Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
File:                     OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft (raw, json)
Hash identifier:          M+tV/OvNoqfbqXwa9F2rTPZIPhUo/2g5ry9qGqvXvXo=
Subject key identifier:   AD:DE:60:E0:E9:CD:3A:44:56:5D:E3:EB:66:5C:84:26:3F:67:05:3D
Authority key identifier: 3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
Certificate issuer:       /CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Certificate serial:       0196BFDD1C13DBF60F709F27AD4E7427C44D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
Manifest number:          1435
Signing time:             Sun 11 May 2025 15:01:00 +0000
Manifest this update:     Sun 11 May 2025 15:01:00 +0000
Manifest next update:     Mon 12 May 2025 15:01:00 +0000
Files and hashes:         1: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl (hash: SRnIzQWsI4c+4rZ5caU9ZFPsKhaBgAZEVC94zAXGYdk=)
                          2: hE2ePAizZlQUV6uXdZuzIjMthNQ.roa (hash: +KNuL0RhbzwD+ZdqGTxpdbmElk+6cn62429cYK2AHFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 15:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:dd:1c:13:db:f6:0f:70:9f:27:ad:4e:74:27:c4:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
        Validity
            Not Before: May 11 15:01:00 2025 GMT
            Not After : May 12 15:01:00 2025 GMT
        Subject: CN=adde60e0e9cd3a44565de3eb665c84263f67053d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:04:7a:45:8c:44:75:73:1f:20:a8:a9:f1:61:
                    95:5a:80:85:05:3c:3e:0b:42:35:7e:c9:0d:1c:6b:
                    46:3b:17:ae:24:5f:da:7c:d1:8b:f1:dd:72:75:04:
                    72:ac:ca:02:d3:aa:11:44:07:d5:2f:18:e1:b1:e4:
                    af:e1:13:05:3b:be:ec:72:49:b5:a0:88:b0:42:61:
                    bf:f8:f1:37:ea:8a:29:3b:aa:73:9a:01:09:ef:74:
                    25:f8:b9:73:93:6c:f0:9f:d8:a3:7e:fe:01:bb:2f:
                    fe:de:0b:c7:39:44:e4:34:cd:a9:3f:f0:4a:63:c6:
                    55:f2:4e:5a:d6:f7:96:e2:ae:57:08:e6:23:f6:ae:
                    2c:f3:d8:d4:13:48:8a:41:f2:a6:0f:09:cc:ce:1c:
                    b8:8f:e5:9a:e4:fe:e5:f5:25:b4:16:cd:17:b9:06:
                    b3:cd:1d:9e:d3:44:91:e0:24:b3:28:bd:bb:05:08:
                    62:82:40:ee:d3:d9:77:97:cf:09:ef:63:85:16:6e:
                    b5:4b:86:97:30:28:a4:48:78:a6:5e:8c:69:3c:5b:
                    6f:64:26:cd:d0:2d:0d:ee:17:cf:35:17:a6:43:d4:
                    3f:1a:75:5b:c0:b5:86:60:06:83:5c:ef:98:43:32:
                    30:09:4d:85:70:c5:9e:05:8e:7b:44:11:33:bb:36:
                    3c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DE:60:E0:E9:CD:3A:44:56:5D:E3:EB:66:5C:84:26:3F:67:05:3D
            X509v3 Authority Key Identifier:
                keyid:3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:4a:f7:01:0c:a8:aa:e2:5e:6a:33:4c:3d:56:66:18:4c:20:
         6a:a6:d0:b4:63:ba:f3:68:60:c0:4b:f2:61:f2:fe:f2:b6:8f:
         fc:f7:ce:d5:2c:f0:84:fe:e4:b0:b6:c1:13:e7:67:82:1d:7b:
         fe:96:98:d1:2e:be:34:ef:34:cc:83:db:5a:d6:ac:fa:61:29:
         05:b3:bb:87:d0:0e:f8:78:a4:8b:5b:c5:9e:a1:bd:6f:63:5f:
         c5:5a:8c:ca:73:f6:6c:2a:4a:82:9c:48:40:c6:69:5f:45:6d:
         72:d6:9a:fa:e2:2a:36:78:c3:8c:b9:2a:de:23:33:3e:e0:7a:
         a0:51:58:c1:d3:fc:f5:34:55:29:4e:b0:63:0d:a6:42:48:a4:
         c9:39:5e:1b:04:f5:e6:06:2e:d2:86:71:fb:7c:99:d4:3f:23:
         f9:dc:70:8e:5c:5d:1c:22:17:47:16:ce:03:62:10:d2:4d:4b:
         93:a8:9c:bd:56:03:df:57:87:7d:73:bc:9d:8d:aa:c1:9b:2f:
         8e:19:39:78:f9:d4:ad:59:9a:1f:ec:be:0f:0f:f2:8b:69:18:
         60:8f:1c:65:d7:24:c5:b7:ba:48:68:da:38:ed:64:44:43:7d:
         ea:bb:9a:3d:d6:a7:8c:e7:f6:97:20:eb:c5:fb:be:49:db:22:
         8b:75:eb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:08:09 2025 by rpki-client