Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
File:                     GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft (raw, json)
Hash identifier:          4lZqd4kU0mBm9v9jy4ntNSNTaWg4rACmgU2jo1tamzo=
Subject key identifier:   7C:98:2B:11:59:F1:D4:40:20:3A:D4:EB:DA:0D:C0:E5:C8:22:94:7A
Authority key identifier: 1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2
Certificate issuer:       /CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
Certificate serial:       019677FAF224B0A30FF689EB9BCAA5AC4969
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
Manifest number:          04F2
Signing time:             Sun 27 Apr 2025 16:00:56 +0000
Manifest this update:     Sun 27 Apr 2025 16:00:56 +0000
Manifest next update:     Mon 28 Apr 2025 16:00:56 +0000
Files and hashes:         1: GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl (hash: yMr1Im9T3pIC3f7RW+vjlDCjysj3TmCvLH7bxK3H+Pk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fa:f2:24:b0:a3:0f:f6:89:eb:9b:ca:a5:ac:49:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
        Validity
            Not Before: Apr 27 16:00:56 2025 GMT
            Not After : Apr 28 16:00:56 2025 GMT
        Subject: CN=7c982b1159f1d440203ad4ebda0dc0e5c822947a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b7:2e:de:4f:4b:65:a9:6c:33:7f:a7:91:06:
                    08:d6:d5:56:8a:2c:26:a9:f8:4f:cc:de:a6:2c:80:
                    ec:de:1c:13:b5:08:13:a2:3b:16:eb:5c:ea:f4:66:
                    04:c8:ed:17:d8:68:5a:02:11:68:34:76:33:9e:43:
                    86:15:04:6b:48:36:f5:1a:ae:42:17:ff:b0:f4:5a:
                    7c:e1:b4:32:fe:35:38:34:0d:a7:80:40:0a:6f:1f:
                    4b:f4:29:06:f6:77:6c:70:25:f1:e7:08:4b:62:cb:
                    4f:cc:f8:06:70:88:f8:04:4e:68:a7:69:ac:06:a0:
                    9a:a2:d8:fc:d6:26:8c:13:00:36:e1:20:02:62:7f:
                    82:a5:e3:ec:af:3e:9a:be:01:b0:6e:0c:f7:4a:7d:
                    1c:1e:1d:9f:b6:6a:7d:db:03:23:a0:e2:98:3d:de:
                    49:9d:3f:f0:fc:bd:33:4a:8e:28:64:db:b9:f6:b2:
                    db:2a:7a:c8:ef:31:04:7d:c3:67:fa:a3:13:ce:21:
                    11:92:4e:2f:2c:91:ac:c6:ac:9b:a0:9e:0a:4d:87:
                    e8:14:e5:4e:3b:36:99:14:96:64:eb:43:d7:2f:2f:
                    41:16:5b:5e:f1:08:a7:dc:45:98:fb:83:80:30:ec:
                    97:96:a7:69:22:a6:48:55:8a:4b:3e:91:f0:67:9c:
                    38:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:98:2B:11:59:F1:D4:40:20:3A:D4:EB:DA:0D:C0:E5:C8:22:94:7A
            X509v3 Authority Key Identifier:
                keyid:1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:30:bb:bb:10:e3:d4:69:64:e0:d9:82:4b:56:d3:1b:55:65:
         de:f7:f1:10:8b:d7:c1:4c:f0:1a:69:c7:3d:0a:e9:42:ee:b2:
         83:41:11:79:b4:c2:08:6f:cc:5e:8d:5e:ab:26:16:e5:84:c4:
         db:6d:ea:da:04:a7:a6:bf:7a:47:9f:e3:74:22:12:4d:42:b7:
         54:ac:2b:ca:39:b9:15:23:65:ed:7b:1b:a1:39:2d:38:e2:85:
         92:7c:59:de:8c:bb:e2:4e:6b:42:e9:1d:e1:06:1a:ed:c1:c2:
         9d:5a:80:b8:52:42:09:d7:aa:d6:e5:08:72:bb:25:42:92:97:
         97:ef:9f:58:93:64:ae:96:4b:43:e3:6e:3b:f4:0c:59:32:77:
         c3:e1:70:b2:b2:73:6e:3f:69:5d:17:59:b5:cc:c9:11:a4:73:
         9f:c3:f0:7f:df:04:18:f7:cc:f2:81:8d:9b:50:ab:1b:d8:cf:
         98:06:24:bd:27:62:bb:5f:09:a3:41:4c:a2:dd:d0:4c:fe:ac:
         63:62:a1:53:12:fa:2a:7e:b6:ab:0c:b2:ec:57:e4:36:b9:ca:
         f7:db:22:64:61:85:bd:1a:9b:a6:01:b1:ad:8d:67:21:9f:3d:
         3f:51:79:f2:67:c6:a9:57:7e:65:90:b0:da:3b:a6:97:6e:cc:
         a5:0b:e4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:30:39 2025 by rpki-client