Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
File:                     r4yBlkcmb7yxOeZyqPuaV89Ysog.mft (raw, json)
Hash identifier:          0p9SeNOcB6GNZX47Q9WtC6e/OHrYva6SDEqsuvlTJsM=
Subject key identifier:   38:5A:C2:57:32:E9:B7:D8:FE:18:28:99:99:25:AE:6F:3A:2B:26:CB
Authority key identifier: AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88
Certificate issuer:       /CN=af8c819647266fbcb139e672a8fb9a57cf58b288
Certificate serial:       0196C3B9934073E0429931F04FE53EB5D48D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
Manifest number:          0349
Signing time:             Mon 12 May 2025 09:00:41 +0000
Manifest this update:     Mon 12 May 2025 09:00:41 +0000
Manifest next update:     Tue 13 May 2025 09:00:41 +0000
Files and hashes:         1: r4yBlkcmb7yxOeZyqPuaV89Ysog.crl (hash: DX4FAFBZfTPfmcwvwBR/r1KFiopRdfec6GMl43EMc7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:b9:93:40:73:e0:42:99:31:f0:4f:e5:3e:b5:d4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af8c819647266fbcb139e672a8fb9a57cf58b288
        Validity
            Not Before: May 12 09:00:41 2025 GMT
            Not After : May 13 09:00:41 2025 GMT
        Subject: CN=385ac25732e9b7d8fe1828999925ae6f3a2b26cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5a:f3:ae:9c:a2:5c:f8:03:67:e5:77:5b:aa:
                    58:12:8b:89:47:86:d5:13:6c:cc:de:02:9d:b0:d4:
                    16:93:8e:a8:bd:ba:b1:18:1a:10:e9:63:ab:9a:ac:
                    e6:f6:84:d5:bd:2a:4a:c2:1e:72:c0:96:04:33:2f:
                    45:f8:49:61:4f:da:02:2b:ae:27:41:c8:b5:9a:d4:
                    af:84:13:f6:a5:a7:fe:c9:af:ea:98:18:56:3f:5c:
                    02:60:31:d8:89:f4:af:9f:b4:7f:f8:30:70:e2:79:
                    26:57:a7:27:5b:25:99:aa:7b:ee:12:9f:76:00:af:
                    15:ad:d4:6e:b6:65:a2:38:f2:da:ec:3d:9b:1a:65:
                    06:47:0b:a8:05:16:98:9b:49:cb:70:cc:c8:a4:67:
                    70:1e:a4:1c:7d:d7:89:02:78:ae:22:da:40:ba:29:
                    08:4f:dc:25:11:fe:f2:8c:ac:a5:fc:85:01:7e:5d:
                    d6:ca:50:3d:66:76:f1:dc:5d:d6:60:cc:aa:c7:0e:
                    94:d0:95:de:a4:7e:72:e8:a3:dd:9e:2a:8e:90:d2:
                    ab:ab:50:7c:63:7c:9a:58:f8:2c:0e:21:5c:75:38:
                    ed:91:25:d8:27:1c:c0:ee:00:d7:fc:9e:e3:0f:ae:
                    14:b4:bd:19:bb:27:f6:fe:a8:1d:b3:54:7e:1e:54:
                    d1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5A:C2:57:32:E9:B7:D8:FE:18:28:99:99:25:AE:6F:3A:2B:26:CB
            X509v3 Authority Key Identifier:
                keyid:AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:cf:03:7a:87:5f:62:2f:16:e6:18:e8:5e:8d:3d:f1:a9:1b:
         1a:02:2e:1f:93:48:5b:6f:00:f9:be:55:14:60:13:3a:ce:69:
         d5:9e:b9:7d:62:2b:c8:74:12:76:40:1a:41:c6:ea:a7:f2:1a:
         dd:e8:fb:a3:5d:f6:33:2b:23:52:7d:0f:87:79:94:e5:2d:94:
         02:d4:05:aa:03:cf:35:03:d0:0d:2b:c8:3c:39:37:ca:6e:2a:
         9e:4e:75:16:01:0d:b1:88:df:aa:23:48:59:99:4e:d8:63:f0:
         60:43:bf:e2:a3:76:64:de:d8:b2:d1:87:43:5e:0f:e8:fa:69:
         69:a6:cc:c9:ea:03:07:f3:91:3f:df:4a:e0:19:d8:ed:7b:5f:
         18:3f:f4:96:95:5d:1f:79:9f:64:d3:db:53:5d:63:1d:7d:7b:
         2e:ff:43:8f:49:c6:87:97:c5:74:97:0e:f1:67:8a:8c:c7:7a:
         da:da:69:d3:ce:9b:3c:13:61:a0:36:5f:8d:c0:1c:c1:1f:2e:
         61:4c:a7:d4:37:8f:a8:2d:d3:0d:e4:db:f2:a0:65:44:28:a2:
         81:dc:13:71:f7:9b:98:62:37:02:a3:eb:86:b3:e3:27:d4:48:
         61:93:33:be:f7:65:b5:d0:a3:f5:ca:e2:aa:01:96:68:4d:ca:
         a7:20:aa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----