Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
File:                     aweCDo1ADzwl3dC-G0bFTpVZYKE.mft (raw, json)
Hash identifier:          JbFTrRxqbnusRMXvSdEVgUYaHjAdNN0wsNOyU6fc8Wo=
Subject key identifier:   69:37:0A:D4:EB:30:B4:44:60:2B:52:13:B5:8F:E8:98:76:3E:2D:41
Authority key identifier: 6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1
Certificate issuer:       /CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
Certificate serial:       0196A541A3BF2073E825742B56CE12B3B71D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
Manifest number:          0C41
Signing time:             Tue 06 May 2025 11:01:04 +0000
Manifest this update:     Tue 06 May 2025 11:01:04 +0000
Manifest next update:     Wed 07 May 2025 11:01:04 +0000
Files and hashes:         1: aweCDo1ADzwl3dC-G0bFTpVZYKE.crl (hash: +6xVc6Ye99WiH4C2aLkA1/81gaXc1Us0k7Y/zfnPnuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:41:a3:bf:20:73:e8:25:74:2b:56:ce:12:b3:b7:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
        Validity
            Not Before: May  6 11:01:04 2025 GMT
            Not After : May  7 11:01:04 2025 GMT
        Subject: CN=69370ad4eb30b444602b5213b58fe898763e2d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e5:fb:fe:e7:79:c8:8e:6a:6d:fa:aa:5a:60:
                    e4:ae:d7:fe:70:ec:a5:d0:f3:63:5a:66:fa:be:25:
                    fc:32:f9:c1:44:c8:c8:88:c2:11:68:56:33:f1:7b:
                    07:ef:17:73:ae:cc:d3:23:19:ef:cb:4d:ac:71:97:
                    c3:5f:8e:ce:b5:29:cf:c9:4f:bb:f5:19:8c:40:e7:
                    b6:45:74:6c:54:65:58:1b:e7:f5:ca:c9:6c:be:b0:
                    7c:59:96:4c:88:d7:93:dd:63:09:3c:5a:7d:a5:70:
                    a1:6b:e9:2b:97:fd:a5:bf:1d:43:d0:23:df:48:0f:
                    36:a2:27:07:4b:04:d9:a9:48:a3:e3:84:bd:80:f2:
                    da:ba:b3:d1:3c:26:c9:24:7e:65:53:9c:3f:47:9d:
                    1e:91:5c:32:be:df:4e:89:c2:a9:a6:e2:34:50:72:
                    aa:d1:05:60:d6:ae:60:c5:c4:e3:78:de:ff:90:87:
                    0d:09:98:a9:ea:81:ea:72:4e:89:09:98:5b:0d:ef:
                    51:e3:26:d3:bb:17:d9:b5:df:b0:ad:00:6e:39:bd:
                    12:21:4c:18:14:1b:77:04:9a:66:0d:55:df:a4:55:
                    fa:b5:04:c0:5b:19:a5:73:ae:9e:95:ef:df:df:0e:
                    2b:b7:2c:8a:54:f8:00:41:cb:98:07:ee:81:9c:5a:
                    85:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:37:0A:D4:EB:30:B4:44:60:2B:52:13:B5:8F:E8:98:76:3E:2D:41
            X509v3 Authority Key Identifier:
                keyid:6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:f8:73:51:d3:82:95:6e:1f:4e:a1:5f:d5:5f:49:d6:d7:b4:
         df:60:3c:49:1c:2a:16:05:4a:bc:77:fb:fc:a2:6b:ad:06:3a:
         28:41:5c:2b:67:2f:a8:d8:a1:4f:6a:5b:bc:c4:11:96:ef:2c:
         fc:62:e9:84:16:0c:56:d8:8b:33:4d:4f:80:a0:28:be:19:32:
         b5:8e:a3:01:6d:95:7f:80:86:77:65:a0:fa:b8:de:be:4c:cc:
         9e:c9:3e:0e:7a:21:bc:a2:55:12:d5:58:e1:8e:af:aa:2f:66:
         af:0a:90:aa:6f:19:11:5d:1b:c5:ab:3a:06:2c:d2:b2:d9:42:
         0d:a0:34:5a:67:82:c2:83:34:f2:58:a4:98:79:7d:76:19:94:
         ee:cc:ef:e4:d6:8a:17:a1:f7:7d:49:a7:09:12:f2:4a:b2:38:
         fd:0f:f7:8b:04:e2:15:bd:1f:57:19:a3:3a:f2:5a:86:00:35:
         36:21:7e:c8:8f:bf:e6:5e:1b:a0:89:9c:ee:cc:2d:e4:2f:92:
         39:24:55:1c:b5:de:bf:bf:d3:13:d4:ec:00:14:31:99:21:b5:
         64:56:4b:98:07:15:d7:33:1e:84:67:bf:60:21:a4:ba:0a:48:
         41:0f:ef:e2:32:b3:c2:c0:e6:e7:ed:45:b2:ea:12:a7:5e:d7:
         94:49:e6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:22:02 2025 by rpki-client