Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft
File:                     rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft (raw, json)
Hash identifier:          mIhO0A9KhBmkjJULPJKCNvRwZDtRPWvBJuCztsWW5WU=
Subject key identifier:   77:27:9D:71:25:7D:8F:7A:48:9F:21:68:8B:1B:0E:CF:00:51:A3:26
Authority key identifier: AE:6B:BA:AD:BE:3E:78:7D:CE:EE:23:DB:23:A3:20:BA:1E:2F:BF:86
Certificate issuer:       /CN=ae6bbaadbe3e787dceee23db23a320ba1e2fbf86
Certificate serial:       0196458DAE6FF973FC4753CF98FEAE3136EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft
Manifest number:          03DA
Signing time:             Thu 17 Apr 2025 21:00:35 +0000
Manifest this update:     Thu 17 Apr 2025 21:00:35 +0000
Manifest next update:     Fri 18 Apr 2025 21:00:35 +0000
Files and hashes:         1: rmu6rb4-eH3O7iPbI6Mguh4vv4Y.crl (hash: NWW+30DPJ927Y3ajSB6+eOJtQIwJdsnvWb3XIRx6q1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:8d:ae:6f:f9:73:fc:47:53:cf:98:fe:ae:31:36:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6bbaadbe3e787dceee23db23a320ba1e2fbf86
        Validity
            Not Before: Apr 17 21:00:35 2025 GMT
            Not After : Apr 18 21:00:35 2025 GMT
        Subject: CN=77279d71257d8f7a489f21688b1b0ecf0051a326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ef:f3:9a:77:a9:6d:f3:cd:db:1d:1e:be:bc:
                    bc:b6:ae:17:3f:99:81:0d:8b:7c:31:da:5b:3f:90:
                    d7:f5:e8:d4:f6:b4:a0:92:46:db:a6:8e:30:bd:f0:
                    e5:01:e3:96:78:a7:83:71:ca:6d:4f:7b:61:92:06:
                    38:76:6f:8a:d8:55:d6:0a:14:52:9a:be:b0:6f:75:
                    59:70:ff:8c:1c:02:8c:e5:88:66:90:25:d2:55:6e:
                    ed:e8:2a:ce:95:24:5e:f0:d7:ef:b7:2b:62:75:b7:
                    3a:f1:95:04:a3:1c:88:8e:c4:ad:3a:91:56:76:45:
                    d3:fe:3e:95:b8:8a:27:43:17:cf:f8:74:c2:d5:4f:
                    13:a7:e7:d6:9e:7b:c8:05:f5:29:e9:cb:8f:c8:62:
                    3d:36:b9:55:26:84:20:82:31:81:29:64:26:fe:84:
                    a2:42:4e:6b:d6:f5:0f:75:18:b7:3d:95:07:c8:68:
                    4d:00:9c:bf:1d:d5:dd:fa:87:1b:85:32:2c:f9:35:
                    88:d4:b3:ba:1d:88:00:9f:19:1b:d8:78:0f:ab:4d:
                    ee:b3:0e:de:93:3a:65:8b:af:f4:a7:1f:97:5e:03:
                    89:69:27:8c:4c:a5:1a:90:b9:f8:3e:69:33:17:8a:
                    32:84:b3:46:9f:ef:43:17:b9:c8:54:6c:5c:c0:d7:
                    51:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:27:9D:71:25:7D:8F:7A:48:9F:21:68:8B:1B:0E:CF:00:51:A3:26
            X509v3 Authority Key Identifier:
                keyid:AE:6B:BA:AD:BE:3E:78:7D:CE:EE:23:DB:23:A3:20:BA:1E:2F:BF:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:18:6e:57:cb:47:f5:b0:f6:85:3f:84:88:2e:dd:04:03:f5:
         80:16:56:b2:74:81:a6:3c:fa:53:6a:2f:f3:85:9a:da:25:0f:
         fc:5c:f7:be:0e:40:77:50:27:bf:49:b8:92:e4:10:1e:f1:59:
         03:1d:29:a2:d1:c7:cf:07:79:36:40:60:a3:a9:a5:a2:28:22:
         90:c9:27:b8:83:33:b8:a4:71:f5:9e:55:df:20:2f:41:7f:92:
         1a:cc:7d:d4:cc:15:f1:6f:f9:2b:a7:72:ba:d4:e4:04:bd:2e:
         b1:96:2b:8f:d3:57:6e:01:25:28:8b:43:55:87:86:04:96:f3:
         ee:df:f0:47:5b:11:9e:53:f9:0c:4d:01:60:40:c3:a8:1f:32:
         63:90:5f:8c:0b:ab:c8:16:b2:d6:d0:47:b6:02:46:d4:32:96:
         90:6f:e7:ea:86:ce:78:ae:64:f0:7b:c5:6a:f9:21:3b:dd:86:
         6f:81:5d:d2:18:06:86:de:9c:93:27:f1:1e:04:f0:82:e0:05:
         25:fd:1d:76:b6:f6:87:bc:a5:a7:ef:1c:42:32:0f:ca:4a:d7:
         be:0f:68:45:fb:54:cc:ca:5d:74:0b:1d:14:08:83:ff:bb:22:
         4e:0f:b3:b1:d6:ec:d5:c6:bb:df:ba:00:56:03:eb:34:ac:26:
         2d:dd:ae:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:13:50 2025 by rpki-client