Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
File:                     AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft (raw, json)
Hash identifier:          fZp5GVMPhZOlnFr131zbUeRTzgRKJsoDEfpXjjiUYpA=
Subject key identifier:   8F:B7:0D:F6:B6:CF:B8:4C:58:FC:5E:4D:AB:E5:64:CB:48:08:D9:F7
Authority key identifier: 01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
Certificate issuer:       /CN=01bae509df7ec524d4f750ff809274ab00649322
Certificate serial:       0196A68A7284D65582E4A6DF0F40B896D656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
Manifest number:          0F9B
Signing time:             Tue 06 May 2025 17:00:13 +0000
Manifest this update:     Tue 06 May 2025 17:00:13 +0000
Manifest next update:     Wed 07 May 2025 17:00:13 +0000
Files and hashes:         1: AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl (hash: 2xbKCiBlWuXpL4yQOBuIF5w/5ERIIW/TNBCdw8lX9tU=)
                          2: r9ivPCH7B-EIjmvOeGIsU1bVmJw.roa (hash: ZoMymQkL6qzTxWYBfF5BxJb7oUgkp1cRchZsdJ96SAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 17:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:8a:72:84:d6:55:82:e4:a6:df:0f:40:b8:96:d6:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bae509df7ec524d4f750ff809274ab00649322
        Validity
            Not Before: May  6 17:00:13 2025 GMT
            Not After : May  7 17:00:13 2025 GMT
        Subject: CN=8fb70df6b6cfb84c58fc5e4dabe564cb4808d9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bc:ed:b1:3a:45:97:e2:11:d3:0d:b3:02:ac:
                    f3:2c:53:1f:75:0c:06:99:63:d8:ed:78:dc:ca:92:
                    dd:8f:3f:6a:fb:8a:64:6a:fa:07:b0:dc:2c:d4:50:
                    e1:cd:e9:57:76:ff:26:cb:33:82:15:8f:c3:5a:65:
                    d3:cf:b4:f5:66:29:da:e1:31:40:5f:5f:93:a6:bc:
                    d9:57:7a:d3:a0:a4:07:73:fc:da:98:11:1a:41:f2:
                    ed:b3:9c:be:9a:7c:77:93:42:dd:74:31:73:b5:3d:
                    58:b9:89:f9:32:82:97:00:8c:64:84:70:74:2f:c4:
                    21:e8:67:01:19:72:cd:9d:3c:5f:e9:c7:5f:ef:39:
                    81:7f:5c:75:00:aa:ec:5d:1f:81:86:1e:ab:4b:f4:
                    6f:1c:36:01:c1:01:f6:e6:d2:bf:4f:9a:3c:eb:e2:
                    ea:cb:7d:e8:43:03:39:57:c0:4c:4a:a5:ac:a5:b5:
                    e2:4e:2b:9e:6b:2b:34:d7:b3:30:a2:4c:19:29:b9:
                    36:84:70:4f:91:ad:19:63:a4:76:ee:62:96:32:71:
                    03:c3:70:9a:a9:35:0d:45:f4:d2:6b:da:f0:84:df:
                    50:17:27:42:49:42:e0:b6:d2:bb:92:d4:41:54:c8:
                    59:26:ab:16:6c:cc:bc:e9:b8:5e:83:a2:26:38:20:
                    b8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B7:0D:F6:B6:CF:B8:4C:58:FC:5E:4D:AB:E5:64:CB:48:08:D9:F7
            X509v3 Authority Key Identifier:
                keyid:01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:44:32:bf:c1:99:dd:f3:22:0d:65:86:dc:66:d6:05:05:cb:
         9f:00:9b:a9:11:cd:90:4c:34:da:97:2d:a6:cb:2b:ee:07:c2:
         1b:1b:14:f8:59:9c:ed:94:31:56:eb:b2:cd:fd:67:d7:be:e7:
         00:19:57:ff:f3:fa:10:63:7e:d6:f1:b9:25:d3:d6:3a:e5:db:
         66:87:b1:fc:60:6c:ce:6d:00:7b:cc:ed:05:11:0f:24:e4:10:
         ce:53:25:8a:ef:bf:ab:55:05:4f:dc:4b:64:69:6a:ce:dc:54:
         d1:6d:00:8d:94:c7:e1:fb:cf:ae:dd:b0:62:c8:61:32:22:53:
         38:7d:96:e0:be:b6:56:2f:85:fa:3c:55:41:71:11:3f:6e:af:
         1b:4d:eb:2d:d4:7f:d6:4a:ca:f4:1a:14:b3:1c:92:8c:2f:7a:
         e2:c2:0e:1d:65:83:6b:da:2f:71:eb:fe:75:1d:eb:6b:40:e1:
         62:a7:df:f9:1d:8d:59:27:62:09:14:ac:e6:c5:b7:5e:19:b2:
         53:dd:12:7e:f9:b5:fe:89:af:49:13:27:56:49:e8:cc:af:c0:
         ff:90:bc:9a:8c:26:c9:9c:65:2d:d2:fb:99:3b:63:9f:5c:55:
         a9:f5:75:1d:c6:a5:ee:fc:54:f3:3d:63:24:68:ba:04:f1:c7:
         d1:ea:8b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:21:26 2025 by rpki-client