Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
File:                     fJ1n8CerKw_yajV1FHOa_ogDesk.mft (raw, json)
Hash identifier:          Y+E73sptKWHLDxqb9bMwDQEZ2AMmHLCFyHA4NTId+ds=
Subject key identifier:   F4:E3:50:0B:D7:DE:C8:CC:41:D0:8C:77:FE:E7:6C:AF:0F:5A:85:F9
Authority key identifier: 7C:9D:67:F0:27:AB:2B:0F:F2:6A:35:75:14:73:9A:FE:88:03:7A:C9
Certificate issuer:       /CN=7c9d67f027ab2b0ff26a357514739afe88037ac9
Certificate serial:       0197B96A888BB55D3188F3B8158D109BA219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
Manifest number:          14CD
Signing time:             Sun 29 Jun 2025 02:00:56 +0000
Manifest this update:     Sun 29 Jun 2025 02:00:56 +0000
Manifest next update:     Mon 30 Jun 2025 02:00:56 +0000
Files and hashes:         1: fJ1n8CerKw_yajV1FHOa_ogDesk.crl (hash: VJ/wmYbhFOVT17wbKGH7Acx6dL9QRIwVFfFhVGR83m0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:88:8b:b5:5d:31:88:f3:b8:15:8d:10:9b:a2:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c9d67f027ab2b0ff26a357514739afe88037ac9
        Validity
            Not Before: Jun 29 02:00:56 2025 GMT
            Not After : Jun 30 02:00:56 2025 GMT
        Subject: CN=f4e3500bd7dec8cc41d08c77fee76caf0f5a85f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:98:0f:02:df:7f:d0:a1:85:c4:66:de:a4:df:
                    32:3e:03:3a:51:f5:e4:3e:eb:8b:ae:b6:3b:d8:fd:
                    e2:21:d5:da:69:16:ae:af:7d:a8:20:2b:2c:de:a1:
                    6d:9b:e5:9a:03:34:5f:05:a9:da:78:82:d4:09:82:
                    fc:d3:10:46:10:dd:92:0a:00:0f:c1:07:6e:95:8f:
                    f5:99:2b:b6:27:0b:29:e9:e8:64:fb:0b:ce:65:84:
                    06:97:92:ca:ce:a8:59:a2:1b:4e:d7:3f:49:01:1d:
                    a6:d4:35:98:cb:72:72:2d:af:38:67:a3:16:55:74:
                    4a:99:91:2c:b8:08:b6:24:b5:24:2f:ba:c6:9e:2f:
                    92:e1:38:4f:ff:b3:70:70:35:e7:b4:a1:21:e5:02:
                    52:60:b0:97:3b:89:c1:5f:48:46:f8:5e:11:f9:75:
                    a7:63:7b:b0:b5:bf:0f:67:b4:e7:cf:e5:40:c0:e6:
                    cc:62:07:ce:76:1c:c8:bf:25:8a:54:68:54:02:4a:
                    04:7d:1c:c2:f9:64:8f:00:7c:83:2b:33:46:2d:99:
                    1f:9e:fb:95:3f:85:f6:fe:76:44:2b:35:31:16:ad:
                    a6:b6:d1:80:ac:25:89:d1:c8:8d:00:7e:53:fb:5e:
                    64:52:ae:8f:4e:08:8e:9c:f0:e5:42:0d:dd:69:70:
                    2f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E3:50:0B:D7:DE:C8:CC:41:D0:8C:77:FE:E7:6C:AF:0F:5A:85:F9
            X509v3 Authority Key Identifier:
                keyid:7C:9D:67:F0:27:AB:2B:0F:F2:6A:35:75:14:73:9A:FE:88:03:7A:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:95:7a:ec:0b:34:10:16:95:90:54:98:6d:73:fd:a1:e9:57:
         cb:ec:88:ce:78:5b:d6:c8:4e:a8:b1:40:a9:34:db:56:86:b2:
         9c:eb:11:6a:6e:34:f6:33:b9:d8:bf:d5:a8:c7:d4:f4:99:23:
         aa:99:b1:89:62:2b:2e:30:4a:41:40:50:d5:88:30:6b:7b:8f:
         1e:df:ab:6f:51:e6:66:6b:05:3b:e4:0a:f8:3a:b3:2b:9c:9c:
         38:30:c6:c4:19:06:e1:6a:f7:c6:c2:8f:6c:0c:86:5d:c8:94:
         a7:64:93:50:42:dc:ff:da:c9:e1:fe:02:8c:2e:ec:06:95:d9:
         a3:d9:8f:0e:87:19:3a:e2:ed:ac:6a:cb:ca:f1:7f:33:07:68:
         71:03:77:d0:b0:d7:4c:3c:a1:27:bb:93:65:42:b8:93:f5:19:
         e4:c9:d6:ef:28:e2:ff:2c:d4:d4:a1:11:14:b7:7b:52:22:07:
         84:02:40:be:6f:50:cf:c2:f5:64:01:ba:54:29:b7:0f:eb:af:
         96:81:b2:90:76:8d:ee:ac:3a:52:cd:fd:65:79:42:f1:4f:9f:
         eb:43:c2:aa:7d:93:8d:91:76:f2:ba:95:9d:d2:55:c8:fd:03:
         d5:39:d8:9c:ac:61:84:e7:e3:5e:0f:0f:34:b7:76:2f:e1:95:
         e5:a1:ee:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:06:07 2025 by rpki-client