Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
File:                     3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft (raw, json)
Hash identifier:          ra+oVkJFB44KFKmN5ncfBPL4WqoX6tdQxhO53y1mCbE=
Subject key identifier:   73:FA:2F:EE:FD:C6:DB:7E:C1:89:AC:C2:5B:D3:9A:46:61:F8:6B:E0
Authority key identifier: DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2
Certificate issuer:       /CN=de0b59fb68151e21dc99d62faf03589be41fbea2
Certificate serial:       01969E9AC66E39D9BC2D9D5348E57476810F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
Manifest number:          0929
Signing time:             Mon 05 May 2025 04:01:05 +0000
Manifest this update:     Mon 05 May 2025 04:01:05 +0000
Manifest next update:     Tue 06 May 2025 04:01:05 +0000
Files and hashes:         1: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl (hash: bC8TRGQN0yYIgQkD2XpbIslHqJg++KuoTWTSNk/EfoM=)
                          2: EiOjn6Cn36HWuMJFodH0EVbfYdc.roa (hash: prKCNtfilLl42pcGEF7Kjg7za6QhPHVZeIUhroTyVuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:9a:c6:6e:39:d9:bc:2d:9d:53:48:e5:74:76:81:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0b59fb68151e21dc99d62faf03589be41fbea2
        Validity
            Not Before: May  5 04:01:05 2025 GMT
            Not After : May  6 04:01:05 2025 GMT
        Subject: CN=73fa2feefdc6db7ec189acc25bd39a4661f86be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b6:13:34:5e:0d:e4:e4:98:74:9b:0b:85:0b:
                    82:ec:4a:5a:81:fb:27:fa:21:85:9d:84:01:0d:2c:
                    76:07:2a:86:e1:19:90:34:e5:31:ec:14:15:d5:25:
                    dc:23:88:cb:56:33:ea:bd:52:70:04:b3:84:08:aa:
                    48:63:a5:70:37:19:47:b0:9a:00:09:58:4d:06:9e:
                    ee:bd:7e:0c:3d:bf:35:5e:b4:ce:0d:9b:a0:a0:42:
                    c1:2b:54:08:cc:eb:b7:28:71:c8:e8:72:7e:a0:d3:
                    91:69:5d:02:ea:96:65:a1:ae:b7:65:da:12:7f:90:
                    2c:4d:4e:04:61:0d:50:27:18:48:7e:ee:0e:df:35:
                    dd:3a:f1:e5:91:11:46:10:67:61:9e:18:bf:03:a0:
                    e5:31:a1:ee:c2:03:07:3f:00:79:df:23:b1:be:a5:
                    25:61:d2:db:20:3d:61:20:0d:24:da:8a:18:2e:d1:
                    45:15:63:ad:8e:7a:e0:72:01:d2:d9:93:93:86:c3:
                    d1:0e:87:6d:ba:99:02:aa:94:3e:4f:8f:fd:6b:c9:
                    19:64:10:5d:87:ea:b3:a7:0b:34:33:90:10:93:25:
                    29:65:f6:d1:d7:3a:ec:46:82:ce:45:66:09:83:f7:
                    bc:12:79:a9:0e:94:fa:66:6c:9b:7f:e9:e5:0e:fb:
                    c4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FA:2F:EE:FD:C6:DB:7E:C1:89:AC:C2:5B:D3:9A:46:61:F8:6B:E0
            X509v3 Authority Key Identifier:
                keyid:DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f4:06:19:33:54:cc:cd:97:b9:28:1a:5f:76:2e:36:71:47:
         8b:61:af:8c:df:ee:a9:cb:3b:bc:7b:1d:21:15:b6:3b:74:13:
         56:b0:51:90:86:3d:3a:73:49:0e:52:45:73:3d:79:2f:ce:0f:
         a1:5f:70:e7:4c:b8:e1:11:07:ad:a3:1a:1a:50:e7:e6:18:82:
         17:5f:da:e1:d7:5a:1d:53:07:5d:dd:2b:00:74:03:f8:76:c2:
         86:b3:29:e0:f3:09:5c:48:ff:ba:d3:12:20:fc:63:47:b3:6e:
         0c:7d:ca:7f:ba:d0:68:be:6c:4f:d7:cc:d9:ad:ca:21:8e:00:
         dd:1a:72:02:c4:22:cb:ac:81:ee:27:b6:21:a8:32:bf:e5:9d:
         f0:d6:6c:28:95:f7:09:10:92:35:4c:41:5d:09:99:46:6e:fb:
         a3:69:ad:5d:3f:12:4f:9a:ca:39:b1:8d:1a:9d:6e:d6:fc:af:
         a6:7d:56:90:1d:1c:87:42:ac:1e:d5:0b:e3:c2:11:e7:ee:8a:
         6f:fd:dc:1c:42:11:9c:a7:c5:a3:1b:20:05:95:30:51:c2:95:
         e3:af:7b:a1:d5:28:3e:00:95:e8:7d:31:bd:37:fa:7a:7e:ae:
         ef:e3:83:a4:c5:13:79:78:ac:c2:77:84:4a:d0:84:aa:4f:c1:
         50:eb:62:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:04:24 2025 by rpki-client