Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
File:                     j-7pSg47IoCXZK7h4o8Hj61ja8M.mft (raw, json)
Hash identifier:          Era0CBmA4+6kFjuvFBYUGy3qLwnT7cvpXill1D3Y+Sw=
Subject key identifier:   57:FC:8B:91:F4:33:5A:01:0B:02:22:30:7F:CF:73:9C:84:DC:29:6A
Authority key identifier: 8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3
Certificate issuer:       /CN=8feee94a0e3b22809764aee1e28f078fad636bc3
Certificate serial:       0196B85A50653E23C68050FC8AD9C5008876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
Manifest number:          1530
Signing time:             Sat 10 May 2025 04:00:48 +0000
Manifest this update:     Sat 10 May 2025 04:00:48 +0000
Manifest next update:     Sun 11 May 2025 04:00:48 +0000
Files and hashes:         1: j-7pSg47IoCXZK7h4o8Hj61ja8M.crl (hash: nA6N/yJz9P7FVCkE0aIIQEs1jKn0HqWHPmabTdd6mII=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:5a:50:65:3e:23:c6:80:50:fc:8a:d9:c5:00:88:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8feee94a0e3b22809764aee1e28f078fad636bc3
        Validity
            Not Before: May 10 04:00:48 2025 GMT
            Not After : May 11 04:00:48 2025 GMT
        Subject: CN=57fc8b91f4335a010b0222307fcf739c84dc296a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2d:42:a4:fc:9d:04:18:87:b2:a7:23:e7:11:
                    44:6e:c8:8f:d5:7c:0c:80:eb:32:25:d4:c9:a1:82:
                    be:ce:77:a2:c4:29:54:7c:f9:97:c2:db:e4:97:c6:
                    e4:84:c3:c9:a0:d5:d2:53:ba:37:e6:4a:a4:9a:6e:
                    35:ed:95:3c:58:7a:c8:2e:b0:4a:76:96:71:d6:7d:
                    07:27:d5:fe:a1:0b:6f:56:97:be:a8:a8:10:f7:e5:
                    b0:86:1f:01:9a:dd:d4:80:ed:db:85:f9:a6:76:40:
                    a2:e6:a1:a4:30:95:8f:81:b8:bb:cc:30:ac:aa:3d:
                    61:46:a3:44:ed:f2:16:df:ec:54:fc:4e:cc:38:32:
                    5b:f7:87:de:d7:24:a9:77:24:b9:e3:d9:b2:05:89:
                    0a:ff:0f:4a:5a:b3:93:71:97:92:3d:a4:4b:51:48:
                    7a:5c:91:1f:2e:56:a0:55:21:18:52:33:5d:09:57:
                    9f:8b:3f:00:30:31:7f:24:65:63:87:ad:2a:06:ca:
                    bd:16:68:5d:fc:77:dc:63:46:c8:36:8a:99:53:82:
                    16:61:a8:9e:25:43:80:ed:9b:62:16:8d:04:2a:f2:
                    6b:74:ad:06:92:e8:76:f2:3d:33:a7:79:99:24:e1:
                    45:7e:b7:5d:5b:ba:cf:b1:5f:03:88:1c:50:56:2a:
                    b6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FC:8B:91:F4:33:5A:01:0B:02:22:30:7F:CF:73:9C:84:DC:29:6A
            X509v3 Authority Key Identifier:
                keyid:8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:62:d2:93:e5:aa:f9:1e:55:66:3c:81:fc:b6:9f:dc:14:fb:
         85:4b:f9:a8:51:97:2d:89:cb:fe:b9:cd:9d:01:b0:bf:14:00:
         a0:c9:66:7e:d8:f9:fb:5d:b2:ce:60:38:eb:f3:79:ab:9f:84:
         8e:c8:12:9b:68:b1:ec:20:f5:09:e5:2f:29:a7:7c:7f:ce:af:
         2d:64:f0:64:c3:74:ad:e2:c5:a9:91:91:83:7e:8f:ca:e6:75:
         2a:0d:74:7a:9e:0f:9c:f5:ec:0f:71:b0:a7:9d:c9:a0:f3:49:
         0b:fd:d3:06:cc:bf:33:08:b5:da:eb:ef:89:ac:cd:53:1a:62:
         6d:3a:13:bf:5d:61:02:2f:66:40:87:6b:70:8a:66:5f:41:68:
         39:6b:0d:d8:9e:e5:47:ea:15:64:09:20:a4:12:b9:e6:b6:34:
         91:ec:92:61:b3:81:b3:3b:8e:ea:ab:c6:2a:d5:bb:d6:ce:e9:
         54:d6:5e:40:30:78:74:bd:2e:e2:06:33:94:77:74:a2:4b:a4:
         bf:8b:e0:56:b3:8f:74:9e:3d:8b:26:05:3e:3a:80:6e:b3:bc:
         b0:b4:08:70:7b:be:e8:98:c1:51:15:68:dc:21:93:10:66:c4:
         e6:8a:c7:25:02:94:13:0a:19:61:44:c9:39:26:39:93:e1:84:
         c4:7a:ce:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:49:40 2025 by rpki-client