Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
File:                     gC-luYQiYYMgG3AVlrA2iifKkZY.mft (raw, json)
Hash identifier:          cTf/lh3SoRt6dLo5ZcQmxjekVejf68P4J0buK5OjtOk=
Subject key identifier:   05:0D:F6:74:C5:C3:0D:0D:AD:0F:9E:89:42:64:86:02:3C:72:9C:F3
Authority key identifier: 80:2F:A5:B9:84:22:61:83:20:1B:70:15:96:B0:36:8A:27:CA:91:96
Certificate issuer:       /CN=802fa5b984226183201b701596b0368a27ca9196
Certificate serial:       0194BB2947A5B31D2B136025DEFD8124BDB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
Manifest number:          05C6
Signing time:             Fri 31 Jan 2025 07:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:32 +0000
Files and hashes:         1: gC-luYQiYYMgG3AVlrA2iifKkZY.crl (hash: KkB9cOP+uCayi4CQsK309KfBQXxS3C1exfrC8S5f8uQ=)
                          2: iOg6nBqVzcdi2Akc2tXxbjOUGMU.roa (hash: 7kGU2Yz8c6ke6znrEKsk6Gl+moXJfyEygACJlbdXCNU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:47:a5:b3:1d:2b:13:60:25:de:fd:81:24:bd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802fa5b984226183201b701596b0368a27ca9196
        Validity
            Not Before: Jan 31 07:00:32 2025 GMT
            Not After : Feb  1 07:00:32 2025 GMT
        Subject: CN=050df674c5c30d0dad0f9e89426486023c729cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:0a:7a:ac:a1:15:86:67:90:aa:e3:43:aa:
                    9d:e1:a4:f0:ed:d4:07:83:f3:86:4d:73:73:01:27:
                    00:99:63:48:b1:7f:c5:71:11:71:f1:75:51:45:8a:
                    dc:22:10:c4:83:0b:7f:8c:38:bc:f4:a1:2f:36:a8:
                    f3:72:75:66:22:18:de:f1:2e:89:5c:a1:40:f0:b7:
                    1a:c8:31:ca:15:e9:1b:4c:9e:10:43:b1:7a:a1:86:
                    e4:39:e6:70:c3:b5:2b:39:2d:79:ef:93:01:27:4c:
                    96:07:9f:e8:70:93:d4:0b:7b:f7:71:d6:47:fd:bb:
                    f4:61:a1:0f:e8:60:3b:18:58:29:e8:16:c9:4d:f9:
                    93:79:d4:e7:75:30:55:7d:f3:11:a1:fa:a1:8c:a4:
                    73:ce:e9:a7:98:ce:e8:fb:b4:9d:17:02:0a:0f:c5:
                    db:37:b3:cb:f6:12:16:8a:f2:c3:c1:ea:75:10:17:
                    62:64:60:05:e5:a5:7f:7d:7a:41:f0:69:07:51:08:
                    42:24:0e:b0:27:63:7b:36:1b:b6:56:1f:cc:66:74:
                    7a:8f:01:33:a2:76:38:70:6e:6a:d8:2a:d3:ed:56:
                    95:7b:32:ad:6e:1a:a8:ba:75:ab:d4:77:d0:bb:63:
                    ce:ad:94:6d:11:89:b1:aa:dc:d2:f8:76:e5:1e:e1:
                    a0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0D:F6:74:C5:C3:0D:0D:AD:0F:9E:89:42:64:86:02:3C:72:9C:F3
            X509v3 Authority Key Identifier:
                keyid:80:2F:A5:B9:84:22:61:83:20:1B:70:15:96:B0:36:8A:27:CA:91:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:60:20:96:1e:d2:a1:d5:a2:b3:a3:7b:ae:52:37:ba:39:ea:
         ca:8d:87:d4:ce:03:a3:e1:6b:f3:90:50:70:c2:7b:fd:c0:7f:
         cf:3a:7a:aa:bf:80:71:c4:ac:5c:fa:14:be:50:7b:67:7b:2d:
         98:3e:d2:9e:c3:eb:b4:8b:0c:16:1a:61:34:27:61:58:69:09:
         97:f0:3e:47:cc:df:9e:0a:7a:42:85:58:d4:5a:59:a9:7e:07:
         d5:87:22:72:f5:cf:aa:b3:f5:a8:52:b2:6c:ce:20:2b:dd:c2:
         a7:05:0b:58:e1:f6:65:8b:11:a3:95:0f:aa:ab:46:c0:11:1c:
         99:67:5b:71:3d:36:7a:f9:7f:de:a1:99:0c:57:b4:51:7f:d2:
         2e:06:48:82:00:da:ec:4a:f1:a0:4a:23:47:83:f6:e4:5d:60:
         10:a6:49:6b:a3:b1:c0:29:6b:50:4d:0d:36:77:95:6c:c8:6c:
         f8:75:89:27:5e:57:10:7b:ff:47:2a:03:6c:c4:b7:d5:22:25:
         71:05:bb:0c:47:dc:54:92:58:b5:68:5c:40:d2:4b:c2:ed:cf:
         c4:60:e6:b3:9d:ee:4d:6c:21:d7:ed:b6:92:86:77:28:93:cd:
         2a:a6:4d:65:e0:75:a8:8b:93:25:67:28:06:4c:72:bb:96:60:
         a9:33:cb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:40 2025 by rpki-client on console-fra.rpki-client.org