Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
File:                     _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json)
Hash identifier:          gRT4jqZLOz25DlR+hawLsSryRnPKFbx6kwJx5GK4RFk=
Subject key identifier:   A7:D2:CC:CF:1F:B4:27:40:9D:C1:83:45:04:0E:46:D6:6D:C6:60:E8
Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
Certificate issuer:       /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Certificate serial:       01969D1A58F8CC1542174F4F2F4D821ED1D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
Manifest number:          1524
Signing time:             Sun 04 May 2025 21:01:11 +0000
Manifest this update:     Sun 04 May 2025 21:01:11 +0000
Manifest next update:     Mon 05 May 2025 21:01:11 +0000
Files and hashes:         1: 0LP5ahEEWvnMaK30aMTVzU6uXkA.roa (hash: lB/VdYravFr8twO2oC/vGE6G8jo6civSr7gweO3k+0U=)
                          2: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: xIe7cNMbj3FWU47XQ0w8lV6Z3U/217a7PkQcTEMHy1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 21:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:1a:58:f8:cc:15:42:17:4f:4f:2f:4d:82:1e:d1:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
        Validity
            Not Before: May  4 21:01:11 2025 GMT
            Not After : May  5 21:01:11 2025 GMT
        Subject: CN=a7d2cccf1fb427409dc18345040e46d66dc660e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:9b:9c:7c:6c:d6:8d:13:1b:e3:75:b9:8e:
                    4d:aa:53:c6:21:13:76:3a:c3:97:81:44:66:3e:e3:
                    87:73:54:32:b6:07:e5:5a:5f:e6:bb:53:21:b4:4f:
                    e3:2e:11:c3:4a:db:87:53:b7:a2:bc:20:6e:6e:13:
                    ec:18:67:b7:a3:dd:8d:a5:35:84:94:70:16:0c:6a:
                    b4:f3:5c:b9:bf:09:71:ce:a2:9e:bb:d3:ce:77:77:
                    ae:7b:40:44:66:10:f8:43:58:4b:8a:76:70:6e:82:
                    db:23:84:72:c3:1b:e5:b4:be:c7:2a:5a:b4:75:9f:
                    06:cf:15:1d:d0:cd:49:93:1c:67:44:2e:46:7c:da:
                    b9:70:29:7d:26:81:e0:ec:11:e2:1d:e7:d6:8f:8b:
                    44:2c:4d:e1:b1:d2:de:f3:59:d1:6d:51:e5:69:a0:
                    4d:6f:15:78:46:d0:9f:4e:34:8e:32:77:29:d3:99:
                    17:b1:8b:24:32:5f:c8:21:4a:6f:c5:fa:ae:8c:bd:
                    ee:90:8b:a3:ce:4f:52:22:33:2d:25:cb:0b:f7:ab:
                    12:4c:01:c1:ec:1e:73:6d:58:3d:f8:db:bf:d2:eb:
                    d3:ee:60:71:fc:09:11:7d:57:0c:1d:f0:2c:cf:47:
                    b6:9a:0a:41:f9:1b:87:27:46:d9:a5:a9:1f:d6:bd:
                    33:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D2:CC:CF:1F:B4:27:40:9D:C1:83:45:04:0E:46:D6:6D:C6:60:E8
            X509v3 Authority Key Identifier:
                keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b0:be:0b:ef:53:12:fd:9b:3f:66:ed:b7:47:87:77:4e:56:
         26:ca:34:20:0e:9c:50:0d:bf:fd:aa:c3:00:7a:91:d3:8f:24:
         dd:6f:2b:69:84:05:ac:a0:9f:7a:6e:26:c6:72:cb:23:80:b9:
         73:a5:d6:3b:12:32:3e:c0:aa:47:32:77:7d:fa:52:4b:5e:44:
         8b:71:28:23:f1:36:78:d3:45:54:6b:c7:3c:8d:22:b9:ba:0a:
         18:bc:28:45:0f:11:79:f1:e4:df:80:ce:3f:a2:df:d8:e3:21:
         5c:e5:03:a7:b2:0e:05:0d:0f:c1:bd:72:f7:dc:7d:a1:14:fb:
         06:39:86:a4:c2:d6:3b:82:55:d5:78:40:ee:b9:8b:e3:5a:b2:
         cb:f8:e9:03:54:54:47:8d:41:6c:c4:88:18:0e:0c:22:fd:e5:
         58:86:4d:60:b2:b7:f4:f0:25:a7:ac:8b:99:5a:bb:3a:33:16:
         88:02:85:3e:cc:be:1b:bc:63:73:69:61:1a:a8:06:b8:01:6a:
         1c:53:f2:0a:bd:9e:8c:f5:6e:e1:42:1f:a4:a4:a9:23:fa:e6:
         62:59:9d:34:c3:c1:d7:69:35:c2:2b:05:93:9a:35:32:bf:84:
         2b:b8:66:34:65:16:4e:bd:de:3f:cc:63:d2:08:7b:8e:33:af:
         a8:45:e1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:42:44 2025 by rpki-client