Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
File:                     GGDjbiWx26EXgHXIA8KaBEzs_eE.mft (raw, json)
Hash identifier:          bDMav2tb7xeyhjkTj4mkIcWrGtBxxHeRsYpm99XH0DI=
Subject key identifier:   5D:62:85:F3:6A:88:2B:D7:0C:04:00:0A:19:6F:40:A1:74:04:21:87
Authority key identifier: 18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1
Certificate issuer:       /CN=1860e36e25b1dba1178075c803c29a044cecfde1
Certificate serial:       019679EA25D126A3D4FFBF37A0FB1C21E987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
Manifest number:          0832
Signing time:             Mon 28 Apr 2025 01:01:50 +0000
Manifest this update:     Mon 28 Apr 2025 01:01:50 +0000
Manifest next update:     Tue 29 Apr 2025 01:01:50 +0000
Files and hashes:         1: GGDjbiWx26EXgHXIA8KaBEzs_eE.crl (hash: tlOBbL8cVgr3MoLrerCV7IzQL81ft00WFVv+cbdqjlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:ea:25:d1:26:a3:d4:ff:bf:37:a0:fb:1c:21:e9:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1860e36e25b1dba1178075c803c29a044cecfde1
        Validity
            Not Before: Apr 28 01:01:50 2025 GMT
            Not After : Apr 29 01:01:50 2025 GMT
        Subject: CN=5d6285f36a882bd70c04000a196f40a174042187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ef:eb:a9:25:5b:8e:83:e8:e6:d1:06:e5:c5:
                    78:e3:97:f4:0b:3e:84:76:af:ec:58:36:9e:7e:ac:
                    00:da:18:2c:63:32:7b:32:20:7e:eb:3e:ab:c5:3f:
                    69:24:cb:d1:b2:ab:4a:52:a4:95:cb:a7:76:b4:9e:
                    68:d5:7e:ae:3f:4c:56:3f:31:cd:30:40:7d:a9:57:
                    9b:b4:94:dc:e2:42:f7:9e:02:16:c9:16:5c:68:8d:
                    e7:63:ac:1b:84:e7:d0:9f:ca:d4:f1:f9:0a:22:a0:
                    e3:ae:6b:92:8a:60:23:a0:2f:b6:ba:71:c1:89:61:
                    92:2b:23:d4:16:cc:b8:18:30:54:2c:8f:e2:5c:7b:
                    75:c3:ec:2b:12:d0:8a:56:68:67:72:ea:24:35:92:
                    4b:b8:3c:c7:13:8a:6d:0e:0f:ec:3c:06:7d:0f:37:
                    50:d3:1a:2f:4c:0c:ef:1f:09:73:8d:d2:5e:6e:2e:
                    c2:fb:35:9d:78:82:67:29:ad:5d:c2:d1:27:71:6d:
                    74:8b:04:87:4b:25:ce:3c:e2:b6:93:7c:dd:14:2a:
                    bf:7e:2b:ae:6e:01:78:73:7e:e5:9f:e5:2b:d9:fb:
                    22:88:df:2a:27:33:3b:ae:c3:80:c7:04:20:41:2d:
                    25:45:08:f1:cc:96:81:c5:ee:a7:38:92:61:e6:56:
                    fc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:62:85:F3:6A:88:2B:D7:0C:04:00:0A:19:6F:40:A1:74:04:21:87
            X509v3 Authority Key Identifier:
                keyid:18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:bd:ea:9b:cf:e8:db:4e:6f:be:2d:fc:9e:c3:f1:ac:41:64:
         f9:b6:32:33:d9:57:ee:5e:0f:ec:23:e5:2d:03:43:f3:0e:d5:
         c8:b7:64:12:c8:e7:61:26:e8:96:fd:56:90:2a:7c:7f:40:53:
         15:13:5a:5f:f4:ac:f3:c1:8d:82:b0:1f:94:f1:ee:22:f2:5e:
         4b:73:c2:94:35:79:1a:00:d5:6d:ee:4e:70:dd:8e:47:7e:f9:
         78:1b:79:06:28:7f:61:a4:18:43:a7:8c:a7:61:22:69:c3:94:
         43:a3:50:a6:f4:f2:bf:74:27:0f:1c:43:79:2d:57:d6:b5:b5:
         6e:87:16:84:dc:5f:19:9c:ac:52:fe:1a:40:f5:bc:a5:c1:57:
         a9:9f:5f:0d:42:e4:a6:c8:b5:51:89:a0:c5:d7:b1:f3:23:b9:
         8f:43:89:89:68:31:fd:1a:4e:a0:ea:87:7f:a7:af:d9:fd:d6:
         97:50:c4:94:90:33:6f:93:ac:5c:11:00:96:bf:21:40:2d:1d:
         1b:61:39:4a:d0:1d:04:02:a1:14:98:98:77:7a:9d:54:26:7e:
         9a:f8:b8:e5:16:ba:92:e1:b2:a0:c2:96:bb:90:04:d8:b5:57:
         63:4a:f9:b1:e7:68:92:26:f0:22:c9:8e:d5:8f:ac:6b:fc:9b:
         3a:4b:00:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:17:33 2025 by rpki-client