Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
File:                     eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft (raw, json)
Hash identifier:          YOraI2n+M2Q2v6fspZIWSHkGu9eu9aDIM9ss23RZtAY=
Subject key identifier:   BD:1D:25:7A:BA:A2:13:EC:D5:DA:ED:CA:2B:5C:09:DC:36:91:67:35
Authority key identifier: 78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F
Certificate issuer:       /CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
Certificate serial:       0196B1EA80EACF3F003CFC84370B3562F364
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
Manifest number:          152B
Signing time:             Thu 08 May 2025 22:00:57 +0000
Manifest this update:     Thu 08 May 2025 22:00:57 +0000
Manifest next update:     Fri 09 May 2025 22:00:57 +0000
Files and hashes:         1: eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl (hash: uaBBgE3X+09HGmWOJX0ThAvOJGusm7SLC+YRQpT9Ns8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:ea:80:ea:cf:3f:00:3c:fc:84:37:0b:35:62:f3:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
        Validity
            Not Before: May  8 22:00:57 2025 GMT
            Not After : May  9 22:00:57 2025 GMT
        Subject: CN=bd1d257abaa213ecd5daedca2b5c09dc36916735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:36:b3:9b:65:73:8d:06:0a:7c:69:aa:bc:bc:
                    68:57:01:05:6c:a0:f8:50:26:14:66:bd:78:d2:dd:
                    df:b4:b4:13:df:bf:18:c4:df:68:64:42:7e:d4:e6:
                    f7:97:70:8b:00:99:71:05:53:4a:cf:03:53:d3:8f:
                    67:ed:71:3c:68:2c:ec:96:36:9a:ff:c1:97:82:1c:
                    88:96:33:0d:8d:c8:d3:86:8c:fd:27:70:3b:40:e7:
                    94:a2:94:46:7d:68:0f:65:22:60:0c:ea:75:a5:ef:
                    2a:4f:32:d2:cc:4a:06:3f:fd:4a:6f:7a:fc:4c:ff:
                    b0:20:b6:e6:f3:45:5e:04:b9:c2:9a:2f:39:8f:fe:
                    9a:bf:46:d8:23:b0:36:8c:bd:44:d3:54:29:15:3b:
                    c4:4d:d1:35:39:ac:9d:59:98:de:6b:40:bb:59:82:
                    8a:1a:80:ae:c2:02:41:03:23:aa:13:88:90:17:f2:
                    39:a5:5f:b9:eb:6e:72:c6:24:ee:f4:4b:82:30:d9:
                    bf:18:0c:5a:c2:76:92:e1:c6:18:3b:ba:27:6d:03:
                    6a:5c:ea:16:e2:0f:52:00:c6:81:1c:63:84:65:cb:
                    ae:2b:dd:f6:7b:5c:e3:e2:02:1d:b2:b3:09:0e:b1:
                    37:e5:65:e0:d4:a4:56:ca:e5:69:0a:97:d9:5b:5f:
                    6b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1D:25:7A:BA:A2:13:EC:D5:DA:ED:CA:2B:5C:09:DC:36:91:67:35
            X509v3 Authority Key Identifier:
                keyid:78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d4:c0:51:72:e0:fe:cf:b1:7e:f2:13:e4:88:0a:56:5b:66:
         5b:ae:6b:38:89:93:10:a4:bc:3f:99:7f:05:81:bb:7b:09:ce:
         0a:b4:06:b5:ff:e7:70:4e:bb:88:ba:2d:bc:a1:94:4f:7c:66:
         75:08:ea:a2:f5:f2:e6:a4:58:c6:36:61:3c:08:71:0f:06:66:
         21:16:93:8e:48:07:4a:02:cb:d8:1c:58:52:bc:9b:46:aa:4c:
         27:8d:e4:ab:59:d9:74:4e:03:82:30:72:48:af:37:8c:e6:40:
         b8:8e:e0:9f:8f:37:c7:3d:2f:a8:4b:ae:4b:37:6d:e9:a3:d1:
         19:6b:9c:3f:54:b9:eb:02:46:c4:12:f2:cf:21:4a:07:ca:23:
         5c:9b:2f:4d:f4:fc:6d:01:3a:de:e6:2a:e7:1c:b6:34:98:54:
         32:83:c6:e8:a4:ef:1c:2b:b3:45:1d:97:a2:92:12:a3:13:78:
         dc:c1:44:42:04:dd:19:3c:4d:f3:05:c2:44:4c:16:d8:17:6f:
         27:7f:6e:76:54:bc:f7:f9:e7:59:67:b1:cd:93:be:b4:44:01:
         64:5a:8f:53:94:e8:9d:ad:05:05:94:3e:78:85:d9:33:b0:7a:
         01:56:cc:0c:c0:f5:6f:0d:9a:63:68:de:63:82:ae:ba:39:8e:
         82:2f:f1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:54:29 2025 by rpki-client