:c6:c9:be:5b:db:2a:fa:76:2f:5e:9c:e2:04:59:44:
         92:b6:a5:ca:ce:c3:d3:7a:32:9a:29:71:d3:17:25:8a:e1:f4:
         fa:c3:3d:37:39:4d:5a:3a:05:c0:c2:90:ea:e5:8c:db:ba:bc:
         c9:1c:8a:c8:b6:91:87:d3:19:2f:12:7f:fa:2f:d9:b0:a2:f3:
         fd:ec:60:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:36:01 2025 by rpki-client