Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
File:                     6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft (raw, json)
Hash identifier:          GeOwDcKyCbpvUjLt9t+clRyLi1sbAAzv316MeMUJHfo=
Subject key identifier:   53:66:07:1C:91:CA:46:48:90:0B:87:66:E8:55:26:42:24:FD:49:DC
Authority key identifier: E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
Certificate issuer:       /CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Certificate serial:       0196B1EA8B9F8C10AE74812A9317047D84C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
Manifest number:          0B85
Signing time:             Thu 08 May 2025 22:01:00 +0000
Manifest this update:     Thu 08 May 2025 22:01:00 +0000
Manifest next update:     Fri 09 May 2025 22:01:00 +0000
Files and hashes:         1: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl (hash: JeP/1tsWLfeDY0rDvB/GSKWfqDD+rpt/q2NIvQcuwqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 22:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:ea:8b:9f:8c:10:ae:74:81:2a:93:17:04:7d:84:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
        Validity
            Not Before: May  8 22:01:00 2025 GMT
            Not After : May  9 22:01:00 2025 GMT
        Subject: CN=5366071c91ca4648900b8766e855264224fd49dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:be:8c:bc:d9:14:ce:fb:19:21:a0:48:ea:
                    54:c0:ea:ca:32:da:3c:bb:e4:4b:52:65:5d:79:c7:
                    bd:8d:ab:63:0b:42:b8:08:12:29:af:ba:4d:9d:9d:
                    ac:54:dc:cb:a0:26:b8:19:42:dd:47:75:09:b1:78:
                    64:e5:9b:2d:a4:c5:50:ee:f5:4c:97:42:54:e5:e5:
                    c8:ae:0f:dc:07:e0:ea:44:29:4a:b2:58:bd:35:66:
                    6f:d0:e5:b7:5c:f6:f2:74:9b:37:65:e1:35:90:73:
                    b3:c5:13:0d:f3:31:d4:8a:9a:6b:80:45:ac:4d:a3:
                    bf:5d:36:85:be:02:97:8e:e3:50:af:30:bb:f2:80:
                    db:76:69:56:86:34:42:70:87:dc:d5:94:66:49:d2:
                    e0:93:98:5d:a7:49:12:6d:05:8a:f4:1a:44:f2:ea:
                    8b:de:6a:31:d0:4e:e1:26:12:bb:22:d6:ba:4b:8d:
                    58:7c:b7:ce:d2:25:5a:a8:8b:d1:66:26:15:45:f7:
                    5a:85:11:55:bf:5b:dd:5f:74:b4:1c:01:2a:af:60:
                    80:39:b8:23:8b:b4:5d:21:2a:c2:5e:02:94:e2:c8:
                    17:ab:b5:4b:4e:6b:82:a0:18:ce:09:30:1a:3e:f3:
                    ed:9f:9a:44:5b:06:a7:46:f5:72:4d:81:9c:f7:94:
                    16:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:66:07:1C:91:CA:46:48:90:0B:87:66:E8:55:26:42:24:FD:49:DC
            X509v3 Authority Key Identifier:
                keyid:E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:0c:8f:ee:65:75:6f:5e:52:33:69:19:b8:fc:11:b9:62:88:
         a2:af:33:8b:3a:30:e9:b5:15:07:68:7d:bf:bf:2d:c8:f5:86:
         ed:fe:1b:71:24:73:af:06:09:e1:33:18:3f:c3:e2:2a:a7:83:
         42:a4:63:3a:69:3f:d8:6f:00:91:ce:50:9d:7e:be:b5:92:54:
         2a:0c:d2:e3:bd:54:00:87:9d:65:3e:36:ab:f9:88:45:d7:9b:
         3d:83:b5:ff:99:ff:fa:69:fd:77:88:d3:db:3f:4e:77:e8:d1:
         8d:a4:07:9d:5e:54:d1:76:a2:d8:13:a8:4e:49:9c:06:2f:21:
         67:bd:8b:8c:dd:9c:78:6c:49:c6:96:12:ed:bc:f1:3a:83:b5:
         2c:ef:6f:0b:95:63:99:38:03:f1:c7:83:e4:0b:1f:1c:6e:38:
         ad:ae:90:45:7d:92:e6:0c:e0:59:5b:59:8e:b4:b6:8b:76:88:
         07:23:74:93:c8:f3:e2:72:bc:10:d3:99:37:08:86:1a:5a:dc:
         c9:0f:23:55:3e:82:4d:99:1f:d8:7f:f4:42:05:a1:db:71:35:
         ec:66:14:13:c1:08:87:16:f6:f0:c4:96:4a:96:0f:ef:04:dd:
         6a:54:95:10:48:73:47:ec:e0:bb:9d:5c:fe:a8:1d:6c:35:9c:
         7b:88:b2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:06:57 2025 by rpki-client