Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft
File:                     skFYMFfyBWPJOCuJTx_OrKVfvaM.mft (raw, json)
Hash identifier:          i9hheuwD5lJtawlyO7hqaal2QRZj1qYUvll2d5thW9E=
Subject key identifier:   B3:D2:FF:18:5C:65:88:D1:8F:7A:D0:69:38:B2:55:23:20:34:CF:DB
Authority key identifier: B2:41:58:30:57:F2:05:63:C9:38:2B:89:4F:1F:CE:AC:A5:5F:BD:A3
Certificate issuer:       /CN=b241583057f20563c9382b894f1fceaca55fbda3
Certificate serial:       0196C2A6C17A9A6AF360064B5CDE54925E90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skFYMFfyBWPJOCuJTx_OrKVfvaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft
Manifest number:          1533
Signing time:             Mon 12 May 2025 04:00:30 +0000
Manifest this update:     Mon 12 May 2025 04:00:30 +0000
Manifest next update:     Tue 13 May 2025 04:00:30 +0000
Files and hashes:         1: skFYMFfyBWPJOCuJTx_OrKVfvaM.crl (hash: 1l6CkSKFvpFDT49ju5RVxtcKrvAQGZNsUOLJ23EEbro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/skFYMFfyBWPJOCuJTx_OrKVfvaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:a6:c1:7a:9a:6a:f3:60:06:4b:5c:de:54:92:5e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b241583057f20563c9382b894f1fceaca55fbda3
        Validity
            Not Before: May 12 04:00:30 2025 GMT
            Not After : May 13 04:00:30 2025 GMT
        Subject: CN=b3d2ff185c6588d18f7ad06938b255232034cfdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:10:69:2a:7b:7f:ea:6f:4c:40:74:04:6b:94:
                    b7:87:69:2e:fb:04:09:61:c1:1f:5f:d3:1b:b8:d3:
                    1a:1a:8b:98:bc:09:0e:31:50:dc:bf:b4:fe:bb:5b:
                    e6:b8:cf:41:45:27:6b:3d:89:2d:6c:7a:4c:a8:a2:
                    c2:e9:79:cc:24:b0:c1:f2:15:8b:a5:5e:76:10:a4:
                    d0:fb:83:ec:04:63:2e:0e:0d:c0:4c:f2:f2:25:35:
                    c7:5f:7c:08:89:56:a1:db:80:f4:a0:c5:6e:e6:e3:
                    ec:e4:b5:a3:ba:ae:38:e1:e1:79:45:b4:33:76:46:
                    9c:a9:c3:7a:0b:44:eb:3e:12:8a:3d:92:56:ce:39:
                    56:34:5e:7e:35:3a:b5:f3:03:8c:76:08:8d:a9:6c:
                    6a:fa:3f:20:f7:9f:84:bd:8f:11:4b:31:c4:36:86:
                    dd:6b:a7:b6:8d:bc:93:d7:0c:3b:69:e0:49:3d:1e:
                    16:89:03:1d:4e:01:a2:1d:f5:10:e2:c1:dd:b0:05:
                    57:45:6b:e7:0a:5d:67:49:bb:73:66:62:00:23:04:
                    6f:65:5c:c1:24:f0:50:09:eb:a5:60:9d:53:9c:d3:
                    2f:67:af:69:48:15:26:e2:9a:37:b6:50:0a:78:7a:
                    00:8a:b2:4e:48:69:0b:e9:1f:95:31:ca:ce:a1:cc:
                    37:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D2:FF:18:5C:65:88:D1:8F:7A:D0:69:38:B2:55:23:20:34:CF:DB
            X509v3 Authority Key Identifier:
                keyid:B2:41:58:30:57:F2:05:63:C9:38:2B:89:4F:1F:CE:AC:A5:5F:BD:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skFYMFfyBWPJOCuJTx_OrKVfvaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:87:0e:65:70:ea:70:07:49:ce:f2:97:b1:b7:00:1c:e1:b4:
         d6:7a:6b:09:45:9f:71:38:11:b6:5f:d9:7e:9b:fe:28:26:f6:
         9b:56:73:e7:56:d0:7a:64:e6:68:54:48:5b:08:9c:08:35:84:
         a6:45:49:e8:98:81:5c:02:5d:2d:f2:ff:91:0b:0c:e9:09:ca:
         1a:33:41:de:e6:1d:c3:81:eb:41:06:3e:52:c4:ff:c7:ae:9b:
         ec:d0:37:5c:62:9b:4f:49:1a:15:fe:87:9b:c1:f3:a3:bf:65:
         73:7c:c7:8a:df:61:d5:5b:48:3e:3a:72:7a:e7:19:5d:08:dd:
         af:a7:88:15:0f:6b:a8:f4:ea:96:45:34:de:d6:40:7a:8e:48:
         1b:fa:a9:18:bd:55:00:ed:fd:95:64:95:9b:8c:23:94:40:64:
         ff:08:51:d1:4a:43:ec:41:95:94:9e:78:46:1b:de:29:23:31:
         36:9f:ec:11:4b:37:38:14:31:5d:02:e3:99:ac:53:9e:93:63:
         6c:24:a6:48:40:48:04:d7:29:36:40:89:67:8e:fb:33:ed:52:
         b9:5a:6b:0f:1e:7c:0f:fb:40:c4:5b:ac:37:5e:e3:c9:ec:51:
         36:57:0d:e1:63:7a:20:52:58:b3:39:43:5f:af:3f:56:3c:32:
         d9:b8:a8:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCpsF6mmrzYAZLXN5Ukl6QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNDE1ODMwNTdmMjA1NjNjOTM4MmI4OTRmMWZjZWFjYTU1
ZmJkYTMwHhcNMjUwNTEyMDQwMDMwWhcNMjUwNTEzMDQwMDMwWjAzMTEwLwYDVQQD
EyhiM2QyZmYxODVjNjU4OGQxOGY3YWQwNjkzOGIyNTUyMzIwMzRjZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBBpKnt/6m9MQHQEa5S3h2ku+wQJ
YcEfX9MbuNMaGouYvAkOMVDcv7T+u1vmuM9BRSdrPYktbHpMqKLC6XnMJLDB8hWL
pV52EKTQ+4PsBGMuDg3ATPLyJTXHX3wIiVah24D0oMVu5uPs5LWjuq444eF5RbQz
dkacqcN6C0TrPhKKPZJWzjlWNF5+NTq18wOMdgiNqWxq+j8g95+EvY8RSzHENobd
a6e2jbyT1ww7aeBJPR4WiQMdTgGiHfUQ4sHdsAVXRWvnCl1nSbtzZmIAIwRvZVzB
JPBQCeulYJ1TnNMvZ69pSBUm4po3tlAKeHoAirJOSGkL6R+VMcrOocw32wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPS/xhcZYjRj3rQaTiyVSMgNM/bMB8GA1UdIwQY
MBaAFLJBWDBX8gVjyTgriU8fzqylX72jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2tGWU1GZnlCV1BKT0N1SlR4X09yS1ZmdmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTI4ZDMtMmE5My00NjBjLTkyNmQt
NDBkMTVmMzZlYTQzLzEvc2tGWU1GZnlCV1BKT0N1SlR4X09yS1ZmdmFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kNTI4ZDMtMmE5My00NjBjLTkyNmQtNDBkMTVmMzZlYTQz
LzEvc2tGWU1GZnlCV1BKT0N1SlR4X09yS1ZmdmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxocOZXDq
cAdJzvKXsbcAHOG01nprCUWfcTgRtl/Zfpv+KCb2m1Zz51bQemTmaFRIWwicCDWE
pkVJ6JiBXAJdLfL/kQsM6QnKGjNB3uYdw4HrQQY+UsT/x66b7NA3XGKbT0kaFf6H
m8Hzo79lc3zHit9h1VtIPjpyeucZXQjdr6eIFQ9rqPTqlkU03tZAeo5IG/qpGL1V
AO39lWSVm4wjlEBk/whR0UpD7EGVlJ54RhveKSMxNp/sEUs3OBQxXQLjmaxTnpNj
bCSmSEBIBNcpNkCJZ477M+1SuVprDx58D/tAxFusN17jyexRNlcN4WN6IFJYszlD
X68/Vjwy2bio1A==
-----END CERTIFICATE-----
Generated at Mon May 12 10:40:57 2025 by rpki-client