Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
File:                     PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft (raw, json)
Hash identifier:          K9szFKiw7L2o709J0vDqt66Oo31HsDfh8lZIVYAiyDo=
Subject key identifier:   E7:CA:BA:B1:CF:C2:2E:7B:D8:98:9F:E3:15:34:D7:CE:9D:78:A5:7D
Authority key identifier: 3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
Certificate issuer:       /CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Certificate serial:       0196A276E8F2D627CCCC8D91AAECD88AF3A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
Manifest number:          1524
Signing time:             Mon 05 May 2025 22:00:23 +0000
Manifest this update:     Mon 05 May 2025 22:00:23 +0000
Manifest next update:     Tue 06 May 2025 22:00:23 +0000
Files and hashes:         1: PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl (hash: NXnAdKNXuzfHMSSRMyrKaRAq5VTPFuWPRmgCeV6SRsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:76:e8:f2:d6:27:cc:cc:8d:91:aa:ec:d8:8a:f3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
        Validity
            Not Before: May  5 22:00:23 2025 GMT
            Not After : May  6 22:00:23 2025 GMT
        Subject: CN=e7cabab1cfc22e7bd8989fe31534d7ce9d78a57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:02:4e:bd:cd:70:08:17:18:07:82:d1:7c:70:
                    15:74:43:61:00:59:50:46:26:c4:4b:e0:4a:6f:7e:
                    8f:7d:4b:69:f5:23:fc:0d:1a:89:4c:a3:9a:2a:6f:
                    a3:bb:94:a5:f8:ee:ad:ae:44:dc:bf:6c:29:53:6e:
                    98:20:46:8e:79:c1:71:08:b8:24:07:b7:1b:59:9b:
                    7f:2d:35:3d:17:c4:52:46:bb:80:c3:bb:7a:d5:5a:
                    e3:35:a7:ed:92:e5:47:07:03:22:a6:8e:63:c4:8a:
                    de:2c:08:7c:27:1f:23:8a:73:95:7f:27:6c:df:31:
                    85:0a:d2:e5:eb:d7:f9:98:ad:fe:87:de:75:65:87:
                    72:e0:be:90:61:5a:63:79:fb:d0:2b:7e:7d:b0:1e:
                    c5:a7:d3:60:17:7f:e4:a6:1a:73:63:77:b2:d5:4a:
                    b7:ba:aa:b1:20:4c:ea:f2:71:d7:55:8b:a9:86:df:
                    8f:57:78:91:20:62:b1:97:51:cd:b5:f7:de:a3:01:
                    ee:e6:82:32:68:3d:a1:62:2a:0b:c5:3a:4c:19:73:
                    65:c0:d0:b7:fb:30:4f:77:ae:ce:51:ce:3e:6d:35:
                    d6:70:93:62:d1:0e:0d:f1:4b:e5:09:9b:6b:e2:d2:
                    e9:f7:94:e3:f5:3f:97:48:09:e2:7d:f5:59:60:54:
                    21:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CA:BA:B1:CF:C2:2E:7B:D8:98:9F:E3:15:34:D7:CE:9D:78:A5:7D
            X509v3 Authority Key Identifier:
                keyid:3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ff:d0:f7:0b:06:b4:58:d8:f8:5d:0f:76:4e:17:ba:df:16:
         20:d0:43:fb:4f:3a:50:e5:18:ae:6b:09:bb:97:ec:dd:65:2a:
         35:a0:52:eb:8b:ac:a2:8d:06:ad:16:32:dd:fd:97:ef:ca:84:
         cf:ae:2e:20:34:89:50:e9:8c:59:ae:37:41:ec:5c:d0:6d:c5:
         50:03:ec:74:c7:65:38:d1:ca:80:24:95:ae:65:cf:c0:e0:53:
         ad:6e:4f:89:7a:5a:b1:92:8b:7c:e2:09:2a:b1:4b:aa:9a:66:
         dc:fc:8a:9e:7e:ae:56:56:98:20:03:fb:97:7b:05:21:88:eb:
         3e:6c:f5:63:58:44:68:7b:8d:c8:f8:64:08:66:ad:bf:72:ad:
         82:67:9b:5f:48:10:b0:73:42:ed:32:a3:54:40:50:2a:8d:08:
         64:d9:86:f2:fa:95:ad:aa:a4:48:d2:77:bc:1a:71:f4:c1:e3:
         14:9a:91:c8:7a:bd:56:62:28:03:80:d3:3a:90:f1:8d:ab:0f:
         64:22:33:ab:e3:cc:d3:b3:a3:49:ae:2e:ab:41:7e:f2:a0:0c:
         d4:df:0e:62:77:ab:d1:77:49:17:f5:87:8a:f8:66:3f:45:66:
         f7:f4:15:47:93:35:1b:cf:3a:dc:68:d6:c7:31:5a:76:09:33:
         f4:e2:d3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:17:09 2025 by rpki-client