Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
File:                     gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft (raw, json)
Hash identifier:          P8a2XQNfApY9tBPTXrLXG1tq+7bLs76rc5bOLWqY/Kw=
Subject key identifier:   B0:A2:A2:9A:DE:D2:AF:10:F9:DB:48:E9:71:D7:34:7D:4D:CE:0C:B2
Authority key identifier: 81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0
Certificate issuer:       /CN=8159495b72ff015878c1314d24759b6e9147a8e0
Certificate serial:       019682472114CE519464A497788411719DAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
Manifest number:          1511
Signing time:             Tue 29 Apr 2025 16:00:21 +0000
Manifest this update:     Tue 29 Apr 2025 16:00:21 +0000
Manifest next update:     Wed 30 Apr 2025 16:00:21 +0000
Files and hashes:         1: gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl (hash: Dvq9clwLzwd3nE/6GtoKu8I1tINgMrBOEyY3TKQuzPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:47:21:14:ce:51:94:64:a4:97:78:84:11:71:9d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8159495b72ff015878c1314d24759b6e9147a8e0
        Validity
            Not Before: Apr 29 16:00:21 2025 GMT
            Not After : Apr 30 16:00:21 2025 GMT
        Subject: CN=b0a2a29aded2af10f9db48e971d7347d4dce0cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d5:a8:6d:e4:92:25:11:c0:d6:db:55:7c:d7:
                    0e:6e:5a:7b:b8:17:55:3d:41:7e:45:7a:3f:a0:f1:
                    6c:30:36:b0:11:6d:5d:09:b9:3a:64:26:6d:d1:cb:
                    2d:f2:62:32:93:cd:b7:f4:1b:77:f2:89:25:88:df:
                    71:2f:94:92:dc:62:59:47:44:2a:99:db:ac:a4:9f:
                    5f:33:09:39:b6:01:c9:5c:d4:ed:98:e9:56:90:24:
                    e2:62:99:f0:3d:5b:62:2f:82:7d:ce:b3:d8:ca:ec:
                    e7:31:29:89:b1:8f:3f:14:fd:e2:a4:41:21:d7:b4:
                    b1:ed:a2:0e:7d:ee:ce:ad:3e:e4:20:95:a7:41:2a:
                    e3:2e:0a:8d:69:9b:14:fe:4e:ff:02:a9:5a:2f:4c:
                    b8:17:a5:96:97:64:3e:9b:15:2c:4f:f7:d4:61:3d:
                    0a:37:f2:7e:6f:51:b7:a2:ef:45:cf:ba:87:36:97:
                    3b:c1:23:d9:4b:9a:71:8d:0d:14:62:83:c5:07:b4:
                    41:30:98:ad:04:63:3c:38:14:7a:06:38:32:18:0b:
                    d8:65:95:ac:16:1e:ae:29:9f:23:3d:98:0f:18:7c:
                    ec:b8:eb:d2:2f:7f:2e:ce:0e:dc:cf:30:2c:28:7a:
                    40:8e:f3:46:da:32:c8:eb:57:9d:79:e0:1b:c8:1c:
                    9f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A2:A2:9A:DE:D2:AF:10:F9:DB:48:E9:71:D7:34:7D:4D:CE:0C:B2
            X509v3 Authority Key Identifier:
                keyid:81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:e1:19:7e:25:f4:3c:56:a9:7f:79:19:e3:23:3d:d2:60:fd:
         6e:53:25:2b:55:e2:d2:ca:fa:66:73:7a:54:2d:e6:1b:07:9f:
         57:cf:26:e8:d8:6d:1e:73:45:bb:36:3f:c0:f3:6e:54:dd:31:
         7f:2a:7f:40:a8:fd:6b:dd:6a:c1:e3:36:9b:fd:7f:65:ae:da:
         1a:ba:6e:f7:06:01:7d:16:dc:29:07:a5:ff:6c:4e:46:cb:59:
         7a:10:34:7d:d8:0d:b6:8b:5b:ec:d6:00:27:0a:b6:28:a0:c9:
         8d:fb:26:b1:29:9b:cc:f2:41:bf:9d:a6:55:63:e4:d3:f0:ef:
         d2:6f:39:f5:d8:8b:0c:fc:a4:46:a0:ec:e9:b9:36:a4:6e:5c:
         91:19:b9:8d:c2:59:3b:50:a6:e3:a3:78:fe:3e:22:05:d1:bf:
         13:ec:41:ac:69:3e:51:9d:3e:78:fc:9d:75:f1:aa:b5:be:b6:
         bb:a0:94:9e:d7:7a:a6:75:34:86:b7:a3:e9:e4:4b:23:8f:fb:
         c0:cb:58:0f:b8:4d:80:3d:4e:e6:d6:05:de:a6:e1:d8:e3:7f:
         8e:83:ba:8a:20:2c:21:a6:fe:2b:af:21:96:db:6c:a1:8c:6d:
         a0:60:03:b4:ba:3c:f9:77:79:b9:d7:f4:b1:3f:97:78:79:57:
         b0:d3:ce:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:29:43 2025 by rpki-client