Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
File:                     C0ojfRF9934LiqUS9vJfsgf5orE.mft (raw, json)
Hash identifier:          QmNi2KoL61tCelUHe55swFIeGyok0KMHXkg/rzwBbzY=
Subject key identifier:   6F:4C:CA:CF:5B:31:C7:9E:37:46:80:A2:1B:CD:A1:06:95:D7:2F:DD
Authority key identifier: 0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
Certificate issuer:       /CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Certificate serial:       0196AC8D0D321544AD253457D5248C315FFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
Manifest number:          10C6
Signing time:             Wed 07 May 2025 21:00:47 +0000
Manifest this update:     Wed 07 May 2025 21:00:47 +0000
Manifest next update:     Thu 08 May 2025 21:00:47 +0000
Files and hashes:         1: C0ojfRF9934LiqUS9vJfsgf5orE.crl (hash: LTUzS7d5sOsHGwdTjTiikSL3Vwrs3uAuAXeTPUWB/vA=)
                          2: ubaYGhsK3un9FzpeOuJImEsVY0k.roa (hash: GKSurghCGTsvWWfo6kF8DtoCXANGJM6Q52lyK44WE3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:8d:0d:32:15:44:ad:25:34:57:d5:24:8c:31:5f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
        Validity
            Not Before: May  7 21:00:47 2025 GMT
            Not After : May  8 21:00:47 2025 GMT
        Subject: CN=6f4ccacf5b31c79e374680a21bcda10695d72fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5d:b3:8a:92:8c:d8:d5:15:5d:f7:4a:77:60:
                    24:e7:94:62:6e:94:bb:e4:90:f3:2a:5b:e9:d6:c7:
                    5f:36:13:59:95:54:4b:a0:3d:57:68:a4:ec:76:b4:
                    8f:ec:da:70:00:d6:99:da:b1:fb:11:37:85:f6:fe:
                    76:f1:6f:60:5a:1c:36:b6:81:50:15:3a:e8:5f:ee:
                    47:c8:e8:68:17:47:aa:62:22:da:d4:af:96:cb:49:
                    a3:8a:cf:7d:d3:dd:12:65:32:ba:62:46:0d:2e:53:
                    2e:ee:67:53:ff:91:38:63:2f:b0:73:58:0a:0a:96:
                    43:6b:09:05:11:4a:cb:a2:51:13:53:fd:82:e1:9f:
                    28:fa:54:f6:24:bf:48:75:26:a5:71:4f:43:15:e2:
                    b6:d0:90:74:4e:7d:d6:60:8f:6c:a1:0f:0b:92:5e:
                    1a:0f:bb:5d:d0:fa:14:08:9a:30:9c:2f:3d:6c:da:
                    df:9e:1d:ad:13:94:5b:47:8e:40:40:e5:25:00:40:
                    af:23:74:3c:a7:c8:16:48:c7:db:ee:88:da:a8:29:
                    2c:13:c0:19:18:7c:f3:63:98:d7:e7:d1:34:1c:08:
                    b5:14:ee:dc:60:f5:62:67:22:e6:2c:33:08:f1:f3:
                    2c:6c:dc:1c:a5:8b:ac:5e:ad:6c:6a:2a:b5:36:45:
                    45:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4C:CA:CF:5B:31:C7:9E:37:46:80:A2:1B:CD:A1:06:95:D7:2F:DD
            X509v3 Authority Key Identifier:
                keyid:0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:93:60:70:b4:9e:84:9f:b2:7c:04:18:35:cc:8c:b0:41:fc:
         c3:b7:ce:6c:ec:a3:82:28:23:c6:68:63:1b:07:8e:64:d2:6f:
         aa:2f:51:6f:30:fb:d1:0c:a0:47:9f:b4:eb:21:a6:db:62:25:
         68:a8:27:7d:e0:ad:70:2c:f4:f9:ea:cf:f0:e5:79:a3:eb:77:
         2b:82:54:89:fd:73:9e:98:a1:0c:ea:93:4d:95:71:40:d0:f4:
         29:86:bd:27:9a:29:2c:b5:dc:f7:e6:60:8e:0b:dc:f5:31:ed:
         42:bc:7d:4e:cd:f7:0f:c8:a1:dd:17:82:cd:da:5f:3f:b6:90:
         40:74:a5:71:5c:03:12:5b:7f:cc:ae:45:7f:40:83:3a:50:41:
         1f:34:15:ec:fa:a8:9e:78:39:24:43:af:d7:0b:98:c8:27:30:
         fe:d3:bd:c6:ba:db:8f:92:a3:98:11:72:42:5a:53:ab:3b:c1:
         1e:45:64:29:44:aa:36:77:9c:40:8f:52:e1:5c:fc:38:93:4b:
         66:7c:be:01:11:87:66:84:49:65:69:a1:57:13:66:93:d3:f6:
         98:e8:39:74:a9:5b:d0:c1:b0:71:f1:e2:51:01:0e:5c:e2:03:
         0f:c1:a1:e5:de:54:4e:51:26:bf:95:a5:b0:cf:7a:9c:9c:3e:
         86:29:bb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:33:59 2025 by rpki-client