Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
File:                     DAN90it6q-KCIlr7JWuNncvro1M.mft (raw, json)
Hash identifier:          mmO+2YG5VENOFHaK4rjKJzNf9DWpIV6WXQX4mMYn4Uo=
Subject key identifier:   41:8F:9D:C0:7F:A6:80:70:65:70:52:7E:C7:E3:99:AD:D9:69:3A:A9
Authority key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
Certificate issuer:       /CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Certificate serial:       0196C04AC6348499BA40A62070B2894D8E6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
Manifest number:          049F
Signing time:             Sun 11 May 2025 17:00:47 +0000
Manifest this update:     Sun 11 May 2025 17:00:47 +0000
Manifest next update:     Mon 12 May 2025 17:00:47 +0000
Files and hashes:         1: DAN90it6q-KCIlr7JWuNncvro1M.crl (hash: PM30Tqd/v5WIdlojAu2TIiyPNO+V4ctf+QqzpwB2vUg=)
                          2: tDD9B-lEcyqNvoNAET5cpeS9CP4.roa (hash: rKwo3X/3AKqFNwDQChvvjw66ToIOE4+PnSG73JsvhIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:4a:c6:34:84:99:ba:40:a6:20:70:b2:89:4d:8e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
        Validity
            Not Before: May 11 17:00:47 2025 GMT
            Not After : May 12 17:00:47 2025 GMT
        Subject: CN=418f9dc07fa680706570527ec7e399add9693aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:88:0a:2b:35:fb:49:db:c5:2c:0d:39:61:
                    6c:4c:b4:96:38:f1:de:0a:a1:19:07:c8:1f:29:9f:
                    07:04:b0:b8:07:e3:65:81:fd:28:92:57:32:af:9d:
                    68:66:c2:22:74:96:56:df:2c:6f:69:3a:45:61:b5:
                    83:4b:84:b1:c6:ec:d1:a8:57:d1:1f:40:14:ff:2b:
                    ae:57:dc:f8:c7:1f:4f:84:9d:b4:17:c0:88:83:b2:
                    1a:fd:d6:f6:f6:88:b9:24:b5:58:5d:05:6b:24:b7:
                    8b:05:1a:8b:9b:26:99:9e:df:66:56:ef:cc:00:5f:
                    ed:4b:5a:a0:9e:58:1d:1d:14:83:26:5b:58:92:ef:
                    26:80:0f:31:3a:1b:35:d6:c6:c6:1d:1d:81:47:e2:
                    53:65:0f:70:96:b0:41:e8:18:38:fb:98:cb:4a:16:
                    9a:2f:7f:42:f4:1b:e1:86:b4:de:63:75:93:27:bb:
                    27:42:e9:70:8b:6a:c0:11:0c:91:6e:13:11:76:d3:
                    ad:b8:33:9e:4f:61:16:2b:43:a6:63:e1:0e:22:a5:
                    d8:49:02:e4:26:65:3c:64:fc:71:13:02:52:a8:70:
                    2b:76:5b:66:41:7c:d9:2c:2f:02:e1:53:17:6a:59:
                    e5:bd:38:72:4f:49:92:0a:c7:94:d7:69:99:e6:4d:
                    9b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8F:9D:C0:7F:A6:80:70:65:70:52:7E:C7:E3:99:AD:D9:69:3A:A9
            X509v3 Authority Key Identifier:
                keyid:0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:1e:90:58:7c:55:1a:c4:af:89:14:1e:21:2a:32:01:d9:f0:
         b9:42:8c:8c:39:89:a1:73:07:6c:fc:64:26:a8:85:b4:d1:9a:
         e3:0e:f1:d2:8e:0b:00:d3:b8:d7:c3:7e:a6:05:8e:e8:df:99:
         b3:06:c1:4b:1d:53:bf:f9:95:f2:c9:ed:0e:96:75:99:65:ed:
         c9:b0:b0:a6:a8:c0:7e:f2:a9:83:fe:17:65:db:05:ad:78:8c:
         63:a1:7a:48:52:16:3a:1b:b6:d7:32:14:3a:43:cd:27:00:86:
         8c:58:8f:8a:d2:c0:5e:a3:21:33:ed:82:25:00:03:44:a9:41:
         75:d7:f7:7c:d4:78:ec:fd:95:5f:94:97:d9:f6:d9:7f:d7:d4:
         ca:07:66:8d:4f:ed:9d:84:35:78:99:07:3c:de:3a:8d:e0:e7:
         e9:81:d0:18:32:3b:a5:6b:02:9a:37:de:7d:85:f2:fc:87:04:
         4b:a8:ef:a8:c5:b6:b3:ea:00:0e:1a:ef:20:29:92:a0:a7:40:
         c1:4c:b4:29:3f:e2:f3:69:ec:c4:c3:24:bb:bd:77:e3:18:03:
         4e:b0:b2:54:80:f1:6f:f8:24:47:43:9e:07:aa:8e:24:40:9c:
         e6:7b:ab:74:3c:fc:f3:bc:8d:de:a6:bc:7e:98:23:28:ef:ac:
         85:36:5c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:26:04 2025 by rpki-client