Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
File:                     bn8ivutSxuUaJCKxORQu6gP7XU0.mft (raw, json)
Hash identifier:          YNbrJZ1qy0Yb02DkokaeBE4619s3yRBvmxhGwDMMUIw=
Subject key identifier:   4B:C5:75:01:01:C1:75:48:80:A8:2C:33:24:19:1E:0C:BF:B9:38:B1
Authority key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
Certificate issuer:       /CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Certificate serial:       01964E23153D488E46255F5461855A3475B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
Manifest number:          14F9
Signing time:             Sat 19 Apr 2025 13:00:44 +0000
Manifest this update:     Sat 19 Apr 2025 13:00:44 +0000
Manifest next update:     Sun 20 Apr 2025 13:00:44 +0000
Files and hashes:         1: bn8ivutSxuUaJCKxORQu6gP7XU0.crl (hash: tQuwG0g4ZbFEXrrN5HCD95G/xbzc4onyWG4T2VF9Ky8=)
                          2: z4IVFfra9dO93PZl7xdhmVhqzoE.roa (hash: 90ivV2dV0BSclFTId5ah7Fo9mKfLvO9taEvtncU7b/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:23:15:3d:48:8e:46:25:5f:54:61:85:5a:34:75:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
        Validity
            Not Before: Apr 19 13:00:44 2025 GMT
            Not After : Apr 20 13:00:44 2025 GMT
        Subject: CN=4bc5750101c1754880a82c3324191e0cbfb938b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:51:9c:09:c0:c9:62:3e:a5:0b:7e:6c:d9:51:
                    9c:2f:55:b2:23:25:af:f1:11:e4:78:35:82:db:8d:
                    24:6f:12:cb:c1:e6:c4:8a:cf:27:63:f0:36:31:79:
                    d5:40:ff:45:02:ee:d0:f1:dd:1b:9a:0b:55:28:54:
                    ef:48:c6:d5:e5:68:bc:b2:85:70:e0:66:b1:73:6a:
                    d8:97:1e:e0:56:75:0e:d1:d1:4c:e5:4f:75:4f:9d:
                    e5:81:47:9b:ad:26:04:c8:39:ea:33:f2:f6:c8:cb:
                    53:aa:57:1b:6d:8c:7e:d6:d3:d7:d5:fb:41:9e:99:
                    6e:ad:94:d1:48:0f:a1:ad:ea:43:14:c9:10:37:20:
                    eb:e1:0d:a6:3c:28:b0:3e:d3:a1:71:6b:81:d5:96:
                    c2:fc:9c:db:dc:c0:94:9e:e5:28:0a:73:65:91:2e:
                    9e:91:68:da:84:05:18:3a:8a:bf:1d:ed:db:0f:39:
                    b8:f3:c8:b4:ff:8c:fa:3b:3c:1a:13:87:74:82:4b:
                    b0:72:ee:9b:68:1f:73:e6:45:5f:36:d2:c8:ea:3a:
                    ec:41:7f:9d:45:fd:39:15:fe:f2:ae:2c:42:18:df:
                    0c:05:13:af:cd:6a:36:e9:2a:0b:f7:4e:d2:d2:60:
                    ce:ff:1d:9f:0a:76:bc:f4:ef:b8:3c:35:1b:2a:99:
                    21:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C5:75:01:01:C1:75:48:80:A8:2C:33:24:19:1E:0C:BF:B9:38:B1
            X509v3 Authority Key Identifier:
                keyid:6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:3c:ec:b3:83:cb:e5:13:a4:27:bf:ad:6a:05:c4:e9:2b:c0:
         b1:fe:0f:9b:7a:de:56:63:40:9f:4b:01:ce:86:de:cc:bb:b8:
         57:6f:dc:9e:a4:6c:fe:a0:99:75:6e:a6:a4:83:ea:96:99:d1:
         70:99:7c:a0:0d:84:52:c0:86:5f:e5:d9:1b:26:88:4f:fd:2a:
         c7:cc:e6:0b:79:0b:92:51:48:f9:5e:56:86:4d:0b:5c:75:fd:
         b3:16:0a:62:39:8f:40:ca:22:53:f5:f3:72:bd:8c:76:50:2a:
         88:19:d7:ba:63:81:63:a6:85:ce:16:a0:37:1e:bf:8c:d5:d2:
         f8:f2:dd:6e:74:53:87:fa:41:07:cf:8f:f3:03:12:ed:11:d9:
         c2:31:83:af:42:77:1e:25:5a:d1:e9:e8:ac:ef:d4:2b:50:c3:
         07:8b:56:f8:d7:7b:f6:8f:16:58:ca:dd:25:02:82:ab:81:79:
         ef:96:ef:e6:98:1c:ff:4a:09:51:d6:ed:e8:cf:22:08:d2:4b:
         b3:18:26:46:91:bf:ad:24:d9:9d:47:79:9a:86:64:4a:a7:e8:
         18:93:58:67:bf:34:91:9a:8a:37:41:40:ac:26:2e:41:dc:73:
         4e:70:61:30:51:d8:55:a2:09:3d:00:a0:e1:89:33:9f:62:e0:
         1c:45:f6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:35:09 2025 by rpki-client