Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
File:                     0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft (raw, json)
Hash identifier:          zGa+M3GsDJroK/HTTAOYqbDjYm7nS4TP+NxQ23ZTJaQ=
Subject key identifier:   D2:AE:CA:9C:B4:8E:B3:E6:72:1A:C7:6E:11:DF:0D:18:49:40:2C:37
Authority key identifier: D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6
Certificate issuer:       /CN=d095364395ccfd8543977358fa9b71f9271544f6
Certificate serial:       0196B890C4503AC0B7CA284C2C6E9486DE7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
Manifest number:          0CFC
Signing time:             Sat 10 May 2025 05:00:17 +0000
Manifest this update:     Sat 10 May 2025 05:00:17 +0000
Manifest next update:     Sun 11 May 2025 05:00:17 +0000
Files and hashes:         1: 0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl (hash: IVx/9aYJskYocBgmBF37Y019QSoMhYCCFpB3atxSx+E=)
                          2: WMhbwojz363aPcIT4pKLzOiKIQA.roa (hash: t03L1DneJHTF/s4FlG1CvztpxUkTwBNYCp5o+q76WB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:90:c4:50:3a:c0:b7:ca:28:4c:2c:6e:94:86:de:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d095364395ccfd8543977358fa9b71f9271544f6
        Validity
            Not Before: May 10 05:00:17 2025 GMT
            Not After : May 11 05:00:17 2025 GMT
        Subject: CN=d2aeca9cb48eb3e6721ac76e11df0d1849402c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c6:5a:33:ae:4f:b1:7a:55:fb:6b:81:39:f4:
                    ce:33:07:71:cd:22:51:28:af:a4:95:a7:98:fa:2c:
                    cb:1c:b6:22:4a:c8:e5:9e:e5:1e:27:4e:31:f6:c7:
                    42:72:ab:ae:4f:5c:8c:57:15:6b:d3:f4:1e:5e:a2:
                    14:bb:91:9c:88:03:2d:3c:72:32:1d:12:ea:1a:39:
                    57:ad:e1:92:0e:38:55:50:2a:5e:f0:c0:f9:46:29:
                    d6:e6:4e:3e:3e:c9:8b:89:2c:5e:06:c8:9d:7e:8c:
                    38:d6:d9:34:9e:77:05:17:5b:0c:9e:a1:49:f5:7b:
                    93:de:56:c8:8f:ae:f2:a3:cd:58:cc:33:32:0a:5f:
                    f7:df:a2:5a:b7:79:23:8f:de:53:d9:b4:c5:94:90:
                    3d:e3:74:cc:41:11:33:39:65:b7:e9:23:b6:2b:f7:
                    4c:20:ea:67:ba:1d:54:01:e8:bb:1c:6e:78:8e:1d:
                    9b:d2:38:1b:d8:08:aa:b7:a0:bf:d7:28:9b:3d:f3:
                    29:a3:6b:73:76:ca:ab:c8:52:cc:ee:de:48:2e:42:
                    db:6d:84:d9:6e:19:09:fd:00:c4:d9:59:48:14:53:
                    ec:51:d1:00:f1:8a:f3:1d:d3:f3:27:e8:a6:20:3f:
                    17:7b:9f:7b:a3:db:e6:e8:f2:9d:f2:74:bb:5b:4a:
                    37:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AE:CA:9C:B4:8E:B3:E6:72:1A:C7:6E:11:DF:0D:18:49:40:2C:37
            X509v3 Authority Key Identifier:
                keyid:D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:6e:14:5c:03:e3:df:5d:2d:df:c7:0d:82:35:f1:0c:96:f2:
         80:2f:b6:55:eb:d2:87:41:21:91:aa:ea:67:88:b3:26:03:20:
         52:aa:2a:fe:0d:1d:ff:fb:f4:af:f4:3d:e9:fc:32:85:22:08:
         6e:5e:d0:66:47:5c:d7:8b:fe:91:c4:e2:46:05:16:a3:3b:57:
         7c:14:c5:e2:5e:10:f0:99:d5:a4:a2:15:36:f3:89:43:16:c5:
         e0:82:90:af:b0:f9:3c:6a:6f:ac:23:62:a0:20:65:bc:0a:f0:
         3b:d9:59:a4:d2:c9:7c:5f:c8:5f:6c:31:4e:b0:86:00:35:9b:
         68:b7:94:d2:42:9d:e8:c4:f2:cf:88:56:1b:5a:fd:a8:1f:1f:
         10:8e:c4:7a:9a:e5:2a:03:8b:a7:d5:b2:7e:83:98:af:df:4a:
         26:ed:51:60:11:d2:16:fe:b1:a4:98:44:c7:d0:46:4b:66:43:
         88:3d:c9:33:67:bd:fa:14:d1:ba:eb:6b:cb:2f:79:44:9f:aa:
         27:07:d0:3f:a8:34:a7:11:46:0f:09:8f:54:be:ff:f6:86:b0:
         fd:20:22:37:f5:46:2b:6d:55:a4:e0:2e:87:58:0c:15:38:f7:
         76:25:c2:3b:48:41:e6:57:5c:f5:e8:ea:9d:61:05:2b:ae:5f:
         7e:8d:03:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:26:11 2025 by rpki-client