Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
File:                     AmWtlOeXE1kGs-EahHyOr9CU50U.mft (raw, json)
Hash identifier:          VgAz68d+q5OsFt0EGGFcfVWCKeG23VbdOrcHXwZ04so=
Subject key identifier:   69:53:48:F2:BC:7F:CB:9F:D7:D0:C8:23:F8:3E:13:DE:8A:5F:65:79
Authority key identifier: 02:65:AD:94:E7:97:13:59:06:B3:E1:1A:84:7C:8E:AF:D0:94:E7:45
Certificate issuer:       /CN=0265ad94e797135906b3e11a847c8eafd094e745
Certificate serial:       0196D3D14B9E576CDE0A4DC56581E33085E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
Manifest number:          1541
Signing time:             Thu 15 May 2025 12:00:31 +0000
Manifest this update:     Thu 15 May 2025 12:00:31 +0000
Manifest next update:     Fri 16 May 2025 12:00:31 +0000
Files and hashes:         1: AmWtlOeXE1kGs-EahHyOr9CU50U.crl (hash: r8HhogBt86NMqsKw64aocNY2e0tClOPA3QT0Z6PLQJo=)
                          2: SZBAF2HXjdb03PkJpOVysksT_8k.roa (hash: Krg8gvZLzhIMGcL+cCXvbm4nAV3yJmkdyGbkdVJo2Lc=)
                          3: ubILPtIGLcaC5tdulnfQHq0BdoU.roa (hash: BJYBDA5/MNdL6MG7ef+wXgyzjJiGCTkzcJs87HpsXHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d3:d1:4b:9e:57:6c:de:0a:4d:c5:65:81:e3:30:85:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0265ad94e797135906b3e11a847c8eafd094e745
        Validity
            Not Before: May 15 12:00:31 2025 GMT
            Not After : May 16 12:00:31 2025 GMT
        Subject: CN=695348f2bc7fcb9fd7d0c823f83e13de8a5f6579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ae:e8:79:d1:e6:88:40:5f:97:b7:61:68:a2:
                    e9:66:eb:63:ae:be:97:43:c9:a7:2b:e1:8b:45:78:
                    ad:90:eb:e2:d7:4b:66:7e:ff:44:e6:6d:c7:cd:bd:
                    bb:e9:ed:53:65:71:04:d3:2d:cb:64:ae:d5:7b:f6:
                    78:f5:99:8c:d5:d1:85:b0:db:52:75:db:ef:db:06:
                    ff:3b:85:85:b1:5e:e3:10:e9:a9:a4:27:be:20:8a:
                    17:c7:78:5a:6e:86:0e:c9:a0:a9:13:a8:05:46:d1:
                    3c:f0:ee:0b:ee:49:2b:a2:d9:bb:41:cc:01:f3:a3:
                    b0:dd:f0:ad:79:f5:0d:a8:44:e1:87:df:56:db:2d:
                    13:01:4d:9c:b0:fb:f7:45:ec:1b:24:4e:3a:e7:f8:
                    6a:05:e3:6f:90:b9:2a:52:b2:91:8c:1c:8f:37:43:
                    c4:2b:d0:7f:b9:a1:0b:02:9e:9a:d9:fd:fb:a8:01:
                    28:f1:f6:ed:ed:a5:6b:2f:3b:24:14:de:44:e9:d9:
                    53:9e:1d:4c:db:f8:c7:2a:ac:27:06:d2:db:06:57:
                    2a:8b:46:97:b2:9e:74:59:32:52:5d:ec:66:81:35:
                    11:4f:a8:51:4d:ab:5d:a0:6a:0e:8b:80:eb:85:0e:
                    b2:a7:2d:e6:51:e4:0f:15:d1:65:ef:9d:59:9e:49:
                    8f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:53:48:F2:BC:7F:CB:9F:D7:D0:C8:23:F8:3E:13:DE:8A:5F:65:79
            X509v3 Authority Key Identifier:
                keyid:02:65:AD:94:E7:97:13:59:06:B3:E1:1A:84:7C:8E:AF:D0:94:E7:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:84:f5:b2:60:3a:84:68:94:e7:b1:b4:47:0b:ea:45:8a:73:
         ff:1a:34:98:70:6e:e6:c6:d2:04:da:f8:95:a6:21:57:ef:bd:
         ba:cb:79:d1:3f:ec:ca:d5:d1:74:85:a8:f5:41:27:98:ea:83:
         ef:20:83:5d:fa:43:e3:d4:31:47:e9:ec:12:ca:dd:0d:9b:0c:
         01:c5:a9:75:92:46:02:91:a5:62:58:f7:da:87:55:2d:10:74:
         fa:f7:1d:1f:92:ba:51:d1:de:81:af:01:e8:31:77:b4:03:38:
         83:91:89:b1:76:06:63:7c:f9:1b:67:f5:e5:20:dd:72:38:68:
         af:fb:87:06:96:0c:0a:44:ca:a4:52:a5:b6:81:32:85:aa:47:
         89:1d:8f:c2:87:95:3a:7b:b7:f5:1d:df:99:ce:c1:cc:00:a7:
         6c:06:33:09:bd:1a:35:50:0b:56:b4:3c:0d:b2:66:86:4c:07:
         ca:f0:85:e5:e3:fe:58:fd:a9:71:cc:82:1b:85:7b:57:18:96:
         ff:c3:96:29:bf:3b:d7:5c:53:a4:b6:fb:79:18:c8:2e:57:2d:
         15:5c:de:4d:a5:2a:67:1c:48:f1:6e:d2:a3:50:ad:be:90:7c:
         9d:8d:6f:84:bc:d7:f9:0d:74:57:f4:b1:c5:b8:39:04:21:f1:
         6c:99:c8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:31:08 2025 by rpki-client