Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
File:                     GXYcuDMg_8ugH9gHoG6InMMdhec.mft (raw, json)
Hash identifier:          M6i7L9zwzJALV1MZjh/Ks49NS8+yEWjnLqCoDt3Hw9E=
Subject key identifier:   BD:BA:84:11:7B:75:BE:AD:87:91:56:2D:88:9A:99:93:FF:5B:7C:E8
Authority key identifier: 19:76:1C:B8:33:20:FF:CB:A0:1F:D8:07:A0:6E:88:9C:C3:1D:85:E7
Certificate issuer:       /CN=19761cb83320ffcba01fd807a06e889cc31d85e7
Certificate serial:       0194BB293D14D14CE6C32F34FB75D547F930
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
Manifest number:          7A
Signing time:             Fri 31 Jan 2025 07:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:29 +0000
Files and hashes:         1: GXYcuDMg_8ugH9gHoG6InMMdhec.crl (hash: bgoIWqpT/DVhuNNsuD+UrwSQh8utpH0LPL7aWRaQ7YM=)
                          2: Ty2odF6IC8z1MlXMbYRSCNZm2f8.roa (hash: x0KKkB+0aY8vDOyJs8CL2l2Pu3KalqTjZiy3MLgQKrI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:3d:14:d1:4c:e6:c3:2f:34:fb:75:d5:47:f9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19761cb83320ffcba01fd807a06e889cc31d85e7
        Validity
            Not Before: Jan 31 07:00:29 2025 GMT
            Not After : Feb  1 07:00:29 2025 GMT
        Subject: CN=bdba84117b75bead8791562d889a9993ff5b7ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:c8:ea:61:ab:fb:a4:c6:da:69:c7:f4:71:
                    3e:11:95:c0:0e:5c:5e:f5:e0:c3:0c:70:01:8f:10:
                    e2:e8:ee:77:a8:c8:fc:9e:df:92:6a:68:9b:bc:56:
                    e5:41:5e:9d:97:28:d2:7b:5d:22:cb:d1:81:da:aa:
                    68:b9:cc:d1:52:3d:49:1a:09:96:8d:cf:1d:33:37:
                    dc:42:d0:fe:cb:71:80:0c:22:41:1e:90:f2:cf:44:
                    62:30:f2:6d:c5:52:bd:2f:6e:97:c3:be:86:41:e9:
                    fd:90:56:e5:29:53:9d:0f:b7:65:8a:55:cd:3c:03:
                    a9:a9:98:24:fd:59:61:17:78:70:c7:bf:14:93:d4:
                    d1:3c:cf:8f:d0:f7:52:73:7e:e6:2c:0c:22:f7:5d:
                    46:a9:c0:a8:5f:02:e2:f9:b4:87:3d:eb:ae:87:88:
                    14:cf:e3:45:cf:e4:2c:74:5a:8f:9c:4f:30:19:df:
                    fc:1e:95:38:a9:5e:3a:05:c0:2e:5e:3d:65:ef:6a:
                    f0:57:d1:eb:16:13:a5:ee:8f:97:dd:2f:10:02:09:
                    e4:35:ed:21:f4:66:90:9a:df:91:ad:0a:2f:2a:ca:
                    ec:f0:d5:5a:a6:6b:5a:ae:66:42:c7:b5:08:bb:2f:
                    9a:2b:a9:4a:1a:10:84:14:db:91:2c:55:04:06:1c:
                    33:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BA:84:11:7B:75:BE:AD:87:91:56:2D:88:9A:99:93:FF:5B:7C:E8
            X509v3 Authority Key Identifier:
                keyid:19:76:1C:B8:33:20:FF:CB:A0:1F:D8:07:A0:6E:88:9C:C3:1D:85:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c7:a4:fc:23:4c:0f:fd:86:85:d0:0c:7d:ed:cc:1f:e8:fd:
         33:32:48:f0:74:a0:15:a8:7b:2d:c6:7b:e5:0c:57:a9:4f:14:
         f9:31:00:94:69:fe:a4:d7:ab:0f:d0:ee:96:ff:b1:6d:68:39:
         07:c7:b1:c0:1f:14:c8:79:34:35:58:d2:44:05:b6:74:fc:6e:
         ed:79:79:41:6c:c2:75:84:97:42:86:87:21:9e:80:8c:f7:a0:
         0d:7d:a0:7e:d7:52:c4:b0:70:9d:2f:d0:bb:18:2b:38:80:57:
         0f:ae:cb:96:89:4b:a5:a9:fb:44:aa:93:5b:10:bb:a0:06:bb:
         f8:d4:f1:63:fc:49:d3:23:b0:26:60:27:c6:96:fd:4d:f8:f6:
         c0:9c:42:d2:fe:ce:04:56:1c:25:3d:86:a4:1d:7d:0e:9b:1c:
         a3:c0:90:7e:e1:35:de:37:d5:71:a3:48:d2:4d:be:08:09:36:
         90:a0:ea:a1:36:7d:de:1b:2d:c0:a8:22:31:dc:5f:ff:c2:75:
         ac:eb:07:3a:a4:2e:d1:cc:85:e1:f0:3c:e3:c3:ca:a2:dd:c0:
         8b:0c:1c:33:09:13:3a:0e:b0:44:60:2d:93:95:ce:82:f6:00:
         87:dc:03:c3:2d:70:a3:d6:2b:c6:c4:f0:ea:da:cd:bb:b3:06:
         b3:ae:07:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:34 2025 by rpki-client on console-fra.rpki-client.org