Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
File:                     gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json)
Hash identifier:          yR8fK0nDwj/JdyP6ZI9CzR8VDUi8A0gC7JjwlCp5Y38=
Subject key identifier:   80:84:DA:0D:3B:0E:BC:9A:86:A0:25:74:38:26:23:B8:08:DB:6A:DA
Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
Certificate issuer:       /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Certificate serial:       019679E986FB1535178219BBF5E3EFFCF884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
Manifest number:          0657
Signing time:             Mon 28 Apr 2025 01:01:09 +0000
Manifest this update:     Mon 28 Apr 2025 01:01:09 +0000
Manifest next update:     Tue 29 Apr 2025 01:01:09 +0000
Files and hashes:         1: 248bDK_2X4s3D78cLTN1zTJo8ls.roa (hash: kLQEr1R8+53FUqqBvs455Xwu5a5on81N6ifpRavsyZA=)
                          2: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: srC25u5H1zpx0m6AkPyu4icT3IfE/IvvKEszBgCya8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:e9:86:fb:15:35:17:82:19:bb:f5:e3:ef:fc:f8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
        Validity
            Not Before: Apr 28 01:01:09 2025 GMT
            Not After : Apr 29 01:01:09 2025 GMT
        Subject: CN=8084da0d3b0ebc9a86a02574382623b808db6ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b6:cc:c6:e2:db:99:5a:d8:67:31:78:10:a7:
                    43:33:34:75:3f:54:48:5c:c9:e6:ec:da:36:dc:61:
                    d8:40:c5:03:c4:32:50:da:4d:f2:a7:6e:a8:ae:b5:
                    63:47:38:04:9a:d5:67:64:87:14:93:44:43:bd:1e:
                    0a:86:ec:a3:db:6b:4f:78:b2:d9:ab:cb:1b:11:cd:
                    2a:f2:e0:47:b6:6c:14:6b:13:6c:43:cb:38:35:26:
                    61:f3:72:e4:92:9d:6d:71:3d:a0:e6:41:71:d6:5b:
                    51:47:eb:cd:ce:2e:03:70:64:fa:a2:25:1e:ad:ac:
                    6b:5f:0e:94:5a:d7:f6:04:dd:09:0e:b1:85:36:20:
                    73:78:38:04:61:f2:74:58:8a:78:02:b3:02:07:38:
                    75:89:03:4b:50:18:ee:e7:7c:4f:fa:34:97:4b:71:
                    35:18:b5:78:b1:e0:5e:5d:54:bc:c8:87:f5:1b:d9:
                    89:d0:b6:09:14:45:88:64:4b:96:14:f3:74:2f:ca:
                    82:9c:9c:27:cf:14:4f:5b:cd:18:e5:ab:18:c3:3f:
                    49:1f:16:67:36:ab:b5:26:3f:10:69:54:82:40:38:
                    03:39:cc:c2:8c:af:33:f5:97:b2:fa:9a:34:36:6d:
                    73:57:d4:83:82:ca:79:fe:90:9c:e1:b9:8c:a7:df:
                    f0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:84:DA:0D:3B:0E:BC:9A:86:A0:25:74:38:26:23:B8:08:DB:6A:DA
            X509v3 Authority Key Identifier:
                keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:1e:3a:81:02:1e:d7:e9:1e:42:f3:e7:9f:82:7e:d8:a6:42:
         50:cb:b2:8d:b4:9e:11:62:0c:ec:3a:c5:ab:36:a9:a9:64:44:
         3f:bf:8c:ca:ee:65:a1:b2:5f:09:2e:26:df:c0:fa:90:7c:3b:
         85:18:0a:e7:a4:30:3b:31:bc:61:c5:6e:8a:0f:57:c6:5d:cf:
         4d:5c:44:bc:09:44:dd:00:af:d6:62:42:36:cd:ea:ff:72:a0:
         c5:05:b7:2d:82:39:5c:16:a6:29:81:7a:16:36:e2:40:05:aa:
         da:eb:d8:55:ae:0f:c6:eb:94:09:26:a9:fd:e7:b4:b9:d5:02:
         e5:2d:ab:03:27:d3:ed:b7:1b:63:be:67:65:0c:8e:c1:9b:6c:
         fe:e4:cd:90:8d:8a:6a:4e:4c:7e:9a:f9:00:3a:44:73:c6:2a:
         b1:28:4c:4c:d4:10:17:54:b7:45:49:1b:4d:34:b4:d8:77:f7:
         59:a4:0c:04:a8:80:92:04:fd:55:ca:9e:fd:7d:7c:5a:f9:ed:
         cf:ad:43:95:81:77:21:1a:60:9c:9a:0d:45:70:d1:92:83:27:
         5b:a4:d9:65:fc:e7:f9:ed:bd:3c:ff:ae:4a:06:48:2d:de:f3:
         9e:12:7b:df:0d:33:bd:4e:75:f5:d4:df:35:26:6c:5a:1b:66:
         d9:f1:28:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56Yb7FTUXghm79ePv/PiEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZmU3ZDAwZTk0Y2QyYTdjYmY3ZjllODJjZjA5OTI0MTc0
MThkZjYwHhcNMjUwNDI4MDEwMTA5WhcNMjUwNDI5MDEwMTA5WjAzMTEwLwYDVQQD
Eyg4MDg0ZGEwZDNiMGViYzlhODZhMDI1NzQzODI2MjNiODA4ZGI2YWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLbMxuLbmVrYZzF4EKdDMzR1P1RI
XMnm7No23GHYQMUDxDJQ2k3yp26orrVjRzgEmtVnZIcUk0RDvR4Khuyj22tPeLLZ
q8sbEc0q8uBHtmwUaxNsQ8s4NSZh83Lkkp1tcT2g5kFx1ltRR+vNzi4DcGT6oiUe
raxrXw6UWtf2BN0JDrGFNiBzeDgEYfJ0WIp4ArMCBzh1iQNLUBju53xP+jSXS3E1
GLV4seBeXVS8yIf1G9mJ0LYJFEWIZEuWFPN0L8qCnJwnzxRPW80Y5asYwz9JHxZn
Nqu1Jj8QaVSCQDgDOczCjK8z9Zey+po0Nm1zV9SDgsp5/pCc4bmMp9/wYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICE2g07DryahqAldDgmI7gI22raMB8GA1UdIwQY
MBaAFIL+fQDpTNKny/f56CzwmSQXQY32MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yMGM3ZTctYTQ5Zi00MDMxLWJhNzct
NjNkZjYwMzE2MWM5LzEvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8yMGM3ZTctYTQ5Zi00MDMxLWJhNzctNjNkZjYwMzE2MWM5
LzEvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAh46gQIe
1+keQvPnn4J+2KZCUMuyjbSeEWIM7DrFqzapqWREP7+Myu5lobJfCS4m38D6kHw7
hRgK56QwOzG8YcVuig9Xxl3PTVxEvAlE3QCv1mJCNs3q/3KgxQW3LYI5XBamKYF6
FjbiQAWq2uvYVa4PxuuUCSap/ee0udUC5S2rAyfT7bcbY75nZQyOwZts/uTNkI2K
ak5Mfpr5ADpEc8YqsShMTNQQF1S3RUkbTTS02Hf3WaQMBKiAkgT9Vcqe/X18Wvnt
z61DlYF3IRpgnJoNRXDRkoMnW6TZZfzn+e29PP+uSgZILd7znhJ73w0zvU519dTf
NSZsWhtm2fEo/g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:35:17 2025 by rpki-client