Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
File:                     sworSE4m8w01_YKjRCf_IgHLUAM.mft (raw, json)
Hash identifier:          UIOr33D7hFEnsxp64aYbdwRLT6UfAsq81LoXZKoarUA=
Subject key identifier:   48:86:64:83:17:69:B5:72:04:65:D3:D1:D2:AC:07:F0:4C:7F:EA:4C
Authority key identifier: B3:0A:2B:48:4E:26:F3:0D:35:FD:82:A3:44:27:FF:22:01:CB:50:03
Certificate issuer:       /CN=b30a2b484e26f30d35fd82a34427ff2201cb5003
Certificate serial:       01969FE44386B4DC5C2E7D544A8457A26A42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
Manifest number:          1521
Signing time:             Mon 05 May 2025 10:00:58 +0000
Manifest this update:     Mon 05 May 2025 10:00:58 +0000
Manifest next update:     Tue 06 May 2025 10:00:58 +0000
Files and hashes:         1: sworSE4m8w01_YKjRCf_IgHLUAM.crl (hash: BdeL09JHwpnKmEv4G8JRtXXJMRXKYD4599zDvuZFscA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:e4:43:86:b4:dc:5c:2e:7d:54:4a:84:57:a2:6a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30a2b484e26f30d35fd82a34427ff2201cb5003
        Validity
            Not Before: May  5 10:00:58 2025 GMT
            Not After : May  6 10:00:58 2025 GMT
        Subject: CN=488664831769b5720465d3d1d2ac07f04c7fea4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b7:4a:c4:1f:bf:1d:68:04:0e:07:9a:96:61:
                    21:fe:a3:10:ba:92:48:56:bc:63:ee:c4:6b:eb:2f:
                    e4:a0:c8:04:88:a8:cd:1f:44:de:c6:8a:df:0a:2b:
                    bc:28:0e:f4:69:7b:9d:f5:8b:58:b0:d2:13:ad:1b:
                    db:1a:de:95:85:28:ef:ff:c6:44:51:bf:f0:8a:8a:
                    2d:2e:73:3f:83:c3:18:bd:37:7f:88:ab:2d:af:a9:
                    90:12:cb:de:04:cb:df:00:d1:ca:d5:7e:e8:3d:d8:
                    29:33:3f:3b:6c:1a:c7:a6:49:bc:52:1b:ca:16:f8:
                    ed:3f:45:12:e2:55:c1:e2:40:af:5d:06:7a:90:04:
                    20:09:dc:ea:15:f1:9b:17:a5:63:eb:d3:f2:ce:22:
                    9b:63:55:4e:11:52:be:0d:ba:78:c7:7f:6d:c4:0b:
                    0c:91:6f:6b:45:ea:fc:a8:05:72:e5:37:db:39:eb:
                    b7:c6:74:00:64:f8:0b:0d:66:fe:98:c1:f7:bb:f9:
                    0d:f5:71:2b:fa:cd:a4:20:0f:27:f3:ee:d5:69:bb:
                    a2:5e:b3:99:0e:7d:95:76:68:17:9b:05:bc:80:8b:
                    f9:7d:f9:a2:bd:02:66:15:64:38:50:8c:7a:92:4e:
                    f5:04:3b:26:6f:65:34:56:81:bf:bd:06:bc:92:a9:
                    42:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:86:64:83:17:69:B5:72:04:65:D3:D1:D2:AC:07:F0:4C:7F:EA:4C
            X509v3 Authority Key Identifier:
                keyid:B3:0A:2B:48:4E:26:F3:0D:35:FD:82:A3:44:27:FF:22:01:CB:50:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d0:d3:9b:5d:7e:90:8a:47:33:4e:a7:d5:5c:27:06:28:2b:
         69:91:0f:4b:e1:b4:03:75:73:00:c5:f4:ba:ae:10:71:0e:05:
         b7:61:d5:50:bc:62:7e:29:ed:f2:16:39:30:72:41:a3:e8:3b:
         4a:c8:53:c5:24:71:5a:61:0c:07:41:90:4c:f6:07:85:7a:3b:
         1c:54:43:da:fe:d9:ca:7e:48:e8:b7:62:6a:55:46:3e:ce:48:
         5c:87:6d:30:19:b5:30:5e:f4:90:eb:14:bb:f4:9c:f3:69:63:
         2a:86:bd:1e:10:91:de:25:15:f5:98:f6:0f:f0:e5:f5:c1:c4:
         97:85:aa:17:b0:51:25:d4:75:28:8a:10:d5:e8:26:24:64:1a:
         a6:01:77:1d:c4:84:d5:82:62:f0:d3:3f:92:4d:ed:6d:30:23:
         e9:5e:28:b5:74:c3:b9:9b:c9:92:ef:53:a0:16:90:ed:f1:53:
         f2:b5:e9:be:93:c3:76:1f:ea:e7:79:01:81:57:cd:fb:91:6d:
         c2:93:72:64:71:c0:c7:06:23:97:f5:04:ef:42:35:4b:1c:65:
         ef:7a:74:3c:76:4f:c6:91:85:32:1d:7c:a9:51:48:d6:ce:74:
         f8:a3:56:24:7a:a5:ab:d8:14:3a:df:10:b9:7d:ee:c5:66:75:
         44:af:0f:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaf5EOGtNxcLn1USoRXompCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMGEyYjQ4NGUyNmYzMGQzNWZkODJhMzQ0MjdmZjIyMDFj
YjUwMDMwHhcNMjUwNTA1MTAwMDU4WhcNMjUwNTA2MTAwMDU4WjAzMTEwLwYDVQQD
Eyg0ODg2NjQ4MzE3NjliNTcyMDQ2NWQzZDFkMmFjMDdmMDRjN2ZlYTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLdKxB+/HWgEDgealmEh/qMQupJI
Vrxj7sRr6y/koMgEiKjNH0TexorfCiu8KA70aXud9YtYsNITrRvbGt6VhSjv/8ZE
Ub/wiootLnM/g8MYvTd/iKstr6mQEsveBMvfANHK1X7oPdgpMz87bBrHpkm8UhvK
FvjtP0US4lXB4kCvXQZ6kAQgCdzqFfGbF6Vj69PyziKbY1VOEVK+Dbp4x39txAsM
kW9rRer8qAVy5TfbOeu3xnQAZPgLDWb+mMH3u/kN9XEr+s2kIA8n8+7VabuiXrOZ
Dn2VdmgXmwW8gIv5ffmivQJmFWQ4UIx6kk71BDsmb2U0VoG/vQa8kqlCBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiGZIMXabVyBGXT0dKsB/BMf+pMMB8GA1UdIwQY
MBaAFLMKK0hOJvMNNf2Co0Qn/yIBy1ADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3dvclNFNG04dzAxX1lLalJDZl9JZ0hMVUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjk5MTItMDNiNi00MDhjLWEyYzQt
M2EwNDY3ZDVmMTA1LzEvc3dvclNFNG04dzAxX1lLalJDZl9JZ0hMVUFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mNjk5MTItMDNiNi00MDhjLWEyYzQtM2EwNDY3ZDVmMTA1
LzEvc3dvclNFNG04dzAxX1lLalJDZl9JZ0hMVUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNDTm11+
kIpHM06n1VwnBigraZEPS+G0A3VzAMX0uq4QcQ4Ft2HVULxifint8hY5MHJBo+g7
SshTxSRxWmEMB0GQTPYHhXo7HFRD2v7Zyn5I6LdialVGPs5IXIdtMBm1MF70kOsU
u/Sc82ljKoa9HhCR3iUV9Zj2D/Dl9cHEl4WqF7BRJdR1KIoQ1egmJGQapgF3HcSE
1YJi8NM/kk3tbTAj6V4otXTDuZvJku9ToBaQ7fFT8rXpvpPDdh/q53kBgVfN+5Ft
wpNyZHHAxwYjl/UE70I1Sxxl73p0PHZPxpGFMh18qVFI1s50+KNWJHqlq9gUOt8Q
uX3uxWZ1RK8POw==
-----END CERTIFICATE-----
Generated at Mon May 5 19:13:46 2025 by rpki-client