Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
File:                     GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft (raw, json)
Hash identifier:          04++9KOAUKo1/a3i5kLB85w9qAtqya9uvVDpQnIGdX0=
Subject key identifier:   EC:5B:CB:26:90:10:41:6C:6E:72:8A:EB:66:2B:6B:97:77:12:D3:31
Authority key identifier: 18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19
Certificate issuer:       /CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
Certificate serial:       0196865AC72513644569A9BC84CE3CCB20DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
Manifest number:          1516
Signing time:             Wed 30 Apr 2025 11:00:18 +0000
Manifest this update:     Wed 30 Apr 2025 11:00:18 +0000
Manifest next update:     Thu 01 May 2025 11:00:18 +0000
Files and hashes:         1: GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl (hash: JPRM9CVdn08GYurrwEwaH2AevoEQYjYSzl7s+7Cciyg=)
                          2: cQ6MhpO8rPGnD_a1i9qTBhEi6oc.roa (hash: vZJMIqd7qPtuLbpQh2RJrNA9qcCFAJKecdV+n3y6GLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:86:5a:c7:25:13:64:45:69:a9:bc:84:ce:3c:cb:20:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
        Validity
            Not Before: Apr 30 11:00:18 2025 GMT
            Not After : May  1 11:00:18 2025 GMT
        Subject: CN=ec5bcb269010416c6e728aeb662b6b977712d331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:27:10:f7:b9:8d:5d:b3:47:3b:21:7c:d3:83:
                    bb:32:da:4f:66:80:ac:7a:3c:86:02:0c:a5:d6:bc:
                    18:01:73:40:9c:f1:b4:8c:9c:bb:91:47:a5:44:5f:
                    ee:cc:d0:7c:6a:5a:1e:c5:18:6d:59:19:eb:1a:7c:
                    93:0b:71:90:5e:95:e9:7b:b8:9d:4a:48:2d:2b:66:
                    bb:c8:8f:3b:2d:7b:ea:c7:07:ba:ef:87:e3:33:69:
                    b3:40:90:61:3f:50:e2:30:95:5a:9a:aa:f3:1f:fc:
                    1b:a0:fe:f0:73:a2:c6:9f:30:de:7b:79:a2:6a:8f:
                    ec:72:0a:b2:06:58:55:b9:c2:b5:b6:ad:e9:a3:f1:
                    c6:66:35:be:e5:c8:74:69:39:ee:46:d1:89:6c:b0:
                    b9:65:ca:ec:71:33:a8:b7:9b:af:0b:5d:cb:ff:6a:
                    69:fa:d7:80:27:68:ca:5b:f5:56:56:46:a9:e2:69:
                    26:e2:89:cc:3b:b0:8f:9c:84:56:b9:91:c8:64:4a:
                    f3:01:83:13:3b:c8:d0:f1:c6:fa:38:e7:f3:5c:e1:
                    30:a1:98:db:ae:51:d8:11:80:97:5c:b9:f4:e4:39:
                    84:19:03:92:61:44:77:56:4e:c8:dd:dc:3e:db:db:
                    23:69:6b:54:21:ef:d3:40:b6:fc:4a:a0:26:37:68:
                    8a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5B:CB:26:90:10:41:6C:6E:72:8A:EB:66:2B:6B:97:77:12:D3:31
            X509v3 Authority Key Identifier:
                keyid:18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c4:e4:ea:58:31:fb:83:0e:59:22:ca:e2:19:16:f5:0d:ee:
         3e:01:dd:4c:26:8b:28:e0:69:74:de:85:ff:1c:e7:19:d7:0a:
         5c:e5:2f:bf:f1:df:bc:05:ca:27:4f:5f:b9:00:78:b5:02:ed:
         5f:07:24:b2:2a:5f:04:34:e1:9d:19:21:d1:c0:0d:b2:5c:d6:
         6c:59:5b:6c:c4:d9:30:ff:c1:b5:dc:83:9d:a6:24:ae:f4:14:
         a1:a3:9e:7b:f4:bc:7b:7b:ed:67:a0:76:bd:5c:c4:f3:8f:5b:
         c7:e8:7a:c7:44:a8:12:c8:55:9a:6c:67:97:b2:05:ed:f4:80:
         41:d4:72:76:5f:c3:e2:01:59:a8:fb:45:8d:50:0c:f5:54:a3:
         aa:71:87:4d:b9:ce:38:c4:2c:1e:6c:91:bb:77:c1:a4:d0:a3:
         8b:a2:ec:e3:53:c7:8a:2c:f2:2b:c8:20:26:62:81:9c:46:c0:
         37:2f:70:05:12:7c:da:d8:cb:0b:e8:33:8d:79:fd:ce:99:55:
         7a:56:7d:06:79:57:b4:14:af:94:36:9f:e7:78:3d:85:f9:3d:
         cd:70:75:a3:5b:5d:03:47:75:4d:d6:ee:80:de:1f:4c:47:7f:
         01:27:03:94:ed:76:e8:14:39:25:4d:b3:3c:38:84:7b:79:d9:
         eb:f8:a6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:36:58 2025 by rpki-client