Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
File:                     1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft (raw, json)
Hash identifier:          3gB1tMyoh7SwJwTIjCpU/tZcYXJyyHv6DWKOCnvm28Q=
Subject key identifier:   62:EB:7C:BE:F3:8B:A1:BA:EC:D1:E8:15:84:AB:68:E0:B9:BC:97:CB
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Certificate issuer:       /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial:       0196A20950EAADA89241E5F30B5644CBAA1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
Manifest number:          1532
Signing time:             Mon 05 May 2025 20:00:41 +0000
Manifest this update:     Mon 05 May 2025 20:00:41 +0000
Manifest next update:     Tue 06 May 2025 20:00:41 +0000
Files and hashes:         1: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl (hash: jA0hHzi/gWIQIgCqKQQreoHgVyxWszHKiIsBzo8Qvpc=)
                          2: SRL2XQIBoKefODwi32v5f2eOog8.roa (hash: Dn7L+HcQU8DFcaAaO+5zWbM9Yhm50QvkCe2vCWCUn7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:09:50:ea:ad:a8:92:41:e5:f3:0b:56:44:cb:aa:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
        Validity
            Not Before: May  5 20:00:41 2025 GMT
            Not After : May  6 20:00:41 2025 GMT
        Subject: CN=62eb7cbef38ba1baecd1e81584ab68e0b9bc97cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c6:22:d3:55:bf:e2:19:08:51:ea:1f:14:18:
                    7b:67:12:66:99:8b:d6:8f:5b:35:90:d9:60:4f:52:
                    54:9f:ff:97:4b:88:ff:d5:a1:e3:88:fa:2d:32:4f:
                    93:a0:14:30:c3:03:6f:6c:00:97:4f:d0:d5:04:ff:
                    61:f0:f5:95:73:71:a1:b9:be:8e:09:0c:35:e4:0a:
                    3f:8d:b2:92:33:3e:f0:bc:fa:c8:08:4d:45:33:ac:
                    7a:78:7d:58:e8:39:0d:ec:76:0c:a0:29:37:68:06:
                    01:4d:4e:bf:75:9b:0d:fe:2e:9b:8e:af:5a:b5:05:
                    a1:8b:70:f6:e9:40:a2:56:cf:3e:e3:af:f5:fc:85:
                    11:95:46:63:89:2f:79:80:25:01:7e:a4:30:31:79:
                    f4:f8:d4:de:5d:9c:14:19:34:61:84:2c:57:24:93:
                    47:fd:a2:22:2b:a4:b7:f6:a4:fc:44:4f:80:30:1f:
                    60:56:37:99:86:34:01:1f:02:09:56:9a:08:5e:77:
                    1f:5a:42:b8:f5:c1:13:d2:37:5a:a2:f9:c3:e5:da:
                    37:ae:c3:98:85:b9:6a:d7:9f:1f:45:4a:c2:46:ed:
                    2f:ad:73:71:fd:11:19:f3:ff:cf:52:57:af:c4:d8:
                    34:ef:9f:21:22:4d:cf:b3:42:0e:fa:8f:78:94:ab:
                    0d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EB:7C:BE:F3:8B:A1:BA:EC:D1:E8:15:84:AB:68:E0:B9:BC:97:CB
            X509v3 Authority Key Identifier:
                keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:8a:26:93:50:1d:8e:4a:d7:5d:46:2b:0c:fe:d9:16:63:7a:
         65:71:b3:a1:66:b7:b0:cb:d5:20:1a:e2:bb:a8:28:a0:c2:6d:
         b7:74:3b:17:1a:33:07:18:0f:b9:b4:89:2e:57:84:e2:77:56:
         0b:18:c4:11:fa:d2:b6:3a:ed:0f:96:88:9a:e4:20:fa:85:6a:
         40:3f:b5:3c:1b:a6:be:8e:ea:c6:1e:a6:b0:3a:68:50:da:90:
         d6:08:9e:d8:ac:e1:fe:7c:a5:1f:35:42:33:91:76:6d:61:fd:
         67:0e:a0:21:83:3b:32:96:30:d2:0c:11:4c:d3:95:a7:44:a4:
         f9:69:73:4f:71:d4:8e:0a:7b:83:6a:f0:2d:9f:7a:34:76:5a:
         fa:e4:0c:e5:97:12:1a:02:23:aa:0b:43:ee:38:fe:9d:8b:ae:
         9f:15:6f:e7:c0:2b:ac:78:98:e9:18:64:c6:37:73:42:54:42:
         71:e9:bd:7f:03:1d:d8:31:8b:04:99:2e:11:93:76:32:da:9e:
         99:94:7c:ef:3b:18:fa:ce:76:74:e9:1d:fa:a6:cc:67:ee:22:
         73:70:36:54:a7:c4:25:2a:b9:b7:0b:52:4b:b1:c2:14:b9:f6:
         1a:f3:6c:0d:8e:0a:a0:28:b7:be:1b:38:12:09:f7:79:88:79:
         c4:76:c9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:04:55 2025 by rpki-client