Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
File:                     gCVbZMlsAQvaN98j2JJo6OR0jdM.mft (raw, json)
Hash identifier:          UrgQZ0MJ+rYaqrO7/7yCTovsroc6Nv4wQENG2KZupUQ=
Subject key identifier:   47:D1:D5:FE:F4:75:A1:79:97:28:72:22:72:C9:37:E3:93:A8:E3:D3
Authority key identifier: 80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3
Certificate issuer:       /CN=80255b64c96c010bda37df23d89268e8e4748dd3
Certificate serial:       0194BABB973E8EC6F0BC0DBCD7353FC48C27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
Manifest number:          0610
Signing time:             Fri 31 Jan 2025 05:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:43 +0000
Files and hashes:         1: gCVbZMlsAQvaN98j2JJo6OR0jdM.crl (hash: Iz3hoV1+W2Cid58QiIJj9vC78FTPnjtlFesz2B2uKjw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:97:3e:8e:c6:f0:bc:0d:bc:d7:35:3f:c4:8c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80255b64c96c010bda37df23d89268e8e4748dd3
        Validity
            Not Before: Jan 31 05:00:43 2025 GMT
            Not After : Feb  1 05:00:43 2025 GMT
        Subject: CN=47d1d5fef475a1799728722272c937e393a8e3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:77:b6:31:df:1c:59:35:58:c1:0e:51:28:34:
                    b0:52:1d:74:a0:d4:91:b6:45:fc:bb:18:1d:6f:ab:
                    9f:d4:f5:ae:ce:e1:66:9d:07:4a:b6:70:65:f3:36:
                    b0:a8:a5:83:ec:02:9f:43:25:b6:42:50:7e:c4:61:
                    8d:4b:5e:4a:47:7f:65:00:ff:b4:3d:60:ec:27:1c:
                    cd:a0:23:e4:f7:e9:19:47:ee:3f:7d:4a:49:6d:f2:
                    68:86:cc:a6:bd:66:5f:e5:19:60:d2:97:d9:d6:30:
                    6c:af:6b:71:1d:1d:24:bb:03:f5:c6:61:e7:58:2b:
                    57:6e:02:06:1b:35:95:51:b4:c4:4b:6e:ef:1a:bf:
                    be:26:83:93:aa:59:79:dd:bb:c8:f1:9c:7b:21:60:
                    16:6a:a9:b7:06:84:81:5d:63:d5:15:f2:25:c0:fb:
                    10:e2:ea:81:f7:40:9b:f6:0e:a9:7f:8b:76:41:db:
                    94:f1:b4:52:95:68:49:67:10:91:bf:d3:c1:56:6f:
                    22:21:a3:1c:65:07:51:db:9c:6e:57:80:5a:ab:57:
                    43:5a:37:81:b0:18:71:d6:1f:fe:5c:1d:bf:cb:e4:
                    8f:a4:1b:54:75:7c:be:b1:8c:4b:4f:5f:12:7e:93:
                    1a:8e:ae:04:d4:20:46:0a:2b:19:92:8d:3b:6b:e3:
                    b1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D1:D5:FE:F4:75:A1:79:97:28:72:22:72:C9:37:E3:93:A8:E3:D3
            X509v3 Authority Key Identifier:
                keyid:80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:6b:c1:7b:89:f8:cd:ae:8c:d2:86:65:fd:7e:57:42:22:f9:
         ac:b1:b1:30:e6:7f:d0:53:5b:46:95:2c:91:ea:ec:22:5a:6a:
         29:df:a4:02:ab:8f:94:19:84:00:ef:59:74:d2:43:5a:1e:36:
         69:46:34:4e:84:75:78:b8:9d:39:5c:57:60:8c:53:fb:28:5b:
         db:f1:4a:36:39:61:f4:a2:70:3b:2a:8f:a1:56:8a:58:ff:cf:
         ec:28:a0:97:f9:5f:2d:ea:ae:f4:3a:f0:30:45:e1:24:95:48:
         e8:d9:ef:68:53:d3:c6:cb:d0:55:81:9f:78:3f:46:70:17:32:
         97:3d:96:56:54:78:d0:af:f2:c8:3b:fd:74:c2:5e:b0:fa:83:
         23:98:80:94:70:78:8b:c8:f9:ba:0f:c4:3d:8f:98:6c:f0:97:
         59:35:3d:52:15:c0:1f:97:7b:04:d6:01:33:dd:45:b6:0e:b7:
         52:16:2c:c7:c8:3f:d3:4f:18:d8:6f:24:a8:e3:85:ae:c8:97:
         07:c0:a5:5f:60:23:ce:be:d2:cc:de:13:e5:d9:4d:30:68:b0:
         26:d4:25:ed:8d:40:0a:40:17:66:80:46:1a:ed:9c:4c:a6:6d:
         a3:dd:93:15:ef:60:3f:a5:4c:b0:1a:9f:8f:55:c7:ae:46:a0:
         cc:46:1a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:19 2025 by rpki-client on console-fra.rpki-client.org