Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
File:                     OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json)
Hash identifier:          QmIdspHWkdJSDjCgxP5tW1bzO8ELKpjCWTTVO6C//oY=
Subject key identifier:   F2:05:98:F1:F5:3C:A9:FD:DF:E4:95:4E:C1:7C:C2:E8:8E:67:78:83
Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Certificate issuer:       /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Certificate serial:       0196C7283E349D0C5B044DA3246681C77E16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
Manifest number:          04AF
Signing time:             Tue 13 May 2025 01:00:25 +0000
Manifest this update:     Tue 13 May 2025 01:00:25 +0000
Manifest next update:     Wed 14 May 2025 01:00:25 +0000
Files and hashes:         1: BsLLTJoL5Z4HGp4lHrRp2sggxy8.roa (hash: KOPhzfVSci9RxNPGk2QlpxdIKfmzye/4QJQFoBktHeg=)
                          2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: 1uTk30jyn6iYR4QRdjHIGCSNPE0zq4P8c5vqwhfGyds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 20:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:28:3e:34:9d:0c:5b:04:4d:a3:24:66:81:c7:7e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
        Validity
            Not Before: May 13 01:00:25 2025 GMT
            Not After : May 14 01:00:25 2025 GMT
        Subject: CN=f20598f1f53ca9fddfe4954ec17cc2e88e677883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4b:c4:db:39:d4:64:61:23:c4:cc:cf:e9:ec:
                    36:49:76:2e:3d:c5:5f:b3:4d:57:aa:40:34:d7:8b:
                    45:74:62:91:a1:67:ca:f3:74:e9:5c:5b:d2:34:09:
                    74:a4:d2:cd:bd:45:c0:23:a7:55:33:0a:27:1e:ab:
                    8f:92:46:7b:0d:28:01:c4:17:00:af:d9:1e:13:a9:
                    03:c4:dc:0d:7b:e7:e9:02:75:d5:33:94:91:5b:18:
                    65:ea:3c:c7:18:8a:76:0c:4c:ce:de:5d:15:b1:14:
                    7b:a6:6e:0b:c3:45:15:5e:e7:45:19:e5:7b:b8:22:
                    31:d0:7c:28:3c:2e:f3:9e:a9:20:13:08:b0:25:3e:
                    a4:fb:c5:ea:21:3a:de:00:b4:b6:2e:b3:cc:a7:e8:
                    7f:1e:c5:4b:e6:db:d7:ec:e1:a9:23:d9:47:56:26:
                    4a:83:a8:7f:be:98:b8:32:52:61:cf:43:49:a2:a7:
                    f0:1a:de:cc:0c:b3:c1:5e:e6:bd:cc:ec:50:96:2f:
                    a7:11:10:e5:7a:e0:d9:bc:86:3b:b7:6d:17:f1:a3:
                    6b:10:01:33:8e:91:cb:3b:3e:f0:3f:4b:a3:45:66:
                    74:49:c0:36:29:83:84:37:24:32:1c:08:70:ba:b0:
                    8e:82:51:63:2e:aa:ec:ac:e5:05:ef:7c:5b:df:fb:
                    b6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:05:98:F1:F5:3C:A9:FD:DF:E4:95:4E:C1:7C:C2:E8:8E:67:78:83
            X509v3 Authority Key Identifier:
                keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:9c:c6:74:3c:cc:81:37:43:67:48:a3:cf:15:82:99:25:3f:
         37:b9:1a:ad:6d:91:74:92:bd:e7:52:d2:1c:fe:ba:de:80:63:
         94:a8:d0:fa:79:27:06:62:f4:c3:e1:4d:53:11:d6:d4:96:a8:
         e2:2e:b2:94:94:f7:aa:85:94:f1:8b:17:8d:46:54:eb:05:d0:
         b9:a4:8f:7d:b2:24:fe:cd:de:a3:b9:0e:bd:e6:93:e7:16:bc:
         03:2f:9a:1f:4f:1c:ce:f3:45:ba:a5:7e:87:3e:39:17:00:b7:
         71:f7:f7:11:3e:4a:7e:b5:71:fd:c5:93:7d:8c:46:ef:74:48:
         1f:87:45:91:f2:ad:e8:86:ac:c4:ef:4e:fe:40:c0:20:cf:ce:
         77:8c:9f:f7:90:d2:70:53:85:f4:7a:63:98:a8:7e:c6:0e:de:
         d2:5b:52:0a:2f:91:3f:18:c5:2d:54:11:6a:66:4c:60:cf:b8:
         58:81:dd:ca:a6:a8:66:40:19:cc:51:cd:58:d2:2f:f3:8c:d0:
         1e:14:39:d4:3b:ff:b5:bf:a6:ed:bb:24:69:d9:6c:7d:b8:fb:
         f0:88:c9:ad:1c:e8:80:8d:af:3c:7e:66:4b:da:02:e8:7c:35:
         a1:1a:cf:e1:f8:15:5f:d7:e3:d3:7f:7d:6c:be:13:f0:97:3f:
         a1:47:77:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:03:00 2025 by rpki-client