Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
File:                     GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft (raw, json)
Hash identifier:          +9uSNDroveiU6Wf1/lEM1MimWc9TWuGOaJQlwVA8pEY=
Subject key identifier:   23:B1:D6:C1:6D:B4:ED:EC:42:08:80:17:6E:DA:3D:BF:F4:EA:20:DA
Authority key identifier: 19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91
Certificate issuer:       /CN=194e32a82e98f22d939ff9984455813be2ba6a91
Certificate serial:       01968058F893FC54037C373E5958EC069BCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
Manifest number:          32
Signing time:             Tue 29 Apr 2025 07:00:36 +0000
Manifest this update:     Tue 29 Apr 2025 07:00:36 +0000
Manifest next update:     Wed 30 Apr 2025 07:00:36 +0000
Files and hashes:         1: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl (hash: 5XpGuE8uvEy6hnrur923fOcdZutqdAf1lRwgII32qnU=)
                          2: UfSgUAAlY9L-pxjy9r66ZUMHciI.roa (hash: lfZloxngOlvdGd9PgYcQqf9/LWwVeSvhKaVHeCHu4Rc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 07:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:58:f8:93:fc:54:03:7c:37:3e:59:58:ec:06:9b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194e32a82e98f22d939ff9984455813be2ba6a91
        Validity
            Not Before: Apr 29 07:00:36 2025 GMT
            Not After : Apr 30 07:00:36 2025 GMT
        Subject: CN=23b1d6c16db4edec420880176eda3dbff4ea20da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e4:34:32:2d:25:d8:d7:bf:20:65:01:61:92:
                    61:9b:66:0d:22:93:a4:f4:29:84:dd:8e:a9:8a:7d:
                    48:d7:b3:75:17:bf:67:ea:ec:02:57:84:09:15:f7:
                    78:65:ee:f4:c6:16:04:fc:35:f8:30:43:81:19:82:
                    0f:59:b7:68:fe:98:07:de:5b:5b:70:e7:de:58:68:
                    2c:46:e1:13:0b:5b:28:81:76:e7:c8:de:c0:b8:72:
                    b4:6d:f3:3c:3c:81:5b:1f:95:66:a3:81:91:e4:d3:
                    db:10:48:ac:b9:29:3d:7c:b7:ea:e8:d9:21:9c:93:
                    0c:cc:ae:ae:7b:9c:92:4e:d8:67:a2:41:c7:8f:d6:
                    0d:0d:f7:8b:1a:85:f2:54:53:ca:2f:72:8c:4a:f2:
                    8d:03:41:9b:54:01:c0:60:f1:9b:18:00:ad:4e:6d:
                    fe:1d:0c:d8:d4:e3:68:5d:0a:94:4f:21:07:ee:63:
                    1c:87:ce:e1:fc:b3:8b:26:fe:e0:7c:f3:9c:1a:97:
                    d1:6b:2d:87:70:41:5a:74:cb:e1:2a:81:52:f0:5e:
                    2d:1b:eb:9b:13:ad:4d:27:08:45:11:ba:c0:71:d0:
                    5e:04:d8:01:28:ec:0d:de:1b:0b:a3:f4:aa:33:87:
                    1c:09:41:6a:c9:2f:22:35:46:bc:08:0a:a2:a0:c2:
                    df:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B1:D6:C1:6D:B4:ED:EC:42:08:80:17:6E:DA:3D:BF:F4:EA:20:DA
            X509v3 Authority Key Identifier:
                keyid:19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:1a:1c:54:b6:1b:87:df:ff:84:27:6e:7a:c2:e8:00:f2:b4:
         66:6a:aa:5f:0a:70:2f:30:48:ee:a6:d8:a7:a6:85:99:74:e3:
         78:cc:80:5c:bf:0a:23:a4:c5:ac:c2:05:11:61:85:ba:59:4f:
         51:70:b8:c9:69:51:d3:53:50:f6:6e:f6:4b:ad:c9:ae:3c:c1:
         1b:08:6a:38:12:d5:6f:65:9d:f4:d9:02:39:13:a9:82:f1:98:
         8e:4e:a7:00:dd:f2:3d:90:25:c0:44:73:8c:43:93:3c:2b:47:
         79:47:13:7b:a6:7a:65:04:8b:c1:08:88:25:22:58:e9:37:cb:
         28:35:ef:cb:37:a3:ee:3a:fe:a5:64:68:af:85:2c:f8:05:14:
         ff:83:3f:7b:15:72:9d:16:a0:32:22:94:3b:7d:38:c6:f1:69:
         6e:63:be:76:85:25:cb:1c:76:c1:70:3a:b6:f1:8e:96:5d:99:
         37:47:35:80:34:6c:fc:2c:ec:0e:6a:49:59:f7:98:3f:bf:f2:
         33:51:3e:1c:27:ec:9e:66:f3:61:84:0c:55:b0:d3:e7:b1:b7:
         fb:85:97:17:10:80:6a:d7:d9:2f:40:af:24:fa:7a:b8:a7:f8:
         1a:aa:cb:cc:71:ed:bd:48:bf:72:8e:4e:3d:c1:35:9c:c2:97:
         5b:6a:c5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:23:18 2025 by rpki-client