Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
File:                     Xw3wyOXRsjU4vrXszDqxKGXffqo.mft (raw, json)
Hash identifier:          u5eDGEBinbppf/tg7dxo3r/iYJnaLOq2NVOFsScAyAw=
Subject key identifier:   97:F7:CD:AF:7F:21:8E:A9:F0:55:CC:89:CA:D6:83:5F:5C:12:15:D9
Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
Certificate issuer:       /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Certificate serial:       01958BBB6F93ABD23A57A81B1546D465E8F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
Manifest number:          065A
Signing time:             Wed 12 Mar 2025 19:01:11 +0000
Manifest this update:     Wed 12 Mar 2025 19:01:11 +0000
Manifest next update:     Thu 13 Mar 2025 19:01:11 +0000
Files and hashes:         1: Xw3wyOXRsjU4vrXszDqxKGXffqo.crl (hash: 7I8pOTnt4zVeTqGAWc2n4x3luWHqzJbTph1w9+HrAKc=)
                          2: piG2uRHwpvwfiTxMHd8MLSGk4wE.roa (hash: ExOMOibeDEHpiyFKG9S0IQNKWRN+afMFp3jL5xO3Y8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:bb:6f:93:ab:d2:3a:57:a8:1b:15:46:d4:65:e8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
        Validity
            Not Before: Mar 12 19:01:11 2025 GMT
            Not After : Mar 13 19:01:11 2025 GMT
        Subject: CN=97f7cdaf7f218ea9f055cc89cad6835f5c1215d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:26:21:94:79:fe:a5:4c:57:03:52:55:03:16:
                    b0:2e:b5:3d:9b:3b:3b:31:57:f7:49:62:32:f2:83:
                    ea:f0:2a:d9:30:d1:2f:9f:55:24:de:81:dc:f5:6e:
                    59:43:cf:60:cb:f3:9e:eb:e1:62:a5:ca:2b:fa:69:
                    77:79:b4:ca:01:1c:02:d5:d6:bd:cd:40:c7:d7:61:
                    e8:c2:20:62:2d:bc:02:c6:08:50:ad:05:7b:3c:41:
                    f5:a0:a0:90:08:54:1e:bc:3d:65:35:da:62:3f:92:
                    7d:17:95:d4:53:5d:25:4c:78:c3:1d:0e:08:b2:de:
                    af:eb:7a:8d:b8:af:ae:95:86:2b:5b:91:0e:23:5e:
                    cd:0b:89:f1:a2:0c:bb:79:1e:a2:e9:b0:03:70:9c:
                    65:23:1c:ad:46:4c:e1:5b:54:da:4b:41:a3:b4:50:
                    cc:ea:38:10:33:a3:d7:28:2b:29:be:30:5f:ff:72:
                    ff:9f:c4:e9:69:81:6d:d1:6b:7f:73:85:01:4e:6c:
                    e3:45:55:1c:bc:76:21:21:ae:37:c7:d5:80:00:69:
                    93:74:84:d6:e6:5e:28:e3:8f:c9:c4:35:6a:08:d8:
                    a4:4f:39:ed:84:a1:bf:00:ea:27:75:61:a6:3f:71:
                    98:61:80:b0:ad:02:ed:dd:5f:6d:c0:73:c9:e9:31:
                    e4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F7:CD:AF:7F:21:8E:A9:F0:55:CC:89:CA:D6:83:5F:5C:12:15:D9
            X509v3 Authority Key Identifier:
                keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:37:f0:43:6f:4e:6b:13:5a:4f:05:49:f5:e4:da:74:fc:7d:
         fb:32:c6:aa:ca:1c:05:b2:a4:f7:1a:70:ff:64:8a:7d:6d:0f:
         cc:93:dc:3d:8e:4d:f8:4a:50:e6:a8:3d:ff:52:0e:37:18:09:
         e7:6d:05:cf:c6:cd:cc:64:b0:53:67:22:76:47:42:c5:f5:77:
         e1:8f:93:be:84:2b:a8:fa:6b:27:21:65:85:d1:91:14:04:39:
         a8:0d:49:7e:03:cd:60:a0:a0:25:77:22:ce:e1:20:e4:4a:61:
         d4:3c:01:a5:26:5e:bf:49:73:74:71:b5:3f:17:1e:4f:1f:ec:
         f3:d4:a5:e6:7b:87:d6:db:73:3b:fb:41:59:83:51:1e:39:4e:
         cd:22:e1:f1:a3:53:ca:89:49:06:a5:66:cb:27:da:2e:40:83:
         59:50:b3:e1:4d:0d:65:c2:85:1d:fa:4c:88:d4:74:48:4a:8f:
         66:97:bf:39:f0:36:31:3f:ff:01:31:15:7b:38:0c:67:3e:f8:
         ed:79:69:13:c6:91:6e:5f:fb:ec:56:c8:47:94:6b:c8:50:aa:
         01:38:14:98:40:01:3b:86:01:6c:f6:14:e8:d5:b9:a1:ba:f7:
         4f:f4:8a:b6:b2:a4:3b:cd:48:0d:3c:78:17:84:87:c0:63:ca:
         f6:8f:78:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:02 2025 by rpki-client