Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File:                     GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier:          ja40LLvonouuPe5G6afdKFS1o4GnldnzQjFiFn4ekPA=
Subject key identifier:   F1:B4:B9:87:A1:77:4B:4A:AD:2C:B9:55:80:4A:0E:B9:CB:01:30:78
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer:       /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial:       01968F2735CED4BD9F051B86FDEDF85710D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number:          14AE
Signing time:             Fri 02 May 2025 04:00:33 +0000
Manifest this update:     Fri 02 May 2025 04:00:33 +0000
Manifest next update:     Sat 03 May 2025 04:00:33 +0000
Files and hashes:         1: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: GNGz0V9TMpMuo1zDSKynFdad+s8mvXQ/UK6QtDTz/QU=)
                          2: n3bBKfncJSw0BedT5BmrufOi-w4.roa (hash: payevUddDm69dVPoygf/tnvW3ppO/jdm5/2U7r6MPRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8f:27:35:ce:d4:bd:9f:05:1b:86:fd:ed:f8:57:10:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
        Validity
            Not Before: May  2 04:00:33 2025 GMT
            Not After : May  3 04:00:33 2025 GMT
        Subject: CN=f1b4b987a1774b4aad2cb955804a0eb9cb013078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:87:50:72:fd:5b:30:64:9b:bc:e2:3a:55:29:
                    e9:2d:36:e7:22:53:bf:19:97:d8:8c:c0:99:ee:78:
                    06:05:2a:38:d5:1a:1a:ab:74:43:fa:7a:ea:4e:30:
                    b0:60:95:6b:4f:ab:8c:a4:a1:3f:e7:64:4c:6d:42:
                    93:fb:be:02:64:5f:83:7b:fe:ab:c3:9a:fb:6b:c3:
                    a3:6e:9b:84:75:40:67:1d:27:57:44:49:fc:7d:d1:
                    dc:22:62:94:2a:29:31:15:4b:4c:0e:22:84:d9:90:
                    6a:05:2d:97:3f:60:4f:64:fa:a4:4b:27:00:e3:f8:
                    bc:4e:01:47:59:a2:c8:cf:15:34:5b:e2:bb:97:e1:
                    01:80:02:ab:bc:29:99:ed:69:ec:0c:2e:a7:e9:68:
                    a1:42:9c:08:c9:42:ba:d4:29:5f:ef:34:7d:9d:93:
                    41:76:b5:53:27:bf:8b:0b:a0:64:71:64:b4:e5:06:
                    7c:bb:bb:87:21:4a:b3:29:8c:39:f2:81:16:0b:23:
                    40:65:5f:8d:9e:d2:99:24:fc:f9:df:bb:e7:1c:d3:
                    f8:ff:e1:c0:94:5c:e1:56:15:89:6c:e4:70:fa:d3:
                    db:5a:d0:b3:21:0f:79:f9:6d:95:95:7c:82:49:f2:
                    58:5b:6f:0c:75:74:12:16:bd:cd:3f:56:c8:af:ec:
                    08:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B4:B9:87:A1:77:4B:4A:AD:2C:B9:55:80:4A:0E:B9:CB:01:30:78
            X509v3 Authority Key Identifier:
                keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:55:ba:02:05:d2:dd:37:62:0a:f1:b3:07:38:6e:65:96:6f:
         72:41:a5:22:92:ad:13:2f:2b:01:57:58:cf:49:9a:3d:e6:63:
         32:8a:d7:26:f4:84:a7:59:67:b3:c4:6c:11:c8:e2:3c:f6:3a:
         86:4c:fb:e7:79:6b:93:3e:f8:57:83:c6:7f:a3:7b:80:30:c7:
         4a:dd:dc:14:75:a7:d9:5c:83:cc:39:e7:1f:73:09:ef:57:51:
         c4:c2:e1:af:7e:4a:78:01:cd:c7:f9:cc:ad:31:eb:72:8e:03:
         a9:06:52:ef:7d:8a:de:d1:96:eb:8f:d3:5d:ed:7a:c7:7c:b8:
         61:71:9c:f3:b2:63:8d:e4:45:53:0a:de:c1:d8:6f:13:c6:00:
         36:80:f4:f7:ae:4c:f1:a8:44:f8:c6:70:b6:b3:03:3f:27:0c:
         ee:43:b7:10:26:55:e5:79:aa:2f:43:3b:93:d6:fd:7c:6c:27:
         b8:86:45:d8:e0:04:99:e6:d2:ef:b6:40:fa:d6:d1:5f:f9:b7:
         54:64:0d:30:e9:f6:d0:ae:76:07:b6:4d:8a:82:23:11:b9:49:
         4b:09:19:ed:3c:84:a3:99:a2:66:c1:52:a0:21:5e:cd:f3:ff:
         1f:4f:d4:21:64:5a:83:b3:e5:d3:ff:93:3a:61:6c:eb:aa:c8:
         4e:c9:29:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:37:19 2025 by rpki-client