Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
File:                     GipL_SwMaXZagpnvdJZfhipxSLc.mft (raw, json)
Hash identifier:          G33vC+kFHS+R2vN8CpMoRQuJmkvcfZss3/yeKPKymrE=
Subject key identifier:   BB:41:3B:39:16:53:E0:12:43:08:C7:DA:C3:92:DE:2B:EB:9E:D0:7E
Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
Certificate issuer:       /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Certificate serial:       01976997880F54B763FB7B99BF636DCD3DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
Manifest number:          09F7
Signing time:             Fri 13 Jun 2025 14:00:27 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:27 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:27 +0000
Files and hashes:         1: GipL_SwMaXZagpnvdJZfhipxSLc.crl (hash: bwNJp3lgAS+jE0auTqDsY87ey57mRBv7oyIrMw9izOU=)
                          2: oUQWVvQxjUEP4r2-FkARFneKZMU.roa (hash: UsraHeQYnVuGM8BWVj+JJobHfPofc10SVXUPyIrrYmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:88:0f:54:b7:63:fb:7b:99:bf:63:6d:cd:3d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
        Validity
            Not Before: Jun 13 14:00:27 2025 GMT
            Not After : Jun 14 14:00:27 2025 GMT
        Subject: CN=bb413b391653e0124308c7dac392de2beb9ed07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a9:0c:98:b3:2a:52:bd:5a:7e:32:f5:9f:2f:
                    27:47:ed:eb:88:ff:eb:6b:fa:b8:84:54:c3:cc:49:
                    84:96:7e:85:86:c2:2c:ef:55:f5:a8:7f:15:83:8a:
                    81:c6:0c:e6:dc:df:5d:11:af:79:51:28:08:9a:c0:
                    fc:a8:b6:e6:d8:98:bb:c2:ff:14:0a:93:6f:93:42:
                    c9:21:38:93:37:81:8c:af:42:16:4d:ec:ad:74:bf:
                    df:a5:d6:73:4a:38:a4:ba:f7:66:60:13:37:cf:44:
                    79:ea:d4:ee:5c:b8:3b:77:b6:ac:2e:82:88:99:0b:
                    eb:70:f4:fa:b1:70:a4:df:51:78:b9:c3:25:31:88:
                    3f:69:45:b3:37:61:b0:79:35:5d:82:2b:e9:41:d8:
                    80:11:ef:2e:23:59:dd:02:5b:76:3b:5b:c2:47:9b:
                    d1:49:37:d4:c8:08:e4:cc:a6:97:08:bb:e2:06:e1:
                    f4:a5:fe:ef:d4:d4:9b:da:30:7f:53:79:43:b5:9f:
                    64:51:1f:d2:9c:b3:0d:a7:56:ba:7d:f0:0c:bd:51:
                    10:ed:e3:05:7d:7b:09:96:99:98:64:0b:75:06:20:
                    87:ca:5e:eb:ce:52:d7:d9:b2:de:46:95:d9:6a:65:
                    ca:83:2d:1b:da:d4:41:38:dd:0f:e5:18:2a:89:85:
                    1d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:41:3B:39:16:53:E0:12:43:08:C7:DA:C3:92:DE:2B:EB:9E:D0:7E
            X509v3 Authority Key Identifier:
                keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:73:d2:97:54:8f:f4:54:f7:31:4b:5e:58:50:f3:10:64:e0:
         7d:ca:94:e6:a3:a9:42:5c:16:fd:4a:4e:93:c9:94:f4:92:e0:
         2b:62:44:5d:c8:f8:43:d1:a9:b0:80:ba:6f:5f:92:4c:b5:df:
         75:55:7f:22:e7:9d:a9:a9:dc:ce:ba:cb:fa:68:cd:5d:e8:7c:
         68:d2:62:71:f3:94:2f:68:c1:cf:98:66:bc:59:44:2d:0e:c1:
         c0:8a:93:1e:22:00:19:63:5d:b5:6b:66:bc:4a:9e:4d:2d:2d:
         01:9f:21:b0:ee:dd:97:be:d9:39:65:ef:05:a2:e4:63:8c:c3:
         e7:15:9a:13:68:a7:1a:03:60:29:b2:2d:c8:c6:b5:5e:11:36:
         5a:29:b7:2c:f4:59:e3:76:83:e5:3f:2b:ff:6d:c4:87:18:0d:
         19:b4:2c:3b:b2:f1:e2:5d:88:21:72:8f:99:90:4e:8b:1e:6e:
         2d:23:9d:72:e1:b9:d8:d6:43:ed:1c:44:03:08:82:9c:13:3e:
         da:92:76:ca:17:11:5c:88:42:7a:06:85:66:76:4b:10:5f:5a:
         7a:e6:73:da:86:b0:bd:de:a9:db:26:73:a2:16:e0:46:ea:b1:
         0d:21:96:b0:94:a3:8d:38:4a:ad:41:50:5a:0a:5b:95:05:03:
         51:b4:9b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:48 2025 by rpki-client