Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
File:                     GWImUASBB5GK3xsizfCHyKg095w.mft (raw, json)
Hash identifier:          mL7rINXM1940b0CoFcOW62Xs9Ga+33NG+OPiFHNJWKM=
Subject key identifier:   9F:FE:A1:AA:10:24:15:6A:74:93:EB:9B:F1:E2:FE:42:EA:FE:58:31
Authority key identifier: 19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
Certificate issuer:       /CN=19622650048107918adf1b22cdf087c8a834f79c
Certificate serial:       019687DBBB5512AAB4BF8C0A36E65D1AEE9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
Manifest number:          0919
Signing time:             Wed 30 Apr 2025 18:00:46 +0000
Manifest this update:     Wed 30 Apr 2025 18:00:46 +0000
Manifest next update:     Thu 01 May 2025 18:00:46 +0000
Files and hashes:         1: GWImUASBB5GK3xsizfCHyKg095w.crl (hash: dP9Qv9H3P5aOwz2VLZcq13Y9XYStVrrPcc7eJtXGWqc=)
                          2: huPI6u_LRtdxxCntM6xWi8UILhs.roa (hash: dxaGNUPSqDMCpFu0jmftsWJq4vBwtQVy+FWsjciFptc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 13:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:87:db:bb:55:12:aa:b4:bf:8c:0a:36:e6:5d:1a:ee:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19622650048107918adf1b22cdf087c8a834f79c
        Validity
            Not Before: Apr 30 18:00:46 2025 GMT
            Not After : May  1 18:00:46 2025 GMT
        Subject: CN=9ffea1aa1024156a7493eb9bf1e2fe42eafe5831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:18:09:42:1f:c7:6c:52:fd:ef:bb:88:11:ce:
                    f1:80:6a:8b:c1:72:be:ed:1f:85:bd:d5:5d:04:3a:
                    79:20:f9:28:ff:b5:b4:1f:2f:85:42:53:44:45:48:
                    45:4b:08:7d:31:22:e9:77:4e:c3:de:b2:d1:c0:3e:
                    2b:e7:b4:39:3a:13:c7:3d:2b:8a:1d:ed:2b:9b:f7:
                    99:c6:60:de:96:ed:36:c5:2d:e0:5e:8a:2b:26:6a:
                    8d:b5:4a:6f:cb:8d:58:86:da:33:8b:b7:b2:7d:14:
                    7a:23:75:4f:b0:74:d8:92:40:f6:9e:b2:ee:19:0b:
                    b2:1f:a1:42:da:e5:47:6f:b0:96:a5:18:7b:b7:e0:
                    91:46:3a:f0:4e:36:1f:df:c0:28:71:8f:91:30:6b:
                    ef:10:52:ba:12:24:21:4e:d1:82:82:30:d7:f6:66:
                    a6:f3:25:74:42:07:8a:e7:30:fe:e3:f9:c5:15:b0:
                    c4:87:e9:5f:2f:02:b0:50:b5:64:c7:23:f8:69:d9:
                    cc:be:5d:4f:33:0a:aa:22:59:7e:4d:04:26:18:90:
                    76:01:30:50:00:5e:ca:40:a6:02:b9:3c:8d:02:52:
                    9b:0c:ab:62:3d:6d:fb:20:03:43:67:34:d9:dc:09:
                    0d:69:98:cf:78:43:2a:8d:f9:25:d7:03:c7:3a:78:
                    6f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FE:A1:AA:10:24:15:6A:74:93:EB:9B:F1:E2:FE:42:EA:FE:58:31
            X509v3 Authority Key Identifier:
                keyid:19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:2a:18:93:61:70:51:27:cf:21:7c:00:58:d7:5a:6e:2b:b4:
         34:89:3f:44:f2:27:82:e4:de:c1:c2:c1:fc:6f:1e:61:24:1c:
         0b:5f:9f:4b:e2:65:e6:1f:af:33:b5:d8:0f:7f:a2:bd:20:b2:
         97:9c:54:8f:dd:03:31:e9:0b:93:36:48:94:05:06:90:b4:bd:
         9d:14:a3:3a:2e:8b:e4:26:e0:e7:ab:60:fc:99:9b:d8:0b:9c:
         6b:d9:e8:ce:2f:98:65:8e:b1:18:d5:d3:b4:4e:fa:12:58:ca:
         49:28:c4:18:ea:97:c3:95:56:1d:5d:32:86:d6:9e:9b:3b:ce:
         43:12:7f:f9:4a:7f:ee:c1:f9:31:c6:67:e1:b4:71:49:e7:40:
         d0:6b:63:57:72:c2:89:69:58:92:f8:06:03:d7:b0:36:ed:b0:
         5f:55:4e:c7:3d:8c:55:24:9f:2b:fc:b3:66:53:ff:7b:8c:df:
         44:ec:d8:7c:ef:e7:df:71:e4:4b:ca:5b:97:95:e5:c6:61:ec:
         ec:6f:cd:60:71:32:c5:e6:d2:5b:20:09:6a:a6:f1:22:fb:6a:
         54:e5:1f:c1:a6:f6:55:fb:ed:5c:a3:91:c3:30:82:d8:b3:6d:
         8b:fd:97:29:ab:9d:2f:ad:28:cb:8f:3b:76:04:bf:ce:b8:d4:
         f7:2d:ab:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:20:24 2025 by rpki-client