Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
File:                     I7GUMIfOaWI-drIUWzR5rCBLock.mft (raw, json)
Hash identifier:          JEv3KlHGCeMPqKccbtjsI/Bb/ibeJRxHrzonZF9Jc9Q=
Subject key identifier:   3B:28:68:CB:56:A6:5D:8F:B7:54:9F:A9:93:6F:23:71:3D:44:55:D0
Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
Certificate issuer:       /CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Certificate serial:       0196A79D24161A58AE0F726362E7E6056BA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
Manifest number:          1467
Signing time:             Tue 06 May 2025 22:00:15 +0000
Manifest this update:     Tue 06 May 2025 22:00:15 +0000
Manifest next update:     Wed 07 May 2025 22:00:15 +0000
Files and hashes:         1: I7GUMIfOaWI-drIUWzR5rCBLock.crl (hash: ybiZ6IZ3K5nK0nsS4sdXoTS6Hv+9lbdcn+FNcuOj7RA=)
                          2: IGzDnKyfU3XrsCi1kVIq3v9WjnM.roa (hash: BCjdpahib4P29wEhEZ+5HfDxKnWj0l2OSsP7lZ3IOHg=)
                          3: fngY7vAjtnIa6khyzBr6ohfARXc.roa (hash: 8j7K0AdGmWd/+RMVsdDrX0khITQq1MTMhTuPXkbPnqc=)
                          4: xgdlAL2WKr_Js4V_ZLjPaz6bev8.roa (hash: CfOyHBtQR8zjYYv9qA3Dd8n5he3YeIT+MsIzoT30dKc=)
                          5: z5Ucz1kkGg56QZyAblN2WefSoGM.roa (hash: 5hK/qHn0csimMvRktmqCqsq2To8mi7zen0Vo1KFJGyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:9d:24:16:1a:58:ae:0f:72:63:62:e7:e6:05:6b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9
        Validity
            Not Before: May  6 22:00:15 2025 GMT
            Not After : May  7 22:00:15 2025 GMT
        Subject: CN=3b2868cb56a65d8fb7549fa9936f23713d4455d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a2:f4:fc:f8:86:46:86:f9:27:10:cf:93:76:
                    b0:74:49:04:3d:cc:42:2a:20:94:b5:7d:90:51:10:
                    ae:c3:f7:ec:1a:c4:b0:5c:b4:90:57:1d:b1:e8:c5:
                    b8:78:6c:88:89:d4:17:cd:04:f4:40:b1:dc:0b:2e:
                    bf:37:32:d9:db:cb:53:6d:a2:4c:50:50:0a:af:93:
                    43:a4:9c:de:2d:46:82:cc:23:d0:b1:cf:3b:82:0f:
                    43:14:b0:fa:d1:78:cf:96:b9:8d:02:c6:42:e2:16:
                    ca:1a:81:21:54:e4:59:6e:0b:4f:78:46:a1:cc:a0:
                    b9:55:db:71:e3:60:ef:e8:64:81:3a:6c:3f:f3:b3:
                    4f:68:40:b6:0e:bb:d4:6b:1e:9f:7f:77:44:5e:9f:
                    ae:89:77:ce:be:10:f0:83:6f:42:dc:eb:b6:b1:60:
                    c8:13:17:9d:26:a8:ee:2d:89:c7:5d:29:66:04:cf:
                    65:72:5d:db:17:cf:df:f4:21:52:27:95:38:69:5b:
                    dd:b1:fe:43:9b:ed:6f:78:97:2a:28:aa:16:06:68:
                    ab:22:2d:4e:1e:a5:0a:6a:f7:d3:ab:b0:15:31:b0:
                    26:56:10:ea:c7:53:b3:4f:a8:15:dd:d7:e1:0e:ff:
                    36:a4:a7:a1:08:6d:bc:a6:f8:87:5e:11:f3:a5:ed:
                    d8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:28:68:CB:56:A6:5D:8F:B7:54:9F:A9:93:6F:23:71:3D:44:55:D0
            X509v3 Authority Key Identifier:
                keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:78:73:60:ca:82:f5:78:7a:bf:c1:98:96:a4:92:fd:a8:f5:
         12:88:11:fb:07:40:33:20:32:b6:2f:4d:2d:6b:5e:ea:57:37:
         41:56:2a:e8:62:22:9b:bb:47:fd:95:e5:91:13:ac:c0:d4:52:
         81:26:31:bf:62:23:60:88:b9:b8:ff:14:3d:71:8c:63:de:4a:
         32:69:58:7e:8c:e9:2e:e9:ff:c1:0a:f9:b0:88:2b:66:d0:cf:
         bb:ca:4f:e7:55:e5:cf:f2:15:cf:f3:77:aa:44:ea:6f:9d:18:
         98:de:01:1e:ce:ec:02:a0:15:11:81:c1:06:f7:7c:b7:93:86:
         d6:6c:40:c2:d5:12:a5:72:e7:70:74:f2:c1:97:0a:c6:6e:d7:
         1f:7f:b2:b6:5f:b3:f8:33:ab:4e:2c:1e:55:ce:c2:0e:e8:c6:
         61:31:bb:fe:55:63:f7:76:a5:21:6d:ed:97:f8:e0:c2:f8:5c:
         00:93:aa:d5:14:fd:82:e4:81:ae:b0:d8:67:db:a2:6f:62:19:
         00:5c:61:e0:06:7f:3e:88:a0:77:7c:e7:03:7e:41:d7:32:49:
         91:03:ac:ef:45:eb:c7:39:06:49:b5:2c:c1:3d:73:45:cf:6e:
         f0:2d:29:f8:0d:36:85:15:7a:a9:f9:42:87:2f:72:6b:9f:89:
         12:c0:2f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:34:55 2025 by rpki-client