Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
File:                     hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json)
Hash identifier:          HyNTirVHWdbqTKReZlOPqS7EeVZ8pyv3Bg8+KSCzSkA=
Subject key identifier:   10:7A:39:97:03:81:EA:C0:71:8C:57:3A:07:47:1F:1B:BE:A1:09:50
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Certificate issuer:       /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial:       0196A2094F8674CCD8AF73D0224DAFFE0415
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
Manifest number:          14B7
Signing time:             Mon 05 May 2025 20:00:41 +0000
Manifest this update:     Mon 05 May 2025 20:00:41 +0000
Manifest next update:     Tue 06 May 2025 20:00:41 +0000
Files and hashes:         1: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: +SqUrlOW3Q4C/5VUleLogamJma6e6PJjIkY2CK/7WG4=)
                          2: jg1_qGOypFs-Omg84eci-XkXn6M.roa (hash: Hutcm4lZFs78dltAQDGy1uUI7H+2kpc6tWhDJ8JMDfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:09:4f:86:74:cc:d8:af:73:d0:22:4d:af:fe:04:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
        Validity
            Not Before: May  5 20:00:41 2025 GMT
            Not After : May  6 20:00:41 2025 GMT
        Subject: CN=107a39970381eac0718c573a07471f1bbea10950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:ad:8f:90:fd:df:f6:ea:9d:4d:b2:56:a9:
                    19:b9:b9:0f:98:64:4b:4c:42:6a:ee:85:14:f4:06:
                    a8:b9:59:84:57:de:7d:9b:1b:22:64:e0:90:0a:a6:
                    60:8e:38:4d:e9:b0:b6:3e:43:43:0b:99:fa:92:07:
                    11:00:fb:73:7c:45:9d:ed:91:c7:5e:d6:59:c2:00:
                    38:07:8a:24:7c:43:f7:95:4a:17:13:cd:23:4e:fb:
                    81:ca:c2:a3:a9:2b:de:41:31:e5:1a:74:13:83:35:
                    65:bf:d9:9a:45:4c:8b:a5:b8:1e:85:6e:57:8c:ca:
                    01:87:47:99:ba:3f:70:90:c2:39:05:70:2d:26:b9:
                    2b:fa:e0:81:f8:9b:d2:d0:66:cc:61:8a:63:9c:2f:
                    d7:92:ee:ae:d0:62:5f:f0:be:e2:b9:8c:7b:f8:5e:
                    29:c4:2f:29:85:66:ab:c5:94:db:1f:b6:66:0f:66:
                    5e:3a:bb:f7:e8:6d:59:35:a8:ef:00:cc:16:5b:dc:
                    90:41:d5:b5:ca:c8:41:68:6a:ab:ed:14:f2:0b:d6:
                    08:c9:90:00:6e:cf:24:ec:8d:f2:ad:30:b8:07:31:
                    69:d6:69:dc:f4:68:17:11:c8:ab:35:0a:3c:d2:6c:
                    eb:a2:29:d4:b3:43:82:e3:de:3d:3f:9b:c6:92:c2:
                    68:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7A:39:97:03:81:EA:C0:71:8C:57:3A:07:47:1F:1B:BE:A1:09:50
            X509v3 Authority Key Identifier:
                keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:9e:58:cd:68:c7:e3:18:b0:97:11:42:d8:18:fb:8d:8a:ed:
         18:07:ee:0b:a3:63:93:c9:b3:7c:38:7a:2c:b9:f0:a1:09:d7:
         23:e5:09:67:d6:86:d9:39:65:ba:79:b9:19:bd:49:b8:75:9a:
         1e:08:69:ac:a3:ee:9f:3b:0e:4f:95:26:78:05:64:66:0f:1b:
         ee:01:b6:6a:c6:89:cb:1b:c7:38:7f:0b:90:9a:e1:b2:69:77:
         24:c6:e9:c5:be:31:17:db:ee:4a:fc:0c:82:48:49:f5:ba:3b:
         e5:c2:9d:68:45:9c:39:1c:11:98:8d:97:dc:aa:3c:c7:cd:b3:
         16:ce:b8:2f:3e:cf:c1:62:e6:4e:75:fd:99:f1:a9:fe:50:0b:
         2b:bf:53:53:7f:96:27:a8:52:2d:a6:4e:f9:a5:6a:c3:c3:0f:
         c1:6e:24:d8:c4:61:a2:63:19:02:05:63:6a:03:e7:b8:c5:d5:
         3d:c0:95:0e:c5:98:06:74:55:7c:2c:31:de:5e:23:0c:89:73:
         fd:3f:18:34:f5:e8:4e:ca:fe:55:35:01:57:ad:62:7a:57:dd:
         fb:35:e7:2d:32:cb:2c:b6:03:63:a5:a4:43:c7:b4:dd:55:20:
         53:94:4e:e8:ed:0c:f6:80:11:57:f7:53:f6:f5:ae:19:f2:a0:
         bf:6c:5c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:01:22 2025 by rpki-client