Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
File:                     gcGu10qtBrG4XFumd5wWH0pSs8Q.mft (raw, json)
Hash identifier:          ItqO7ABf/GDHJiL9lbFqVIx0lbcPdzfyVd2o0ZldYNY=
Subject key identifier:   ED:33:CB:6D:E5:C9:B9:E6:F4:9A:35:40:09:5E:94:FE:08:B1:CD:83
Authority key identifier: 81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4
Certificate issuer:       /CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
Certificate serial:       0194BABB298A9A9FA49BD1AF68BCA9F97708
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 05:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:15 +0000
Files and hashes:         1: EgJWkP_ATvd-WaK0hqp6IaIW95g.roa (hash: Qp/vVw2n2OIqo8aQ+vDa79aTq8YN8BxSb8x/nDkT+pg=)
                          2: gcGu10qtBrG4XFumd5wWH0pSs8Q.crl (hash: pYBIf8RlsVQaknmpCqJRHmkTsNEZ+6A/alx/Zcg6TsI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:29:8a:9a:9f:a4:9b:d1:af:68:bc:a9:f9:77:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
        Validity
            Not Before: Jan 31 05:00:15 2025 GMT
            Not After : Feb  1 05:00:15 2025 GMT
        Subject: CN=ed33cb6de5c9b9e6f49a3540095e94fe08b1cd83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0a:c4:44:a2:f5:26:b4:1d:1e:72:52:16:a1:
                    42:9a:dc:0d:cc:b4:fd:44:7a:4a:da:8b:2f:2f:04:
                    96:19:1b:31:fd:8f:79:41:00:3e:f4:8f:f4:3e:75:
                    79:70:61:c3:91:a3:e0:5f:f5:ce:e5:5e:07:5e:76:
                    10:47:92:48:69:57:30:92:94:3c:d2:7e:b3:fa:f6:
                    42:10:53:cd:33:1c:28:84:56:7e:c2:50:5a:d0:8f:
                    0b:d3:98:dd:aa:0b:29:a8:b4:ca:4f:4c:f8:bb:55:
                    5e:82:46:fb:cf:25:de:ce:13:bb:94:db:bb:f4:06:
                    0e:fb:a4:39:40:5d:c4:37:d4:23:cc:ee:b3:5b:9e:
                    3f:b9:54:be:1b:58:f6:76:de:7c:da:74:21:ff:37:
                    fa:a6:db:1c:77:fb:9b:3e:36:32:6d:0f:46:60:83:
                    96:37:9f:59:db:65:04:b8:d8:f0:a4:32:36:40:f5:
                    42:32:41:4f:72:20:95:48:e8:8b:b5:4e:90:c7:55:
                    fc:2b:98:1d:e9:71:59:f5:f3:2a:e5:7f:62:79:3f:
                    03:3d:e0:19:33:5c:c7:c5:b6:07:8f:06:a2:58:75:
                    7c:05:5a:50:3e:62:e4:0b:a3:fb:48:d6:6e:0f:f3:
                    be:53:44:d9:5d:9e:0d:1c:fc:67:a5:bd:64:ce:69:
                    6d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:33:CB:6D:E5:C9:B9:E6:F4:9A:35:40:09:5E:94:FE:08:B1:CD:83
            X509v3 Authority Key Identifier:
                keyid:81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:9b:51:28:a2:d2:20:12:c7:f0:1f:ef:6a:65:c1:3e:b9:04:
         2c:5d:fa:6a:cd:55:ad:ea:81:e9:79:00:df:42:a2:4d:00:25:
         d8:06:ae:aa:93:ed:6d:02:c5:85:f0:fd:d8:23:59:cb:81:3a:
         4d:b2:97:f5:97:a4:d6:9c:2f:e4:ae:b7:8f:33:4a:e6:3b:11:
         1d:dd:f0:69:23:dc:f8:d3:f1:79:36:94:40:42:9e:43:b4:d7:
         0d:60:b5:1e:3f:e0:9e:97:d3:7c:0b:90:82:39:8d:78:3c:33:
         5f:ab:12:63:3d:5e:cf:ec:39:3e:ca:23:98:a4:d6:bb:da:90:
         f2:5d:fe:08:16:06:d1:e4:49:08:e8:2d:64:cf:72:be:8b:16:
         6c:e3:d8:ba:b5:11:c4:70:93:1c:06:b0:23:3f:93:dc:e0:07:
         f6:e8:c5:f1:58:8d:74:11:8c:f0:9f:cf:5b:7f:24:03:4c:8e:
         db:21:43:3f:d2:ae:f5:56:f6:2e:3c:22:ac:d5:3c:48:91:72:
         d7:61:93:78:c6:1f:8d:3a:8b:74:1c:ed:15:2b:2c:ef:92:36:
         ff:b3:65:23:77:06:f6:49:62:a3:5e:64:d1:09:ff:81:63:79:
         de:56:fa:0d:ab:07:d2:83:9b:44:fe:8f:ec:c0:31:5c:96:3c:
         5a:1a:4d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:02 2025 by rpki-client on console-fra.rpki-client.org