Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
File:                     IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft (raw, json)
Hash identifier:          KAkNSNSBkG7/7KblLArPIB+MIsovpg2dEcqMvGKorBg=
Subject key identifier:   16:68:B7:58:F9:4A:48:B6:50:0C:A4:06:B4:18:A3:17:08:DE:3D:90
Authority key identifier: 22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
Certificate issuer:       /CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Certificate serial:       01964D47582F9F3E3A8BEBF3723D76D0B225
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
Manifest number:          0B76
Signing time:             Sat 19 Apr 2025 09:00:43 +0000
Manifest this update:     Sat 19 Apr 2025 09:00:43 +0000
Manifest next update:     Sun 20 Apr 2025 09:00:43 +0000
Files and hashes:         1: IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl (hash: a6hdnydN1+R9qvjD3MlAw7Jbi9CMdEp47dyQOKRfT6I=)
                          2: gJhF5evxe8g-iDe3hBXACq-nKPk.roa (hash: qM5+n5uw27ndltKhnl7N0lO0fW10CmbET7TyhvcxHok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 09:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:47:58:2f:9f:3e:3a:8b:eb:f3:72:3d:76:d0:b2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
        Validity
            Not Before: Apr 19 09:00:43 2025 GMT
            Not After : Apr 20 09:00:43 2025 GMT
        Subject: CN=1668b758f94a48b6500ca406b418a31708de3d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:3f:51:93:7e:30:61:22:9e:e1:ca:ee:41:
                    38:8b:66:46:24:e9:40:06:41:49:fb:90:35:63:f1:
                    e3:95:9f:2a:c1:57:07:38:f6:ad:1f:d2:b2:ca:17:
                    17:d2:ff:48:ae:ee:36:37:b9:59:a0:1b:04:15:a7:
                    40:73:45:9b:82:84:09:e9:84:0f:b7:92:62:b0:6c:
                    40:b0:9b:1d:fc:d6:fa:66:f6:bd:3d:9b:02:5f:cb:
                    e1:ec:3b:1b:68:ac:d8:a4:4e:1f:f5:5d:80:67:05:
                    bc:d4:ce:93:21:fb:b5:e5:7f:d2:7f:e7:b9:ba:99:
                    cf:3e:0e:9a:11:90:a4:c5:cb:b6:98:80:a2:ed:33:
                    a1:98:0f:d0:16:ee:df:fc:6f:78:2b:72:fc:ab:14:
                    37:97:b5:b4:b9:7e:2b:6b:24:90:10:e0:62:b7:0f:
                    71:ce:59:57:b5:fc:21:e5:16:40:c6:6e:19:d6:2f:
                    9c:96:e1:c1:35:ba:19:a2:d8:d7:1c:1d:70:50:2d:
                    e8:ce:ed:96:46:e8:e9:57:e6:d9:2f:ae:7e:b3:fd:
                    4b:ef:43:60:fd:03:79:a2:4b:dd:5c:ef:00:3f:8d:
                    29:5b:3f:02:f2:7d:59:2c:93:ff:42:c9:76:06:28:
                    54:e5:fb:d9:ee:77:0c:48:76:5c:21:64:48:f1:4e:
                    6b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:68:B7:58:F9:4A:48:B6:50:0C:A4:06:B4:18:A3:17:08:DE:3D:90
            X509v3 Authority Key Identifier:
                keyid:22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:46:5f:64:fd:68:aa:9a:f3:2b:08:3a:54:eb:8f:39:bc:58:
         bd:0d:70:01:41:ef:89:17:81:0d:8b:22:0a:c9:d7:03:4f:76:
         52:c9:fe:86:21:59:a4:de:69:1e:97:c4:85:df:7e:e1:60:60:
         c9:1d:9a:0f:f3:87:51:5e:44:9a:56:49:2c:6c:8e:3f:45:e7:
         a6:63:ec:81:9b:a9:83:36:df:f9:7d:7f:12:16:70:d0:bf:14:
         62:a9:34:c2:b7:61:7f:72:5e:9f:55:0e:e2:f7:67:17:e2:ca:
         d0:ab:9c:62:a1:46:db:74:e8:58:f5:7c:3e:3f:46:b6:54:81:
         86:63:ca:ff:4e:1c:d1:c7:d6:ee:ed:b0:23:f0:76:21:02:10:
         e2:a7:41:8d:1f:b2:a6:d3:56:b6:0d:15:e3:74:40:b4:63:08:
         f1:31:ce:01:73:e2:22:6e:eb:5a:1f:86:da:92:6f:37:22:8a:
         0b:73:4f:f8:20:4e:d7:d9:b8:7d:54:7f:81:29:c0:59:30:2e:
         8a:07:f0:94:05:68:0f:de:02:30:f5:4a:7f:ff:0b:07:38:4f:
         67:bf:71:29:56:13:f5:fd:14:f0:8c:44:40:8d:89:dd:0b:92:
         33:19:6c:7c:e8:fa:6f:95:bb:ba:b4:fc:68:e6:c5:61:dc:40:
         bc:24:9e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:04:06 2025 by rpki-client