Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
File:                     6ocBJxa2bugiZCwvChuQFItceyk.mft (raw, json)
Hash identifier:          yLEJo/JSJJ7z7n8ekIT/z7n6H1/VnW48NJcclsCG5YY=
Subject key identifier:   3A:DE:19:09:D4:99:12:AA:E1:9B:6F:2F:41:9C:F2:3B:99:3E:1A:C0
Authority key identifier: EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
Certificate issuer:       /CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Certificate serial:       0196A08958BA1CF91B024D4A8CD396DAE4F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
Manifest number:          0C74
Signing time:             Mon 05 May 2025 13:01:17 +0000
Manifest this update:     Mon 05 May 2025 13:01:17 +0000
Manifest next update:     Tue 06 May 2025 13:01:17 +0000
Files and hashes:         1: 6ocBJxa2bugiZCwvChuQFItceyk.crl (hash: iRiT0RS8g7e1SAM4l34fd5jZzqwdphrGi20JauTJneI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:89:58:ba:1c:f9:1b:02:4d:4a:8c:d3:96:da:e4:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
        Validity
            Not Before: May  5 13:01:17 2025 GMT
            Not After : May  6 13:01:17 2025 GMT
        Subject: CN=3ade1909d49912aae19b6f2f419cf23b993e1ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9c:d1:df:75:e6:5f:fa:da:3b:87:60:6c:e8:
                    3e:09:f1:d9:90:50:61:e5:14:0a:a5:49:f0:2a:43:
                    66:2b:26:d1:73:1e:9d:3a:96:e3:f8:6d:31:31:84:
                    18:d9:a1:11:bd:2a:73:38:9e:03:3d:10:0b:d6:7e:
                    fa:22:7b:d3:2c:81:9a:9f:d6:e6:e3:70:05:40:d4:
                    81:58:70:93:95:9d:dd:1d:95:2f:f2:a2:67:57:e8:
                    6c:71:a5:d0:3b:51:36:15:3f:cf:0d:b7:b5:4a:e4:
                    b7:41:a6:a7:97:4b:02:d5:98:59:c9:4e:c2:78:0c:
                    da:88:7b:d3:82:3c:ed:54:d9:8b:87:26:b6:f6:a6:
                    b0:f0:1b:15:f7:58:15:a6:dc:ca:0e:95:2a:bf:3b:
                    43:94:77:b9:37:de:a0:c9:0c:1d:86:42:42:b1:9c:
                    a4:2e:c2:45:4d:19:09:88:c0:69:04:9b:74:59:e4:
                    d3:67:df:0f:d3:46:4e:a6:80:6b:61:c3:db:0c:b5:
                    4e:57:6f:01:ae:95:b7:71:96:0a:e4:5f:6c:fa:23:
                    1a:e5:41:87:c9:9a:5e:3f:28:52:71:16:d4:67:4d:
                    6a:a7:c4:bb:b7:13:d2:21:97:4b:6b:31:d1:69:7d:
                    28:21:22:d9:ec:bd:e0:51:48:7b:b9:db:e4:11:63:
                    d7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DE:19:09:D4:99:12:AA:E1:9B:6F:2F:41:9C:F2:3B:99:3E:1A:C0
            X509v3 Authority Key Identifier:
                keyid:EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ba:cf:77:05:0d:a8:2d:30:08:ee:52:bd:9b:00:09:2f:bb:
         c3:ae:70:23:ab:2c:a8:dc:ce:8c:e5:ad:f0:98:e9:ae:cb:15:
         6d:39:86:1f:e8:83:0f:a2:6b:2b:47:a0:b3:47:2d:1a:45:f2:
         20:97:6f:ff:8d:ef:eb:bc:33:f2:64:5a:78:81:9c:00:be:c3:
         35:4e:d4:e1:f4:f2:de:a6:cd:f8:e0:aa:cb:8b:d2:ea:b1:d9:
         12:73:88:1f:3c:b9:fc:b5:af:85:3d:a6:dd:6e:bc:cb:62:c6:
         6a:a6:45:a8:3b:58:9d:94:80:1b:85:3e:c2:d1:22:7f:e9:e7:
         3d:6b:5a:17:23:97:71:a0:66:b9:71:ba:66:cf:ab:e4:c8:b1:
         39:f6:ec:a6:66:b6:6c:a3:dd:d7:cb:45:04:73:2c:49:08:55:
         ff:48:7a:fb:cd:41:b0:42:df:66:6c:7c:8a:e8:7c:26:00:79:
         32:b9:73:5b:19:ed:61:5e:53:b8:65:51:9e:f6:c9:3a:fa:76:
         e1:ef:5e:d8:da:dd:db:a4:3f:68:b8:4f:07:54:aa:3e:6b:e5:
         90:08:c8:71:f7:82:6a:a5:33:13:78:15:b2:af:50:17:1b:81:
         b5:10:85:f5:16:ad:ec:26:18:82:cb:3f:d1:86:80:9c:cb:d4:
         1b:b7:f3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:33:03 2025 by rpki-client