Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
File:                     mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json)
Hash identifier:          GqTNYfeIp5T9WNjh2rl6m0xPCX1Wfxv93P60fIjuu0c=
Subject key identifier:   09:44:7F:3F:5D:22:D0:99:AD:96:60:52:92:05:5D:BA:AE:A1:F1:FD
Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
Certificate issuer:       /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Certificate serial:       0196531209600D0E168F293288C875DD23A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
Manifest number:          14FB
Signing time:             Sun 20 Apr 2025 12:00:12 +0000
Manifest this update:     Sun 20 Apr 2025 12:00:12 +0000
Manifest next update:     Mon 21 Apr 2025 12:00:12 +0000
Files and hashes:         1: CfUrafygYGSePjcIej3rxMGbJDI.roa (hash: X6AZHbughYjpJFwaVsupdcP3UOvik8OA/b5qiG++R3Q=)
                          2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: wJ/qdiveCXmID0oPkX0biiNkCxcZRoS/aFjxJQS9XFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:12:09:60:0d:0e:16:8f:29:32:88:c8:75:dd:23:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
        Validity
            Not Before: Apr 20 12:00:12 2025 GMT
            Not After : Apr 21 12:00:12 2025 GMT
        Subject: CN=09447f3f5d22d099ad96605292055dbaaea1f1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:00:7f:76:68:3a:c1:6f:01:f9:15:2f:c5:dd:
                    9d:de:6f:99:55:84:78:bc:47:79:d4:b5:94:b7:95:
                    1c:e6:76:d5:b7:46:4f:84:33:b3:2b:4c:2d:20:66:
                    18:18:c5:47:b6:91:1f:41:27:44:04:3d:4b:3a:be:
                    12:4f:74:a3:66:77:fe:7a:69:87:fc:1b:21:dc:0f:
                    44:ef:83:ea:8d:82:12:2b:2b:96:e5:7c:2b:c9:73:
                    df:7b:c7:46:e6:34:b3:91:7d:b1:02:c0:ea:dd:0e:
                    4f:e8:f6:12:ad:73:69:4a:53:ed:d0:3f:f4:1b:e5:
                    96:00:c5:72:ad:ba:13:e5:db:a9:16:f8:c7:41:51:
                    16:57:ae:e3:7f:3f:eb:2a:79:c6:e1:8c:fd:0b:b5:
                    ee:af:6a:b0:36:8d:eb:bb:48:7f:8d:e2:d4:b4:bb:
                    bd:a6:53:4b:8a:55:fc:27:d3:43:b2:83:e1:70:c0:
                    73:d0:4e:55:fd:7e:6c:d2:bc:c3:cc:2e:50:8d:b4:
                    a9:fe:a6:82:32:bc:fb:42:48:ce:eb:7c:bc:c8:ce:
                    c5:38:14:b9:38:4e:75:ff:e9:01:82:e1:f9:f3:84:
                    f2:34:93:df:82:27:a5:cc:5d:83:d8:73:80:86:f3:
                    c4:cd:98:77:6f:7f:2d:78:e1:0a:35:93:22:39:a1:
                    2c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:44:7F:3F:5D:22:D0:99:AD:96:60:52:92:05:5D:BA:AE:A1:F1:FD
            X509v3 Authority Key Identifier:
                keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:0b:50:1a:1b:a1:45:91:74:72:12:2c:fe:d0:72:e5:04:f2:
         c0:c6:cd:4c:f1:2b:e7:c6:82:c8:35:09:fa:ff:1e:8f:72:3b:
         8a:f2:3e:f6:25:98:8a:06:2e:b6:28:fc:a0:45:87:a8:ec:34:
         e9:fe:3b:8a:bb:8f:49:12:18:36:0d:1a:e7:33:19:00:e0:38:
         35:a9:2d:49:d8:4f:c2:9f:24:e9:dd:bf:bb:1d:dc:99:bd:2e:
         eb:39:8e:61:a9:40:d7:54:b0:ba:ed:1a:15:62:ba:83:4a:47:
         f8:a4:95:2f:e8:0e:5d:ac:9f:a3:3f:3c:a8:2f:f4:99:1c:2b:
         33:a2:0a:ed:0f:57:55:f2:00:60:68:57:6d:10:ff:c7:ab:9f:
         92:50:3c:2a:3a:d7:c1:80:36:6b:f8:86:c3:18:42:56:d6:a2:
         ff:d4:e2:40:3a:f6:0b:04:42:15:0c:a8:bc:62:41:9d:ff:50:
         52:3e:3e:97:68:18:aa:75:30:b5:e1:ed:88:41:dd:23:0f:e2:
         73:5f:04:3a:b8:77:0f:b6:e6:0a:d0:93:27:32:95:4b:23:17:
         7b:02:13:cb:52:d4:58:b4:f6:81:0d:aa:5b:14:39:bc:ae:c3:
         3c:f2:9b:b7:56:75:70:3b:9b:47:99:0e:17:8b:2b:ab:fe:97:
         45:d5:71:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:54:39 2025 by rpki-client