Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
File:                     Gc3YIGweNSxQZeSBeX73evDD3o0.mft (raw, json)
Hash identifier:          gaqjAYVUP6l1SBK+ve20fA7au4A4QmU/0YGtF5as3PM=
Subject key identifier:   19:AA:EE:86:A8:8C:42:60:40:DB:2A:B6:53:10:3B:19:27:5F:C2:AF
Authority key identifier: 19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D
Certificate issuer:       /CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
Certificate serial:       0194BB28E951AC1CC242B0325447D9C227C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
Manifest number:          0AE0
Signing time:             Fri 31 Jan 2025 07:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:07 +0000
Files and hashes:         1: BXWkDJgGeE3wLT1lYDsJPAlavfw.roa (hash: irjuewqr+XdI7kgKWav4JZTl4lqEMRRX3Cq/Qdp74jc=)
                          2: Gc3YIGweNSxQZeSBeX73evDD3o0.crl (hash: DYMHZ+0uqfeQjifqx9Dad8w4nw69o0wgdee7qwgOcAY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:28:e9:51:ac:1c:c2:42:b0:32:54:47:d9:c2:27:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
        Validity
            Not Before: Jan 31 07:00:07 2025 GMT
            Not After : Feb  1 07:00:07 2025 GMT
        Subject: CN=19aaee86a88c426040db2ab653103b19275fc2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ee:4c:b9:3b:5e:14:8a:bb:35:28:1b:f4:40:
                    72:c4:8d:10:f8:65:87:d6:14:ea:7b:0e:b2:63:74:
                    67:57:80:2a:47:d0:07:73:08:48:34:11:24:e7:03:
                    00:5e:36:1c:ee:73:e7:4c:7a:6b:df:e0:17:e0:3f:
                    5e:66:e7:1f:bd:aa:ff:55:1e:f5:5b:33:ec:d3:c2:
                    4b:dc:06:c0:e0:99:f5:2d:e1:62:45:ce:1d:d1:03:
                    ad:2c:6a:54:5b:d5:4a:af:6b:90:f9:56:45:73:af:
                    e8:16:54:16:f6:6d:35:5c:ce:aa:87:4b:1d:53:00:
                    49:b0:ef:4b:60:73:ee:96:ff:20:7b:91:ad:3e:49:
                    82:03:b0:06:cd:b5:a9:d1:95:81:59:cf:77:eb:d1:
                    3e:3c:5a:dc:1e:5f:51:68:3f:f9:e8:d1:84:9a:66:
                    f6:b9:2d:f7:9d:bc:a4:21:47:58:8d:57:bd:26:91:
                    c5:67:ce:4f:19:c2:1c:59:3a:c4:07:5e:07:8c:a4:
                    89:c7:d2:2e:cb:d8:ef:a8:3b:f3:95:c6:46:22:08:
                    59:6b:b1:a4:3d:19:5c:91:cd:a1:8d:37:37:f7:76:
                    00:43:73:f2:80:76:c2:c9:2f:8b:73:14:b5:9b:6e:
                    17:a4:e5:f8:d4:2f:38:cd:cd:52:50:e6:a8:f9:eb:
                    ed:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AA:EE:86:A8:8C:42:60:40:DB:2A:B6:53:10:3B:19:27:5F:C2:AF
            X509v3 Authority Key Identifier:
                keyid:19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b8:0a:0d:4d:18:8f:ec:cb:f7:a1:a8:f9:fc:3e:93:c9:3c:
         6e:09:84:0a:6c:52:22:b9:9c:ca:61:73:61:a9:46:fa:2b:d4:
         cc:d0:a4:27:52:d8:b0:7f:e9:bd:21:69:cc:39:e0:6c:e6:4d:
         6c:3c:51:8f:0c:bd:79:29:d6:76:60:d8:01:6e:f9:b2:2d:3b:
         57:56:53:d2:37:2f:a1:94:81:a1:ff:ce:e4:f0:2e:3f:e2:75:
         be:b4:c6:5d:4d:f7:8e:83:3d:04:14:85:05:3a:9a:6e:f7:d7:
         b5:08:d8:4c:f2:90:be:b4:b8:36:9a:26:df:18:0f:8d:1d:c0:
         09:b0:5a:68:24:f8:99:ce:93:fa:97:e2:c8:b8:d9:96:81:79:
         d0:7e:e9:c7:bc:fa:22:e1:d9:fc:76:a9:65:1a:f1:c5:c8:e3:
         1c:5b:0a:ee:9c:2f:3f:70:3c:20:be:69:fd:bd:96:8f:b8:ef:
         59:3e:22:8b:11:80:1f:a8:7c:11:c9:ee:6a:0d:5b:51:20:74:
         88:67:e1:e4:2d:36:cf:1a:e2:c5:04:84:c7:c3:e9:0b:eb:93:
         1e:c3:b1:be:f3:2e:54:02:92:52:07:a4:eb:46:74:93:13:57:
         64:78:e9:b0:3f:f0:1f:e1:64:6d:9c:19:ae:fe:a1:bb:be:cc:
         f7:f1:04:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:28 2025 by rpki-client on console-fra.rpki-client.org