Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
File:                     p6YlNTs6w-H5XJYlGRWNsSINCo4.mft (raw, json)
Hash identifier:          DUmPJ00rIX/GXrQ+DKVgaIDhnK/C1v7BIrRm+ZWR22w=
Subject key identifier:   C3:20:9D:3C:72:6D:F6:92:F3:EE:1E:FF:B5:32:71:45:F7:B9:3C:22
Authority key identifier: A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
Certificate issuer:       /CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Certificate serial:       01965538628F7178AA1398BE63ADA4E7B9EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
Manifest number:          0965
Signing time:             Sun 20 Apr 2025 22:01:20 +0000
Manifest this update:     Sun 20 Apr 2025 22:01:20 +0000
Manifest next update:     Mon 21 Apr 2025 22:01:20 +0000
Files and hashes:         1: p6YlNTs6w-H5XJYlGRWNsSINCo4.crl (hash: 75GrtuTyZ9IqRx7Z+ZKUyd3BVcifNZZnWcsY2jmzCCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 22:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:38:62:8f:71:78:aa:13:98:be:63:ad:a4:e7:b9:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
        Validity
            Not Before: Apr 20 22:01:20 2025 GMT
            Not After : Apr 21 22:01:20 2025 GMT
        Subject: CN=c3209d3c726df692f3ee1effb5327145f7b93c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:ef:6a:42:22:b2:73:34:a4:3e:6e:40:bf:
                    8c:e2:ae:2f:f2:c8:2e:53:47:7e:17:63:03:c3:20:
                    97:00:15:88:95:72:f9:d5:e9:14:1e:85:fd:10:dc:
                    94:b3:63:49:52:d2:eb:c1:4c:d5:c6:5f:0a:9b:61:
                    be:60:6b:74:8d:90:91:96:67:20:ea:a5:d0:0f:7b:
                    18:b4:57:1c:cb:4a:66:01:3f:b2:51:52:fe:c2:30:
                    7c:d0:c6:07:1e:74:d5:03:c3:02:eb:4d:97:e3:af:
                    53:b6:0a:a0:25:81:fa:2a:26:64:59:8a:89:de:7d:
                    1e:f2:f7:ce:33:46:97:47:c9:8b:33:62:b0:cd:89:
                    03:f6:11:8c:19:a3:29:11:d7:69:9f:bc:7a:5d:91:
                    c5:a0:bb:44:4d:9d:50:6b:b0:86:84:e1:c4:16:02:
                    8c:ed:1f:25:3a:60:5e:57:78:9e:a9:78:78:c4:f4:
                    66:af:4a:e0:64:c1:4b:55:f3:15:bf:a8:ca:df:ef:
                    17:c3:18:84:f9:a9:c1:04:a9:e7:22:42:0f:1d:43:
                    c7:72:ba:13:a0:a1:b3:48:af:c2:30:0d:17:ad:d4:
                    ef:f8:62:e1:1c:74:29:b4:72:a5:4b:97:5c:58:a8:
                    a0:cc:6c:ed:b6:43:17:22:01:66:94:33:e3:46:a3:
                    c8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:20:9D:3C:72:6D:F6:92:F3:EE:1E:FF:B5:32:71:45:F7:B9:3C:22
            X509v3 Authority Key Identifier:
                keyid:A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:18:ea:9e:fd:de:90:5b:63:9a:bf:6a:64:de:b8:2a:08:2d:
         f1:77:c6:f2:27:94:46:85:3e:73:22:9d:f5:0c:35:c8:7f:e6:
         77:06:a8:4a:c5:87:07:ad:8b:ac:01:d8:e7:5f:74:1c:65:dc:
         8b:ec:58:d9:65:58:5e:b9:1e:04:4c:b2:94:bd:67:5e:cd:77:
         1b:6b:ed:16:1e:f9:c3:f7:25:84:15:6c:7b:a7:f3:97:ac:15:
         c7:d0:8b:48:da:03:df:61:8c:41:d8:3c:3e:43:f0:5c:a7:2d:
         4b:f7:70:86:9c:ec:ff:1e:31:78:c1:8f:fd:53:54:09:dd:b9:
         d6:37:ac:c7:50:7f:da:45:26:5c:2f:cf:69:f3:1b:45:fc:f0:
         9f:e3:ae:07:45:96:ff:d2:f0:81:b4:97:ec:30:28:a0:81:0d:
         9b:4a:dd:bf:70:02:2e:a2:73:4e:11:cf:83:bd:83:84:32:08:
         bf:b3:30:23:98:e4:97:20:89:40:7f:d6:6b:2d:d8:c2:80:ea:
         8e:d7:c1:bd:72:c4:43:ef:6b:a4:19:1c:4b:73:17:1e:61:39:
         55:da:1d:0e:b0:06:f4:04:9d:5e:e7:cb:be:ec:f4:54:0e:8f:
         6a:cf:e4:4a:3d:72:d4:e3:a2:55:94:00:d1:95:14:1d:1e:de:
         38:f7:53:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----