Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
File:                     DJ8RVKmhXVqDqamBenJL_FOdtZY.mft (raw, json)
Hash identifier:          EoV9zvB+CzYKrKDn/ydSaPJDTcsyRCSEtb+vRi5fRDE=
Subject key identifier:   65:D2:15:28:40:61:0A:46:F5:43:1C:B5:43:6D:38:C3:1B:22:EA:AE
Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
Certificate issuer:       /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Certificate serial:       01969CACC861949A309828D4BDF07486D70B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
Manifest number:          1524
Signing time:             Sun 04 May 2025 19:01:31 +0000
Manifest this update:     Sun 04 May 2025 19:01:31 +0000
Manifest next update:     Mon 05 May 2025 19:01:31 +0000
Files and hashes:         1: DJ8RVKmhXVqDqamBenJL_FOdtZY.crl (hash: qcFacUjxAp1kKx27H9NiVp9HrWNWHdSo6f+fbTHxayE=)
                          2: Kw07JxAM6PIjr2ZZEDMn7JfYALU.roa (hash: 7yLwIb1VffX9y/T7PbcK03UjKmQOn5ktXM/NbKeEUqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 19:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9c:ac:c8:61:94:9a:30:98:28:d4:bd:f0:74:86:d7:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
        Validity
            Not Before: May  4 19:01:31 2025 GMT
            Not After : May  5 19:01:31 2025 GMT
        Subject: CN=65d2152840610a46f5431cb5436d38c31b22eaae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7f:df:55:90:42:f0:25:0d:34:7f:7c:9c:47:
                    71:40:bd:f7:d3:69:15:4b:fb:88:2b:9f:14:e0:d4:
                    3b:d2:9c:c7:a6:15:ed:34:f7:1f:41:cb:ce:21:1c:
                    9a:97:59:4b:44:46:64:3f:ac:60:5f:b9:08:e4:44:
                    3d:c6:0d:d9:2e:cc:a4:24:e2:b6:1b:c8:44:d1:c4:
                    46:ec:ed:66:6f:66:2c:aa:a4:cc:36:ce:37:f1:03:
                    3d:67:23:63:66:74:d8:6c:60:d5:9a:85:8f:8f:47:
                    6b:4f:23:6b:dd:3d:fe:fd:79:fe:ab:ec:7d:95:9e:
                    68:08:28:3b:f3:6f:3c:ca:92:99:cb:92:1d:e8:51:
                    b3:e8:e5:df:41:bb:0d:18:ef:67:47:f8:1c:74:10:
                    da:16:fa:44:be:c8:74:d1:a7:cf:24:7a:a8:16:e6:
                    9b:40:08:9e:86:6d:aa:ad:71:95:4d:bc:0f:c1:86:
                    27:64:48:8f:f7:a5:a7:77:45:0a:87:f0:dc:9a:b2:
                    5a:1e:b9:ac:74:3f:01:f8:40:e9:44:3e:35:7a:05:
                    04:41:2f:84:70:ea:80:f1:d8:ae:32:2c:eb:06:5f:
                    6a:a5:43:2c:1e:22:13:5c:c1:f3:9f:1e:e9:a8:6b:
                    12:7f:74:97:da:03:66:f6:15:e8:43:ba:45:f6:49:
                    67:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D2:15:28:40:61:0A:46:F5:43:1C:B5:43:6D:38:C3:1B:22:EA:AE
            X509v3 Authority Key Identifier:
                keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:fb:c5:bc:b0:a2:8e:43:ac:ea:77:07:20:b9:0c:cd:05:a4:
         d2:44:6a:e5:d0:d0:c7:5f:3c:3a:d4:e5:27:2f:ee:28:5d:29:
         6f:f4:6a:a0:bf:57:15:bf:57:e6:fd:80:02:e9:42:12:c8:9b:
         31:6c:1e:c9:0a:9c:00:d6:0f:ef:68:f7:5f:9d:41:82:6f:2e:
         65:74:65:0d:c7:61:bb:36:73:64:26:f6:6b:a9:2f:8b:51:08:
         c2:42:f6:e3:95:86:c6:93:00:70:fb:6a:d4:bd:10:5c:74:c8:
         69:b1:cc:bd:dc:69:28:ff:cb:80:6d:bd:48:b9:a5:23:6a:19:
         78:c7:99:e3:d3:f2:39:13:6e:52:e4:29:2c:0c:7c:cd:ef:13:
         e1:66:ca:25:be:55:9a:14:d3:71:f5:39:6b:03:36:80:ab:3e:
         79:4f:e4:2d:a1:bc:a3:f3:df:2f:63:cb:52:60:79:81:ce:43:
         d6:f9:03:88:f4:95:c6:a0:23:15:b0:dc:a1:0c:d2:36:23:d0:
         fd:7f:57:f4:b5:a6:64:cf:16:30:36:1e:98:9e:d3:d2:ca:29:
         97:30:92:a5:b8:9f:04:af:b6:ff:6d:3f:0c:c8:6c:a2:98:2b:
         b4:45:4a:1e:2d:1f:44:4c:fa:7e:89:40:9a:3e:fb:a4:5f:ac:
         af:26:35:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:03:36 2025 by rpki-client