Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
File:                     1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json)
Hash identifier:          8e+cY5QYgoX0IPgyLD8NKmmntT6SS9JXHzMXFQQzVno=
Subject key identifier:   45:74:8A:AC:C6:17:62:84:23:0A:F6:4C:BA:4F:BB:5C:FC:94:30:5F
Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Certificate issuer:       /CN=f82554a856a422b061ae64c577630f91d408cd4a
Certificate serial:       01969D87AD544C50E35E054DDD0A8610AA14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
Manifest number:          1528
Signing time:             Sun 04 May 2025 23:00:36 +0000
Manifest this update:     Sun 04 May 2025 23:00:36 +0000
Manifest next update:     Mon 05 May 2025 23:00:36 +0000
Files and hashes:         1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: x2OMZWmWHOp5DJm8TaAVMNC5tLGSB4ncgQxR81FrE6A=)
                          2: 8yyknMa8Qa7eji2_-25NgjHMwAs.roa (hash: 6EA1L4yNjiFkAAM6t2iZAA7ze8SV3lMCUhKNPg3vBUQ=)
                          3: 9QjCjG8fGXKK3KT9GGHW6MAVJzE.roa (hash: fSpz8n2jWyy0I2DDmxohRpaljlrP9nL5ZtLGzLKYuXU=)
                          4: H7En3yY1mH2yRYS167HpwA6AL5Q.roa (hash: FPJfC/52NavOyoGt4vZ9gio4MoEgpYKiZrTtURDieXE=)
                          5: K4UoliAJDnPT2oq72AyXanTYwdo.roa (hash: +5dNWwnlyTnn33FOhd8BsjDiWGBw/K7XK9sbIa7ROKQ=)
                          6: WjTYhnjd8JZNKcEGGyvScBW7ujg.roa (hash: xm9/rrII6hlVm8eUope1QTZ7F33LVLrGkQUEXzf0iIk=)
                          7: aWWA3-Hs7ng_GCTHIDmwQ5Rjbdg.roa (hash: isC8RltnKP3pjrz7ZvAls/aB0WZTll6Skvt9xKP3UkI=)
                          8: fPjaiW_RQVaw1K0jco_QmLpGo5s.roa (hash: agQGyFSnSoUI1Vx0MTRN/i+hHcE0hyBre8ShGUX7keA=)
                          9: sERIvqHcZj2yU32m6o5QSyQReME.roa (hash: cfxbkVfwNX0hfImDTJjGC48Jbi/ZuYY11AKoePEqH8k=)
                          10: zTLxL4slk5kZQfWpH_PY-TD7nNM.roa (hash: tzDHOIgeKhCjAOTBNpSwMn6WduYNfsmvzrDJbeHe5/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:87:ad:54:4c:50:e3:5e:05:4d:dd:0a:86:10:aa:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a
        Validity
            Not Before: May  4 23:00:36 2025 GMT
            Not After : May  5 23:00:36 2025 GMT
        Subject: CN=45748aacc6176284230af64cba4fbb5cfc94305f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:af:15:37:86:fc:0f:9c:da:fd:74:61:97:a0:
                    e1:a4:3e:4e:8f:4c:a9:ed:90:80:f4:14:62:c5:f8:
                    a4:ce:42:22:0a:da:8b:3d:0d:ab:df:ac:68:c4:ef:
                    8d:e8:51:87:6f:70:81:ab:cb:a2:c8:70:3d:35:d4:
                    c3:26:a1:aa:84:e4:68:c2:c5:2f:23:6b:b8:6a:fd:
                    98:b4:f3:3d:22:01:10:7d:ea:85:1a:85:27:56:a9:
                    b5:a7:c9:4c:e8:ba:6f:18:a7:5d:b5:9c:ba:24:92:
                    56:b6:9e:e6:f4:65:09:53:ee:bd:96:b6:3b:8a:ee:
                    0d:aa:90:7d:4e:c0:bf:1d:e1:17:14:ee:e7:06:3d:
                    5d:32:ef:98:f0:1e:9c:47:2a:67:c9:55:1c:e0:7d:
                    8a:89:d5:04:a4:01:e8:5d:5e:3c:c2:53:bc:51:d5:
                    3d:f0:33:89:10:a0:91:b3:6c:e7:33:09:7f:49:0a:
                    25:17:bd:65:7f:45:ee:3a:35:eb:e2:aa:2c:32:f2:
                    c3:21:b3:54:05:56:8c:c3:71:f3:d6:a6:a4:50:19:
                    ed:22:21:c1:41:85:14:f4:36:f3:6c:56:d4:13:5e:
                    0f:6e:77:d4:2b:61:bd:38:f2:58:80:6a:1e:b8:5e:
                    ec:92:51:49:6b:36:d8:41:79:b7:23:a6:a7:d5:03:
                    40:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:74:8A:AC:C6:17:62:84:23:0A:F6:4C:BA:4F:BB:5C:FC:94:30:5F
            X509v3 Authority Key Identifier:
                keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:07:21:3d:99:4f:25:0d:30:c1:73:61:f3:e9:87:9a:f5:96:
         5d:7e:be:16:02:99:0a:6e:86:0b:a7:ea:59:90:89:b1:fc:16:
         a1:ed:76:2e:af:c8:e9:66:7c:0e:de:bd:23:ca:21:9f:92:5a:
         1b:49:e7:35:76:66:e5:0d:a6:b9:ce:c5:40:61:87:ed:f3:c7:
         5f:d4:4c:d9:8b:aa:85:2c:9e:b8:48:40:19:e0:5d:d3:b8:67:
         99:fa:73:33:97:9b:fc:75:8d:cb:ae:a3:93:a2:28:ef:df:7b:
         dd:9d:4a:08:ae:de:5f:36:15:50:83:5a:74:76:16:de:4f:59:
         93:d5:d5:11:16:18:4b:35:52:cd:55:b6:17:10:86:90:85:be:
         67:60:1c:1c:53:b2:01:ff:31:42:94:5a:2e:d6:a8:89:16:23:
         9d:2c:69:99:64:3f:84:5c:e4:73:c3:61:83:b4:5c:b8:ca:79:
         91:37:8d:7f:5e:6f:11:da:1a:16:0c:1f:c2:78:f5:e9:c6:8b:
         5d:f5:01:c7:61:a4:bc:f5:d1:c5:59:08:38:c0:b4:ba:23:92:
         a5:70:f0:cd:0c:b0:0a:f3:25:a4:da:3b:1b:ee:af:39:51:df:
         de:91:52:47:60:32:19:9a:76:21:86:69:78:23:9f:0b:e4:9d:
         0f:3c:fa:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:20:43 2025 by rpki-client