Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
File:                     RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft (raw, json)
Hash identifier:          JGKSFtgipMwvevbBxNfhcuxuhy5OaYoovKEiVF5AmxU=
Subject key identifier:   E6:4F:A4:81:D2:27:97:A5:32:C4:AA:BF:E9:25:0E:58:10:8A:25:C8
Authority key identifier: 45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA
Certificate issuer:       /CN=45d58323e7d4f91c37297cd1926566033b3f8aba
Certificate serial:       0196A4D365C5F025E82DE7F14E2879A40149
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
Manifest number:          0415
Signing time:             Tue 06 May 2025 09:00:39 +0000
Manifest this update:     Tue 06 May 2025 09:00:39 +0000
Manifest next update:     Wed 07 May 2025 09:00:39 +0000
Files and hashes:         1: RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl (hash: yucF7/XBGTO64rZuXFFax9yMV+RczDJqe5LTECiLAyU=)
                          2: vUZm6nnQuTxWv0zwrqYoRNaKsTM.roa (hash: Jd8FHgIjElXB18MWjUn4lp0g7hpzNeZ3zr50jxllMWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 09:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a4:d3:65:c5:f0:25:e8:2d:e7:f1:4e:28:79:a4:01:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d58323e7d4f91c37297cd1926566033b3f8aba
        Validity
            Not Before: May  6 09:00:39 2025 GMT
            Not After : May  7 09:00:39 2025 GMT
        Subject: CN=e64fa481d22797a532c4aabfe9250e58108a25c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6b:3c:34:03:f8:b5:d5:ea:a7:fb:00:f7:7b:
                    1c:b3:9e:9a:39:c0:37:6e:a3:2b:06:0a:0e:95:b8:
                    9d:b1:3c:53:dd:f3:a2:ce:f0:c2:f7:c1:f1:7b:f0:
                    88:8e:a1:25:0d:ba:7f:71:c9:dd:bb:a0:e0:5c:ab:
                    51:a0:d7:ed:c1:a3:17:51:c8:42:ac:a3:14:bc:9e:
                    45:d3:82:4a:3c:b3:75:ef:72:51:f9:ff:9a:9c:34:
                    f2:b1:65:4a:9f:6e:46:81:1e:11:46:70:fc:95:17:
                    0b:41:7f:a2:86:49:51:81:bc:87:5b:0d:d9:75:1e:
                    65:ee:38:1d:f0:fb:08:b9:eb:47:6a:40:d0:d8:8b:
                    df:2e:1c:7e:4e:b4:0e:4f:84:78:2b:cf:33:e2:ec:
                    76:63:65:74:73:e5:23:79:d0:6a:05:a7:55:ed:51:
                    49:c2:c4:ed:1c:f3:1e:41:22:73:3b:13:44:ad:74:
                    c4:76:7f:ef:a9:87:43:c5:28:6f:a1:ca:7c:2a:13:
                    4c:c2:6f:7a:1b:1d:30:a8:3b:97:1f:32:09:fa:b5:
                    18:8a:68:0e:08:bc:cc:03:e9:20:af:4c:01:a3:45:
                    7b:52:c1:2e:5e:57:bd:a4:bb:56:da:3d:9b:c8:7c:
                    49:df:03:b8:5f:73:5d:59:93:36:ce:e9:a0:75:69:
                    3d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4F:A4:81:D2:27:97:A5:32:C4:AA:BF:E9:25:0E:58:10:8A:25:C8
            X509v3 Authority Key Identifier:
                keyid:45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:4e:d2:cc:cf:0f:3e:a5:10:30:a3:96:73:25:d6:64:ae:bc:
         0a:93:a0:5d:f2:f0:a0:83:28:f3:44:de:40:3d:1f:b9:b9:69:
         e2:dd:24:3a:c7:c7:de:9b:71:31:82:04:63:c6:b1:15:3c:14:
         08:3f:a8:b1:47:d1:00:31:33:cd:6a:82:de:da:9d:9b:a0:f9:
         40:8f:59:2b:25:4a:3b:c0:87:4a:ef:fd:66:0e:35:01:07:01:
         fb:25:4b:77:99:46:a0:0b:7d:30:41:5b:70:ab:9b:f8:14:0a:
         33:6d:9e:2f:c9:8e:44:26:4d:06:a2:7e:e8:70:6d:e2:6d:2b:
         b5:15:e6:f4:9d:47:be:28:98:e6:6d:93:64:90:3c:10:8f:bf:
         83:1f:38:c8:6d:22:36:47:8f:28:a4:d8:d3:d7:f6:ab:9f:d5:
         1a:09:64:93:b1:41:58:03:77:00:48:13:b9:0c:40:d0:4c:bc:
         87:5d:df:8b:69:ed:15:20:aa:dd:26:1a:92:54:c8:c5:a4:6f:
         c9:ca:53:d8:ea:dc:7c:5b:eb:97:19:a9:12:5b:0e:88:1e:c2:
         1c:90:e2:83:0e:4c:e1:e5:4e:04:a2:22:cc:9d:96:e8:82:cc:
         7d:4f:5c:cc:bf:84:06:65:46:86:07:9f:53:0a:4f:38:52:a8:
         6d:b1:9b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:56:56 2025 by rpki-client