Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
File:                     36acPZg4XUFUBfxv0wqAA2PAF8E.mft (raw, json)
Hash identifier:          TzX7C0lSdde6oFNSCzjElUrGkFiPJYPQklc20zJAehs=
Subject key identifier:   53:06:EB:67:7F:E2:83:81:F3:00:86:E7:14:82:EF:93:5B:BD:48:0C
Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
Certificate issuer:       /CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Certificate serial:       01963EE6A3CA4621CB7CE18F601531829A18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
Manifest number:          14F4
Signing time:             Wed 16 Apr 2025 14:00:24 +0000
Manifest this update:     Wed 16 Apr 2025 14:00:24 +0000
Manifest next update:     Thu 17 Apr 2025 14:00:24 +0000
Files and hashes:         1: 36acPZg4XUFUBfxv0wqAA2PAF8E.crl (hash: 7YwEdAtEyRJIg4K693i5JyYXR3vprwACHKGeqQ9CV5M=)
                          2: G4W66DIS-tOhTOL4rAP2DQwRdL0.roa (hash: T0yTA2cPiVodR8G3AqqlUGuyKJW1C3bce+LSKeiweEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:e6:a3:ca:46:21:cb:7c:e1:8f:60:15:31:82:9a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1
        Validity
            Not Before: Apr 16 14:00:24 2025 GMT
            Not After : Apr 17 14:00:24 2025 GMT
        Subject: CN=5306eb677fe28381f30086e71482ef935bbd480c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0e:ff:b5:53:f8:4a:48:b5:72:11:32:5c:ce:
                    68:b7:fa:72:a7:c3:0b:83:07:45:41:f5:52:b0:7a:
                    eb:c6:56:7d:4d:96:dd:cb:dd:bd:1d:46:71:7e:7c:
                    5a:0b:17:59:03:00:0e:61:8e:bd:da:c4:db:70:dc:
                    29:26:87:7b:06:d3:55:26:6c:59:00:86:91:a0:95:
                    79:17:47:a2:84:4b:87:93:88:03:91:e7:36:6b:f7:
                    f2:eb:5b:04:0d:da:00:cb:aa:75:d2:5c:34:be:d8:
                    58:a9:b5:2a:da:a6:ba:72:1c:37:b0:eb:77:19:4e:
                    ab:a1:1e:a5:82:47:fd:4c:cc:4b:59:29:72:85:7a:
                    10:8d:3a:08:1b:2f:30:ce:1a:f0:f1:3e:23:d5:a4:
                    1d:af:a4:5f:2f:ec:00:b4:05:c0:94:80:4e:8f:c5:
                    62:c3:94:7a:13:5b:3a:c7:4b:31:55:e1:aa:88:a4:
                    fe:18:29:47:4e:ed:92:cf:19:7e:b8:7e:ea:2e:ee:
                    76:e6:d4:86:08:e5:e9:43:e6:0f:2e:7e:6e:24:39:
                    0b:f8:ae:80:8f:37:1c:83:87:f9:47:20:61:92:fa:
                    d2:fe:08:be:28:cb:e3:f7:10:bb:96:1a:2c:1f:7a:
                    83:39:12:f6:0a:75:ba:17:f2:cd:22:7a:76:ef:c3:
                    cd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:06:EB:67:7F:E2:83:81:F3:00:86:E7:14:82:EF:93:5B:BD:48:0C
            X509v3 Authority Key Identifier:
                keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:04:1d:16:81:6a:be:e0:53:d0:7e:c1:e0:a0:06:5d:7a:82:
         08:75:7c:bb:32:a3:8f:a9:f2:11:5c:9c:c9:51:42:4c:ea:59:
         22:4a:88:5d:42:50:8c:86:05:67:80:8b:a7:58:94:77:7e:7d:
         42:b7:05:8c:53:31:90:4e:75:c5:d9:ba:a2:45:01:37:c6:15:
         8c:64:ef:f8:48:b9:e6:c2:1b:b8:e7:07:44:c7:9c:f9:1d:e5:
         81:af:6e:d1:63:f0:de:d7:ca:e7:d7:57:f8:f5:e1:45:9c:38:
         41:c9:5f:99:f8:ff:3d:3c:e3:17:94:e6:0a:89:b9:31:8e:b5:
         c4:a2:35:43:c1:78:2b:24:10:3d:d0:f9:8a:0c:5a:6c:79:4c:
         fb:38:4f:31:19:ae:2d:36:f8:4a:b0:ac:c2:60:d4:44:30:55:
         66:38:2f:65:43:be:18:66:0a:99:02:b7:6f:0e:48:12:0b:05:
         e0:c4:39:26:14:42:17:07:71:5f:67:de:9d:16:52:6b:8a:7e:
         6c:58:ba:60:85:cf:19:ac:70:42:10:0c:49:69:29:23:1e:a7:
         51:0c:d9:60:e6:d3:be:d6:2e:85:58:88:9a:de:18:0b:df:8d:
         06:f6:ac:ef:cd:9c:2d:cd:a3:ff:d6:be:0d:f1:2a:65:7e:af:
         b9:c2:b0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:17:10 2025 by rpki-client