Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
File:                     ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft (raw, json)
Hash identifier:          NE2aI6lD/jA9jaqdCcN79Mf7OXS6q2eqJBNJEWTAOfI=
Subject key identifier:   32:23:EE:EC:1F:73:7F:5F:EB:00:C5:30:ED:CF:DA:0C:83:44:AE:F3
Authority key identifier: 64:91:A9:A1:55:65:85:55:B6:08:B5:EB:95:B2:B5:15:5E:2F:43:A7
Certificate issuer:       /CN=6491a9a155658555b608b5eb95b2b5155e2f43a7
Certificate serial:       0196CF502AC21C54EE17BDF28EA0E896FF3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
Manifest number:          E4
Signing time:             Wed 14 May 2025 15:00:59 +0000
Manifest this update:     Wed 14 May 2025 15:00:59 +0000
Manifest next update:     Thu 15 May 2025 15:00:59 +0000
Files and hashes:         1: ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.crl (hash: AqihrMrBDsNRJbOcnrjyBHPsTcLr1uoMTSmXZvXYGFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 14:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cf:50:2a:c2:1c:54:ee:17:bd:f2:8e:a0:e8:96:ff:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6491a9a155658555b608b5eb95b2b5155e2f43a7
        Validity
            Not Before: May 14 15:00:59 2025 GMT
            Not After : May 15 15:00:59 2025 GMT
        Subject: CN=3223eeec1f737f5feb00c530edcfda0c8344aef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bd:9f:90:58:59:b8:9c:ef:7d:88:16:1f:05:
                    21:9f:f4:f3:95:00:9f:f7:af:c5:ef:6b:53:08:12:
                    38:ac:fb:49:43:26:e7:6a:53:a5:d1:c4:06:28:d1:
                    c1:32:5c:6f:6c:6f:de:16:4d:8c:49:bf:55:ea:52:
                    e0:bc:60:6e:83:06:fc:40:bd:7e:39:4d:71:2d:39:
                    aa:d7:72:b7:79:95:01:65:25:d6:47:97:f5:07:55:
                    cf:5b:d1:01:af:5d:9c:f4:73:29:d3:66:31:b7:eb:
                    d9:d3:5c:a8:a6:dd:e8:9c:e0:d4:64:0b:3d:b9:ac:
                    05:86:e6:2a:88:b9:5b:5b:5a:01:7e:a9:75:35:1c:
                    70:4e:5c:37:f9:9f:67:37:54:6b:c3:e5:37:20:56:
                    b8:03:ec:06:20:3f:21:e0:ed:30:76:d7:08:f4:43:
                    10:1c:c8:59:1e:d1:b7:a2:75:d2:ac:51:34:f7:f1:
                    50:b4:90:e4:93:3f:61:97:2a:e4:f2:96:14:7e:0c:
                    bd:6f:19:cb:90:ec:f3:88:79:cb:d6:03:0d:67:dc:
                    b9:56:29:0f:10:94:b1:ea:20:1c:9b:33:30:32:e1:
                    06:fb:3f:fd:ba:09:e5:8c:5d:0a:7c:3c:87:7e:4c:
                    32:b3:3c:3a:6a:d9:1c:57:ae:27:a1:ed:67:39:a7:
                    f1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:23:EE:EC:1F:73:7F:5F:EB:00:C5:30:ED:CF:DA:0C:83:44:AE:F3
            X509v3 Authority Key Identifier:
                keyid:64:91:A9:A1:55:65:85:55:B6:08:B5:EB:95:B2:B5:15:5E:2F:43:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:5b:59:68:2a:65:27:23:44:29:8c:5d:cd:2a:99:4e:2b:1e:
         bf:17:03:1a:18:d5:58:6a:8a:de:42:a1:e3:a7:b6:cf:3b:fd:
         b1:20:ea:fc:db:80:f9:5f:22:72:4d:c2:f9:98:8d:77:df:cc:
         cf:da:ae:05:cf:c8:43:90:7d:54:fd:ca:04:f8:9d:2c:0e:cf:
         f0:94:95:13:b5:cf:f3:95:8a:31:81:3c:76:59:47:49:68:48:
         82:0f:10:52:75:cb:26:35:16:23:35:c7:77:ad:8d:cd:89:45:
         6d:5f:f7:79:85:e0:dd:54:2f:83:76:ed:ba:40:09:37:de:1a:
         d8:99:3c:aa:f5:98:c9:aa:9c:c3:a9:7b:6c:e9:ce:77:2a:5a:
         8e:38:8f:05:4e:9d:20:b2:03:d3:3d:8a:d6:ad:95:95:a8:3e:
         e7:01:73:17:f9:c4:49:ad:8a:37:54:42:24:e9:72:17:d5:f1:
         0d:9c:b3:04:91:52:64:5b:ff:b1:45:9c:df:08:7b:b7:a4:0b:
         52:37:27:9a:f4:76:89:f8:3a:4a:4b:53:e5:5a:8b:5a:d6:b6:
         dd:29:d2:87:48:f2:cd:8b:0a:03:8b:55:a8:62:75:07:74:41:
         3a:3b:a2:e1:23:cb:55:5c:c6:40:0d:63:94:ac:1f:6f:c7:56:
         07:80:94:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:33:38 2025 by rpki-client