
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
File:                     GNgB3p_opmgHWIF4I642ugZcYQ0.mft (raw, json)
Hash identifier:          22ZTIyeaMjr9MN1AAeXGCwUAwlJPfRWWZoo0RY1zTVg=
Subject key identifier:   B8:E1:C9:07:16:42:D8:CF:F1:E2:C5:79:28:81:F4:E5:7C:2F:62:04
Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
Certificate issuer:       /CN=18d801de9fe8a6680758817823ae36ba065c610d
Certificate serial:       0194BABBA6248D0B239BFEF24E5AD63B4B8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 05:00:47 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:47 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:47 +0000
Files and hashes:         1: C4rk1AoVqjrEH7_zmAJ_svnQgQc.roa (hash: 6jKvc5VnDLqI6HwXgEfuuUIvLcH534eewNyGGwZxdKE=)
                          2: GNgB3p_opmgHWIF4I642ugZcYQ0.crl (hash: GXpOR+NsP5dtfLQaBYUiyELdEM4pqNE1HTyN+1kOKVU=)
                          3: O6hC_E85D-gML2iRrUU2b5ibO0s.roa (hash: F14l9yzbuoxNtXqq8ma/CyqbNDJtpPWFpWAVl55tljo=)
                          4: RHkq_2B9aSMLyQYFQ9FNfjZTBIs.roa (hash: H0KL1J+ki0U19ojTdr1t7y2YJD+4cxGfJhTHY1ROEwg=)
                          5: kb5y1-Zbrkx7MXP5JuLQmArjfW8.roa (hash: HnOpO7aMn3/CAKcuytA4hwDqnkBIYl9jaOvFbzTHg2g=)
                          6: pZmFD-f-bh4pXBFGtCsTwrl3XA0.roa (hash: QUgueN8QgFQMRwHuvSGXOdyJNx8a23P2PHJjPzXyVW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:47 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:a6:24:8d:0b:23:9b:fe:f2:4e:5a:d6:3b:4b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d
        Validity
            Not Before: Jan 31 05:00:47 2025 GMT
            Not After : Feb  1 05:00:47 2025 GMT
        Subject: CN=b8e1c9071642d8cff1e2c5792881f4e57c2f6204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7d:d2:47:00:8e:58:ac:3a:02:c5:9e:fc:2c:
                    ff:70:68:be:ae:ed:2d:b2:2d:35:10:f6:7a:08:d5:
                    1c:1e:5b:1a:6d:68:db:63:1f:57:a6:0f:ba:4e:d9:
                    ec:86:34:c3:f3:86:2a:8b:c1:99:93:04:1e:e6:48:
                    85:92:f1:02:67:a2:16:6d:08:f2:87:3f:93:64:75:
                    e8:e7:92:6c:99:2d:b3:54:9a:7a:40:b0:29:9c:f1:
                    73:b1:cc:37:30:8e:f0:3d:7b:29:cf:41:4e:77:de:
                    a9:c2:a5:55:f8:f4:d5:9c:4a:64:9e:36:2b:96:b4:
                    df:a1:cf:ae:a3:1d:94:c9:58:ff:35:01:fd:c4:30:
                    ce:bc:f6:e1:dd:0a:73:bf:f6:54:37:bb:5f:44:78:
                    80:3e:f4:02:6a:09:61:1a:9c:12:a1:d1:4d:82:bf:
                    2c:4c:9b:94:85:d2:9c:a3:5c:18:a2:e1:ba:e5:d1:
                    da:8d:b8:c8:cf:7a:39:d1:8f:74:2f:21:ff:11:4a:
                    81:f8:97:78:a9:f1:1e:f5:f5:87:4f:09:77:9e:b0:
                    f9:1e:07:64:9b:4a:16:4e:57:d1:7c:2a:9a:5e:60:
                    69:9d:b1:98:7f:83:26:cb:2b:04:a9:59:6e:90:23:
                    1c:df:24:43:6a:fc:6c:93:9d:60:5a:42:5c:a5:02:
                    1d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E1:C9:07:16:42:D8:CF:F1:E2:C5:79:28:81:F4:E5:7C:2F:62:04
            X509v3 Authority Key Identifier:
                keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         69:37:27:37:17:af:23:e8:96:ef:5e:30:e1:67:21:14:f4:ac:
         46:22:65:38:ca:63:40:17:5f:44:89:80:c0:8e:84:ae:f5:ae:
         58:73:ff:ef:61:a9:c3:e9:a2:52:0b:ee:a8:49:3f:11:03:de:
         ab:92:32:e2:aa:8b:38:66:f7:e9:0e:dd:2e:fb:f3:03:dd:41:
         ab:06:8a:b9:8e:65:41:24:3f:7e:eb:99:33:df:06:78:24:55:
         ed:bd:d5:bc:e3:2e:ef:78:05:3f:56:c4:44:60:88:83:a5:b4:
         7c:69:c6:9e:f4:85:f7:a4:9f:23:ed:27:aa:13:44:b5:52:75:
         89:b6:8d:da:ae:0e:9d:52:4e:eb:84:71:8d:be:87:4d:da:d8:
         99:34:2d:0a:60:da:96:02:5b:dc:2d:05:dd:8f:6d:7a:f4:11:
         47:b6:00:8a:ae:74:d6:23:7d:39:83:6e:05:19:13:ce:b5:8c:
         10:f9:58:2b:09:b1:8c:80:8e:a1:bd:77:ee:aa:aa:12:e2:f9:
         e2:60:61:c9:17:d8:74:ec:e0:50:90:8e:1d:cc:df:81:4e:ef:
         a8:95:fc:fb:12:d8:21:14:f4:23:c8:cd:ef:49:c1:54:85:ab:
         7d:95:54:be:71:7e:d9:31:d0:c3:57:ad:fd:26:a4:7c:56:f1:
         a3:2c:91:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:23 2025 by rpki-client on console-fra.rpki-client.org