Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
File:                     Eioro8wYyZhQEwns3gQnBq9bhFo.mft (raw, json)
Hash identifier:          XzNNgxTCLIFU0rhY4ZFIv5gkX8siRqh+MB0AGlc8ItM=
Subject key identifier:   BD:B1:A8:DF:D1:97:96:4E:77:11:AD:3B:DB:3F:22:24:FC:25:11:C6
Authority key identifier: 12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
Certificate issuer:       /CN=122a2ba3cc18c998501309ecde042706af5b845a
Certificate serial:       01964669DA8E58793E24D4F89EFFEF9408BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
Manifest number:          14F7
Signing time:             Fri 18 Apr 2025 01:01:04 +0000
Manifest this update:     Fri 18 Apr 2025 01:01:04 +0000
Manifest next update:     Sat 19 Apr 2025 01:01:04 +0000
Files and hashes:         1: Eioro8wYyZhQEwns3gQnBq9bhFo.crl (hash: Jg2L38+ey+FwpGovHqVYfE0SYYkXEWp1OBcHsxTX4S4=)
                          2: dFWtNsDJ-mUPtxThTA2MYEV4hMw.roa (hash: ixgpNKTZ9Dv34+AbK1Jrz2N3i33IFdJsOuKPNGIdi1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:46:69:da:8e:58:79:3e:24:d4:f8:9e:ff:ef:94:08:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a2ba3cc18c998501309ecde042706af5b845a
        Validity
            Not Before: Apr 18 01:01:04 2025 GMT
            Not After : Apr 19 01:01:04 2025 GMT
        Subject: CN=bdb1a8dfd197964e7711ad3bdb3f2224fc2511c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:d6:c6:15:e5:03:36:37:d2:49:9c:1c:96:
                    67:b5:c7:84:8d:8c:a4:ed:63:0d:f9:b9:8f:92:ad:
                    4c:51:e0:ff:45:b2:45:56:ee:58:0e:23:cc:6a:fe:
                    8f:5b:2a:e9:f2:7a:67:92:e4:52:8b:e1:b3:30:20:
                    52:14:df:61:06:76:4d:19:a3:65:07:e7:96:63:48:
                    0d:00:47:91:d7:5d:bc:ba:c3:bc:f1:98:46:9c:dd:
                    38:6b:c9:0f:f5:8c:dd:7b:32:f8:67:69:02:18:b7:
                    76:0d:27:c3:83:09:c8:f9:e2:e1:2d:4d:eb:2d:ba:
                    86:63:b1:b4:6f:aa:27:ea:ce:5d:f4:d1:26:92:63:
                    8a:f6:18:5c:48:b5:f1:60:6a:2b:92:e4:4f:dd:3d:
                    c1:bd:ef:fa:b0:ff:1c:d5:aa:b6:9a:89:7d:a3:af:
                    5e:8d:f2:88:54:8c:f2:65:84:d5:95:1c:6e:cf:a3:
                    de:85:a8:47:f7:ad:b5:24:1d:b7:fa:b9:29:94:22:
                    f2:90:06:60:51:e3:22:d1:92:9c:22:03:2f:02:94:
                    e6:1d:d6:a6:36:b8:b9:9e:bf:e3:5c:a7:6d:dd:3e:
                    d8:20:c8:01:e0:53:0c:df:c8:35:9f:48:45:30:11:
                    e1:a8:5a:d0:a6:c4:98:fe:73:33:6f:52:c1:fc:96:
                    37:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B1:A8:DF:D1:97:96:4E:77:11:AD:3B:DB:3F:22:24:FC:25:11:C6
            X509v3 Authority Key Identifier:
                keyid:12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:67:1a:57:69:a4:b1:d2:ea:48:95:21:69:cc:64:65:2e:ee:
         27:d1:74:a1:aa:54:ce:4d:f4:f2:4b:51:d8:8a:cc:ae:f8:a9:
         39:07:46:6a:87:a9:76:92:49:e0:4c:a0:0f:18:a1:13:b3:99:
         e1:61:17:5a:8d:de:66:fc:a7:6d:32:c3:25:b8:57:f0:8f:b6:
         e2:27:42:44:74:bd:48:ee:07:01:cf:10:db:76:91:6e:f7:a0:
         56:0d:c7:1a:af:68:1e:33:21:a4:6f:6c:1c:88:22:98:0b:47:
         48:e7:46:24:eb:45:fb:c9:fd:b7:9e:ba:e8:d6:e3:70:4c:8d:
         cb:ac:47:04:5e:81:5a:6d:02:49:42:66:20:84:c2:63:3e:ab:
         41:0e:d2:e4:83:78:7d:77:25:ba:2a:d7:14:37:32:9a:ee:42:
         bd:a4:c5:0d:6e:e5:aa:d2:ee:91:f1:e9:d9:29:e3:a8:79:3b:
         01:f6:67:46:22:8e:4f:94:43:af:e8:91:fd:90:d3:bd:53:12:
         f7:84:f2:65:fe:ac:80:22:a9:79:67:7e:a9:e7:06:b8:02:20:
         53:9c:0b:7e:a6:7f:24:98:75:bf:10:f5:68:d6:ac:ae:7f:be:
         ca:57:52:7f:bd:f6:08:35:8f:94:da:ef:ec:e2:85:8d:00:c9:
         15:dd:be:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:44:26 2025 by rpki-client