Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
File:                     GxubyMfg_Ee_iwpXLRpXLWppa7c.mft (raw, json)
Hash identifier:          0jF1GQZ1eqh/HK/X0C4MLOlhMu+dlQiqdfmwoZLaRs4=
Subject key identifier:   C1:E1:50:40:2C:DC:E8:C2:DE:D7:85:2B:4C:5B:C6:8F:0D:C0:19:7E
Authority key identifier: 1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7
Certificate issuer:       /CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
Certificate serial:       01967A8D85AC1F390F841059545FAB1B1B54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
Manifest number:          0D36
Signing time:             Mon 28 Apr 2025 04:00:17 +0000
Manifest this update:     Mon 28 Apr 2025 04:00:17 +0000
Manifest next update:     Tue 29 Apr 2025 04:00:17 +0000
Files and hashes:         1: GxubyMfg_Ee_iwpXLRpXLWppa7c.crl (hash: a8fzYswyRvwibBdCaBvW0WylVZZMEmSHYDvGVP1OJkE=)
                          2: xGuOIxMFC1Wn9_vw4MtsHeq3I1E.roa (hash: kcCBBOjP/JTwKy7Io6Y4tXVkBszU8YzDmmO1xZCayZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:8d:85:ac:1f:39:0f:84:10:59:54:5f:ab:1b:1b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
        Validity
            Not Before: Apr 28 04:00:17 2025 GMT
            Not After : Apr 29 04:00:17 2025 GMT
        Subject: CN=c1e150402cdce8c2ded7852b4c5bc68f0dc0197e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:2f:c4:b4:af:a0:dc:5a:b5:a0:d8:33:ed:
                    ba:da:a4:ec:52:09:7d:c2:71:31:1d:79:0c:07:10:
                    0b:2e:bc:1a:d9:8d:da:a5:11:2c:fa:6d:8f:3f:21:
                    e5:f7:91:da:d4:7d:46:52:0b:fe:06:16:5e:17:fb:
                    bc:88:18:69:e5:b9:2f:ab:42:a0:db:00:fe:8c:a0:
                    b9:89:a7:8e:bd:57:6e:de:be:ee:3c:16:84:5e:6c:
                    b8:6e:8d:27:36:d5:1e:c3:08:0f:cf:f1:2a:de:fc:
                    aa:0d:15:b8:5f:d4:8a:69:b2:34:e6:5d:30:97:47:
                    3e:a3:de:44:81:f7:3f:34:af:ff:5c:2d:aa:c9:a3:
                    c7:01:6f:8f:d3:88:3f:8a:d9:e7:fa:1a:93:e5:4c:
                    69:8e:34:46:64:ac:e8:b6:d5:54:d7:0b:8d:87:bd:
                    dc:77:c9:2f:0e:ba:07:13:7e:8c:f1:00:4c:f1:7a:
                    fb:99:8d:a0:50:8f:67:86:7d:fd:b7:56:6f:67:12:
                    02:13:1b:8f:4f:e3:b3:0b:12:1b:a6:11:78:80:70:
                    d4:89:90:de:e8:b6:48:82:89:df:30:38:15:b8:4d:
                    a6:26:34:73:2c:1a:bf:8c:ce:ac:19:62:f3:0a:c1:
                    79:e5:d0:0d:fb:20:ae:17:b8:a6:6c:eb:bf:20:57:
                    90:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E1:50:40:2C:DC:E8:C2:DE:D7:85:2B:4C:5B:C6:8F:0D:C0:19:7E
            X509v3 Authority Key Identifier:
                keyid:1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c6:7f:a7:98:d9:83:3d:de:87:c5:57:75:e0:f4:b3:32:9c:
         c3:d3:1d:fc:57:66:5c:7e:0c:42:30:61:a0:63:e2:e6:57:1c:
         2b:2c:28:30:25:bb:8a:17:30:99:89:60:1e:86:83:0e:18:28:
         7c:1d:03:aa:d9:f9:b0:8f:cc:d7:3c:c1:8c:c8:2a:d7:65:f4:
         28:81:4e:c3:b3:6e:24:80:89:fb:0c:3e:80:f5:8e:f5:21:03:
         a2:ec:3f:07:7a:7c:e1:0d:7a:22:33:a6:bb:12:21:e7:96:13:
         0c:84:b9:6e:99:31:70:5a:8b:6b:06:71:31:32:8e:84:86:98:
         48:10:b3:a4:d5:d0:0b:fe:c7:36:ae:ed:1c:d9:70:a2:be:71:
         bf:62:d5:c5:23:fc:7b:87:27:99:80:33:4a:63:9e:1f:12:ad:
         69:5e:c7:f7:4b:08:7a:6b:20:18:39:81:67:ca:b6:14:ae:6f:
         99:9d:b5:3e:8b:a1:d6:79:1a:53:6e:1b:f0:fe:07:d5:33:b3:
         02:dc:25:16:f9:f5:9c:f4:35:2f:b3:b1:c1:1f:62:eb:ce:f7:
         74:4c:cc:b9:bf:bd:a2:52:e6:d2:7e:54:aa:08:fa:29:1c:be:
         89:6c:ac:9f:ff:08:ee:50:b4:c7:f5:62:6f:d4:52:00:71:e6:
         30:50:ee:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:20:23 2025 by rpki-client