Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File:                     47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier:          OY92XyS7zeFjlHOBr3xKcgDcx98yWFddr9UYDS5PmsQ=
Subject key identifier:   BE:49:15:4C:F5:87:2E:DB:D0:3C:4F:22:93:76:3E:C2:9E:09:F9:6D
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer:       /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial:       0196BDB75F6272F4E256D0CB485CC2B44BB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number:          0B32
Signing time:             Sun 11 May 2025 05:00:33 +0000
Manifest this update:     Sun 11 May 2025 05:00:33 +0000
Manifest next update:     Mon 12 May 2025 05:00:33 +0000
Files and hashes:         1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: G1f9xQhNVJmgyXd094rYdhahh/nrQPypoFJNh3/xG1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:b7:5f:62:72:f4:e2:56:d0:cb:48:5c:c2:b4:4b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
        Validity
            Not Before: May 11 05:00:33 2025 GMT
            Not After : May 12 05:00:33 2025 GMT
        Subject: CN=be49154cf5872edbd03c4f2293763ec29e09f96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ef:11:fd:ed:28:a5:57:88:1e:4e:a4:90:42:
                    40:4e:56:59:d6:aa:32:ab:1d:61:d4:d9:a3:e8:9d:
                    e9:7c:ac:55:5a:fd:d0:47:3b:ac:ba:4c:5c:84:8c:
                    d4:86:86:50:64:48:5e:59:7c:b0:33:c6:7e:40:82:
                    1c:2a:99:22:4e:8b:81:cb:7e:c1:02:12:39:c4:7d:
                    35:e2:88:ea:32:3e:31:a9:b2:c3:1b:c5:41:54:1e:
                    d8:ef:42:8b:17:d0:09:31:7c:1d:59:36:29:1a:15:
                    3e:45:dd:b4:27:40:6e:7d:ae:78:2a:fd:9f:ac:03:
                    8e:13:b5:41:24:18:d4:3e:74:2b:5f:06:5e:7d:51:
                    39:76:16:6e:72:bb:18:13:08:46:cd:08:aa:55:9c:
                    78:1e:c8:18:77:42:90:dc:36:b8:4a:57:84:1a:cf:
                    3b:72:ef:87:85:04:33:53:05:90:9d:8f:ef:1e:2a:
                    87:03:75:de:18:86:2d:44:1a:f4:a5:cc:c5:a6:65:
                    1d:98:f2:29:ac:99:0c:dd:3a:30:51:be:90:c7:47:
                    e1:42:84:98:08:55:39:9c:63:5e:ac:fd:fe:78:24:
                    e1:9f:94:7c:a4:4a:37:af:fb:4c:d3:70:3f:51:ee:
                    8c:9f:1a:dc:f3:c5:43:a9:3e:2e:27:c8:7f:d6:c9:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:49:15:4C:F5:87:2E:DB:D0:3C:4F:22:93:76:3E:C2:9E:09:F9:6D
            X509v3 Authority Key Identifier:
                keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:5d:d5:b1:ee:04:f3:17:69:4f:c0:7b:b0:36:59:1e:9e:9a:
         07:6d:26:1e:56:e8:30:39:15:0c:be:8f:09:f8:3c:72:2f:cc:
         89:c9:7f:d4:57:51:4b:05:9b:60:81:ef:01:d1:c8:16:65:05:
         ad:fd:06:1a:da:df:38:42:cf:25:0c:2f:7c:24:1c:95:69:8b:
         53:b2:0a:32:67:d3:d3:09:ba:d5:fe:d4:6a:cd:35:9f:25:74:
         17:ee:bc:b7:aa:47:72:15:4e:30:1d:55:58:60:44:27:85:ac:
         69:88:6d:71:e1:a0:e1:16:2c:8c:db:49:48:ae:ca:32:5d:51:
         c2:14:b7:5b:c1:6c:e5:6e:9c:95:aa:d7:68:8d:b3:b7:4d:5c:
         31:e2:17:75:30:6c:d0:94:b3:22:ff:7f:ff:5b:ce:84:92:e8:
         bd:65:95:18:3a:55:64:70:67:04:3c:fe:bd:72:b8:7b:45:d9:
         84:39:69:bf:81:c7:65:b6:4c:78:13:01:5d:1b:c8:e0:3f:33:
         41:47:6a:51:12:bb:dd:27:5c:1a:11:5d:98:eb:ab:b6:36:87:
         75:98:d5:de:33:50:01:5d:57:35:e1:0c:eb:94:84:12:1f:0e:
         7e:83:92:c8:2f:be:ff:30:e3:5e:35:06:57:70:5f:13:79:4f:
         e4:3a:5c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:03:30 2025 by rpki-client