Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
File:                     gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json)
Hash identifier:          Zn96VEiOD6d5HTBeaUMvzUaYzek/FkPMTd35flAX5RQ=
Subject key identifier:   6B:5B:10:2F:78:63:B3:EA:75:A4:D4:BB:8A:3B:2A:61:F5:15:CA:52
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Certificate issuer:       /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial:       0196760C4828F0ED8E8C3CC8CB8E1A554228
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
Manifest number:          1510
Signing time:             Sun 27 Apr 2025 07:00:38 +0000
Manifest this update:     Sun 27 Apr 2025 07:00:38 +0000
Manifest next update:     Mon 28 Apr 2025 07:00:38 +0000
Files and hashes:         1: OSPVEMKxRvS3K2S9RynwSClpPy0.roa (hash: I2dq/kcaAdZwjzuTK1RJZZE0wsjKNorsCYjqSblF2e4=)
                          2: UqiuKqTQR1pyHUIwfSaJuTVkwgM.roa (hash: /daQ84/IlyKQccK8HNvLp9yZzU3eH5Tw2SuorEVY8WU=)
                          3: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: GfHkggjd6xRnpb9o1zUpSHI71V5j8lUxctWoiWwZebo=)
                          4: hg2Ps6LFSparyJWx3GTYmUPm3pA.roa (hash: QXdyI8bAesp03A33q/sHoHZRnlP3monnDF28zjvU5M8=)
                          5: uQl0h3i3b202uiSsE2ql_r0wnXQ.roa (hash: RIkzFeAhN9PoylnIf3cZdxJ8xVemWn5y0Bu19U5kI84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:48:28:f0:ed:8e:8c:3c:c8:cb:8e:1a:55:42:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
        Validity
            Not Before: Apr 27 07:00:38 2025 GMT
            Not After : Apr 28 07:00:38 2025 GMT
        Subject: CN=6b5b102f7863b3ea75a4d4bb8a3b2a61f515ca52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:30:fe:73:31:de:2f:f2:f4:b8:83:86:ba:48:
                    5c:f3:42:bc:27:e1:cb:26:98:66:71:a9:a4:0f:2d:
                    c8:ca:0f:0f:a6:20:0f:d0:67:f2:54:4e:a7:e6:68:
                    af:6d:c0:da:05:fa:3a:2c:4a:09:81:cf:d5:e7:3c:
                    fb:61:d6:26:92:4d:8a:ae:25:01:32:5c:4d:b3:64:
                    19:11:3f:ae:4e:de:58:ba:2e:cb:5e:e2:ef:98:86:
                    ee:63:1f:52:fc:5a:c0:00:db:18:6b:c2:26:04:3a:
                    cd:91:26:b1:3b:91:94:88:16:d6:84:c8:41:48:fa:
                    a2:48:8e:d0:1e:6f:33:3a:0a:d2:c0:ec:8c:8e:2e:
                    1f:7e:f3:d2:7e:bb:4d:39:2d:51:0b:48:24:f0:28:
                    0a:e3:ea:2b:7d:56:e7:f3:89:88:61:9f:b7:47:e7:
                    5f:f8:58:d8:80:d2:35:73:d3:7e:4f:65:61:c8:fa:
                    33:c5:3f:9d:42:03:39:26:cd:37:00:7c:04:9e:7f:
                    9b:9f:0f:4c:ef:b8:60:d1:b5:ca:3c:49:4c:a8:40:
                    42:11:16:fe:b5:11:2c:5c:f9:5e:8f:6f:e1:58:8b:
                    4a:37:68:10:6d:c1:18:a6:60:be:6b:56:91:fc:ad:
                    db:47:09:33:42:4d:f1:20:49:2d:ad:0c:e8:f2:25:
                    59:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5B:10:2F:78:63:B3:EA:75:A4:D4:BB:8A:3B:2A:61:F5:15:CA:52
            X509v3 Authority Key Identifier:
                keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:03:8e:32:fe:12:9f:0c:27:67:fa:cc:02:d6:3d:90:fd:a2:
         f5:53:ac:56:17:db:93:a0:10:a4:76:dc:ad:91:b8:13:59:60:
         12:50:21:fb:c5:bd:db:90:49:ba:47:eb:19:e8:6c:99:32:fe:
         53:76:9c:9e:78:5e:b9:54:42:45:2b:5a:4f:56:20:52:1b:8f:
         82:63:15:ba:52:43:f8:a2:94:73:f4:5f:14:de:1f:40:de:68:
         2c:15:e4:8b:5e:50:f2:0e:ad:26:ee:2f:ad:fb:1c:a3:e0:b7:
         9e:bd:a8:00:cb:39:2f:53:fa:ed:19:23:dd:b2:ce:bd:f0:16:
         b5:f9:65:1c:2c:cd:ad:62:4d:e8:40:e3:84:7f:77:13:53:52:
         bc:8d:b6:f4:11:05:4d:6f:1c:ca:94:04:42:99:a7:8c:2e:f1:
         32:28:f8:ea:30:73:73:12:be:ef:d5:ea:18:4a:5d:6f:69:71:
         cb:27:1d:f7:0b:29:80:68:3f:0e:a7:81:33:0c:fe:3f:be:f4:
         4a:5d:a5:9d:3c:c8:2a:52:a0:76:78:2b:91:69:92:4d:dd:68:
         73:a0:41:af:4b:0c:27:73:b5:04:8f:8b:6c:e1:96:c8:35:16:
         42:cf:d7:dc:71:37:50:11:b6:f3:32:44:2e:0c:91:f6:f1:09:
         8b:d3:bb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:39:20 2025 by rpki-client