Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
File:                     gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft (raw, json)
Hash identifier:          xPK9gTHHtp9YLy5MDs8CIj8v7VufXhK+37C9nEet/Ko=
Subject key identifier:   7D:92:1A:B5:EA:B8:CB:DC:D1:76:0B:CC:0E:D2:1A:03:83:8E:62:DE
Authority key identifier: 83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
Certificate issuer:       /CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Certificate serial:       0196876D5EAD4CA6C8E66079B98A706ADAAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
Manifest number:          1517
Signing time:             Wed 30 Apr 2025 16:00:13 +0000
Manifest this update:     Wed 30 Apr 2025 16:00:13 +0000
Manifest next update:     Thu 01 May 2025 16:00:13 +0000
Files and hashes:         1: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl (hash: 6wpb4DhJHu8Ozg2y7Ae83So9I4+uwa3k+yYHezi7wBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 16:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:87:6d:5e:ad:4c:a6:c8:e6:60:79:b9:8a:70:6a:da:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
        Validity
            Not Before: Apr 30 16:00:13 2025 GMT
            Not After : May  1 16:00:13 2025 GMT
        Subject: CN=7d921ab5eab8cbdcd1760bcc0ed21a03838e62de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:7a:a5:a5:ca:2f:9e:ae:fc:3d:54:21:12:
                    5c:25:9e:9b:ba:b1:e1:a5:83:fb:d2:c6:c3:be:79:
                    e4:97:8b:8e:56:d6:37:d8:03:fc:c3:ae:8c:f5:61:
                    77:40:82:fb:3d:42:99:66:9a:3c:45:3c:eb:76:33:
                    c8:e7:23:40:d8:55:28:af:85:ac:7c:79:f1:9c:7e:
                    65:1f:60:ec:a1:82:61:4b:07:79:b9:de:43:97:c7:
                    18:4b:54:f7:90:52:e0:df:c7:ca:85:89:18:c0:81:
                    33:3a:39:ee:45:00:3e:68:65:a0:c3:16:e4:5b:01:
                    9b:e5:01:ad:eb:f0:26:8d:f6:b1:a4:f8:1f:51:1f:
                    39:7c:ac:06:14:90:23:c3:18:d3:2b:6e:84:3c:91:
                    3f:52:b5:45:ca:b0:3e:a7:32:09:5f:68:41:fc:72:
                    06:a9:2b:2a:41:57:cd:0e:e9:f8:20:1f:5d:1e:c3:
                    16:3b:48:28:4f:d7:77:22:c0:c5:e1:d2:db:f7:ae:
                    32:9d:b8:db:71:c7:26:4d:24:74:bc:1a:6e:b6:4c:
                    47:4a:e1:69:25:5b:d4:c4:b0:65:0b:04:c3:92:55:
                    ef:f6:a1:01:2f:2a:eb:20:30:fa:e0:11:9e:ed:1e:
                    fd:23:64:f5:1f:e9:7e:df:0f:ac:e6:9e:23:e9:3f:
                    b8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:92:1A:B5:EA:B8:CB:DC:D1:76:0B:CC:0E:D2:1A:03:83:8E:62:DE
            X509v3 Authority Key Identifier:
                keyid:83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c7:68:d6:2e:6b:fa:81:c9:e5:8e:bd:0d:3e:c8:56:94:70:
         9b:2e:17:d3:ba:ff:91:8c:41:15:b1:ca:79:e5:6e:5a:ec:7a:
         62:ed:e8:c5:d7:b2:d4:a6:c4:1e:0e:0f:05:05:b4:7e:d0:10:
         4a:d7:97:b6:99:20:fc:7d:3b:06:89:e5:b9:0b:0f:c3:b0:f4:
         90:28:58:9b:c8:48:aa:a6:c7:8b:6d:39:d5:f2:cb:c6:82:b8:
         bd:10:6f:44:6d:08:a5:9a:f2:b9:ef:af:b1:4d:ae:e5:25:7e:
         2a:57:87:ca:43:ac:c1:13:50:28:78:b1:2d:d5:fd:1b:e5:80:
         2c:4d:32:ff:3c:50:32:5c:b2:ea:6e:63:6e:95:94:7a:61:51:
         dc:c6:c3:3d:d5:96:ca:f2:11:c4:7c:b5:c0:84:e1:0f:ce:c5:
         f3:ca:68:55:7e:60:f8:9b:39:01:3b:29:61:4f:89:65:e4:b4:
         11:e0:34:d1:9f:38:ee:ef:b4:a9:41:02:a9:48:8f:d3:3f:ac:
         3d:2b:03:81:01:d4:25:c2:7e:d4:de:b3:10:0b:b6:68:01:12:
         df:bf:c6:46:49:8c:e6:02:a3:76:a9:f5:d7:a9:04:f4:9c:ed:
         9a:20:b1:09:f0:4c:57:a9:8d:0f:c9:b1:ef:17:7a:a0:e3:b2:
         ce:b4:67:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:25:49 2025 by rpki-client