Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
File:                     r06GL461X0-CVOLIWLcvQzl_4_o.mft (raw, json)
Hash identifier:          C6hyQUSoURghF0+uhVHp9aHi2mlDPCG5LJlUQUV92sQ=
Subject key identifier:   C4:53:DF:E2:DC:05:7C:15:AE:A2:CA:33:A6:90:B8:9B:55:32:59:DF
Authority key identifier: AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA
Certificate issuer:       /CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa
Certificate serial:       0196B3D911E71CB562E5CB06FF663544F59C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
Manifest number:          152D
Signing time:             Fri 09 May 2025 07:01:09 +0000
Manifest this update:     Fri 09 May 2025 07:01:09 +0000
Manifest next update:     Sat 10 May 2025 07:01:09 +0000
Files and hashes:         1: r06GL461X0-CVOLIWLcvQzl_4_o.crl (hash: p0tNqANX+eTjkYG0XIemJCKG6mgLvaOP4USBArSBI+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:d9:11:e7:1c:b5:62:e5:cb:06:ff:66:35:44:f5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa
        Validity
            Not Before: May  9 07:01:09 2025 GMT
            Not After : May 10 07:01:09 2025 GMT
        Subject: CN=c453dfe2dc057c15aea2ca33a690b89b553259df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ac:92:b0:98:c1:06:fe:22:18:fd:f2:cc:3d:
                    0f:92:6a:92:34:71:b7:dd:11:11:d4:bf:b6:06:e7:
                    03:e5:35:78:22:a5:f5:4e:01:2d:b7:f1:66:bf:00:
                    b0:12:16:9a:e7:a7:3c:4c:0e:f9:f9:1c:86:ab:4d:
                    a9:0a:02:64:a3:6b:73:a5:31:a1:b1:23:d5:f7:b3:
                    82:e6:f4:5a:ef:7e:48:2b:23:32:35:4b:7b:29:bb:
                    44:d1:a1:47:42:7a:c2:ce:76:7d:6d:00:89:19:b4:
                    13:32:0a:1c:f1:48:8e:58:f1:8a:b8:29:e9:11:8d:
                    be:0f:e7:28:15:0f:ff:c1:a3:53:7f:3c:d9:30:dc:
                    c5:91:59:f7:bf:cd:46:bb:17:91:75:e8:98:c0:42:
                    00:af:db:37:17:ce:ae:a6:95:6a:ea:a2:29:97:ca:
                    ac:ff:20:25:e9:cb:ff:c5:07:23:c7:8a:70:73:04:
                    a3:30:d1:72:92:ad:cc:be:63:fd:41:fe:49:e0:0d:
                    cb:93:62:ba:f6:3f:7b:4c:6f:00:e1:62:75:2a:34:
                    a5:f0:d3:43:e7:e3:d3:47:39:cd:34:15:24:23:da:
                    f9:31:07:e9:e3:77:78:4d:6b:c2:f9:02:dd:cf:d9:
                    eb:2d:3e:2f:03:96:77:c8:1c:bf:30:bb:db:38:37:
                    92:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:53:DF:E2:DC:05:7C:15:AE:A2:CA:33:A6:90:B8:9B:55:32:59:DF
            X509v3 Authority Key Identifier:
                keyid:AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1d:f0:b0:70:f4:4a:0a:60:25:d0:da:e2:61:ac:aa:8b:3f:
         74:79:14:03:ef:d3:0e:f8:b6:8a:bc:c1:6d:dd:a2:15:c4:0d:
         61:4c:32:73:6f:0a:20:d4:59:82:d1:18:93:ca:2e:3a:e0:32:
         17:f9:8d:af:c9:14:c6:9e:f6:51:c9:c4:c9:0b:0b:2e:28:a5:
         08:d2:38:85:77:c7:ad:08:3c:51:af:c8:3e:56:5d:00:e1:14:
         1a:b7:02:ec:fc:fe:13:cb:ae:ae:23:db:15:17:78:e9:24:82:
         e4:bd:83:44:12:c9:97:b6:ac:9a:85:c7:c2:70:34:90:e5:2f:
         3c:88:62:5f:95:3b:2f:d4:9f:fe:4f:44:5f:df:45:65:90:8f:
         c5:05:8c:6b:bc:f4:b6:69:aa:4b:98:1b:63:25:ae:39:df:57:
         75:cf:b6:60:78:49:86:d2:4e:cd:58:5f:93:71:01:78:13:29:
         24:69:8e:a9:a0:63:49:8a:50:17:a4:34:19:82:68:15:23:f6:
         90:e9:89:e6:d7:4b:b7:ca:02:3a:1c:06:8c:a2:9f:c4:7e:5e:
         6a:81:f1:bc:46:35:e4:b7:a3:6c:7a:43:4e:9f:ba:d1:7c:ca:
         44:57:7a:78:ea:63:d1:01:d8:ad:2b:ec:83:d4:a4:7a:00:b3:
         dd:a8:14:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaz2RHnHLVi5csG/2Y1RPWcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNGU4NjJmOGViNTVmNGY4MjU0ZTJjODU4YjcyZjQzMzk3
ZmUzZmEwHhcNMjUwNTA5MDcwMTA5WhcNMjUwNTEwMDcwMTA5WjAzMTEwLwYDVQQD
EyhjNDUzZGZlMmRjMDU3YzE1YWVhMmNhMzNhNjkwYjg5YjU1MzI1OWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6ySsJjBBv4iGP3yzD0PkmqSNHG3
3RER1L+2BucD5TV4IqX1TgEtt/FmvwCwEhaa56c8TA75+RyGq02pCgJko2tzpTGh
sSPV97OC5vRa735IKyMyNUt7KbtE0aFHQnrCznZ9bQCJGbQTMgoc8UiOWPGKuCnp
EY2+D+coFQ//waNTfzzZMNzFkVn3v81GuxeRdeiYwEIAr9s3F86uppVq6qIpl8qs
/yAl6cv/xQcjx4pwcwSjMNFykq3MvmP9Qf5J4A3Lk2K69j97TG8A4WJ1KjSl8NND
5+PTRznNNBUkI9r5MQfp43d4TWvC+QLdz9nrLT4vA5Z3yBy/MLvbODeSSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRT3+LcBXwVrqLKM6aQuJtVMlnfMB8GA1UdIwQY
MBaAFK9Ohi+OtV9PglTiyFi3L0M5f+P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjA2R0w0NjFYMC1DVk9MSVdMY3ZRemxfNF9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny85ZTM3Y2UtMmM3Ny00NTBiLTk0Yzct
NTBkMmY3YTEwOTYyLzEvcjA2R0w0NjFYMC1DVk9MSVdMY3ZRemxfNF9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny85ZTM3Y2UtMmM3Ny00NTBiLTk0YzctNTBkMmY3YTEwOTYy
LzEvcjA2R0w0NjFYMC1DVk9MSVdMY3ZRemxfNF9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAR3wsHD0
SgpgJdDa4mGsqos/dHkUA+/TDvi2irzBbd2iFcQNYUwyc28KINRZgtEYk8ouOuAy
F/mNr8kUxp72UcnEyQsLLiilCNI4hXfHrQg8Ua/IPlZdAOEUGrcC7Pz+E8uuriPb
FRd46SSC5L2DRBLJl7asmoXHwnA0kOUvPIhiX5U7L9Sf/k9EX99FZZCPxQWMa7z0
tmmqS5gbYyWuOd9Xdc+2YHhJhtJOzVhfk3EBeBMpJGmOqaBjSYpQF6Q0GYJoFSP2
kOmJ5tdLt8oCOhwGjKKfxH5eaoHxvEY15LejbHpDTp+60XzKRFd6eOpj0QHYrSvs
g9SkegCz3agUfw==
-----END CERTIFICATE-----
Generated at Fri May 9 10:31:05 2025 by rpki-client