Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
File:                     GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft (raw, json)
Hash identifier:          8gU2V8jm9mhT/Dq9ZKsZGsrBpCMW1yvaJzgl3fDFWAY=
Subject key identifier:   56:66:6D:D2:76:A2:9F:46:F3:67:C1:51:C8:A7:D1:FE:A9:5B:F8:E4
Authority key identifier: 1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F
Certificate issuer:       /CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
Certificate serial:       01968849BFA7F26EDBDFFA61EC7516612723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
Manifest number:          14AB
Signing time:             Wed 30 Apr 2025 20:00:56 +0000
Manifest this update:     Wed 30 Apr 2025 20:00:56 +0000
Manifest next update:     Thu 01 May 2025 20:00:56 +0000
Files and hashes:         1: GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl (hash: r2fxKboPzFjyEebtuL0/P8WPjoUNxKeULu8xfytGrH8=)
                          2: TOBAVscU9VJTwLsUhLP0tAjAQi4.roa (hash: IKzhkAp3S93tfIC5ceCBznZ4xMgoDfcxElkoH29JQ+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:88:49:bf:a7:f2:6e:db:df:fa:61:ec:75:16:61:27:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
        Validity
            Not Before: Apr 30 20:00:56 2025 GMT
            Not After : May  1 20:00:56 2025 GMT
        Subject: CN=56666dd276a29f46f367c151c8a7d1fea95bf8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fc:43:26:2d:d9:37:d5:5c:e3:67:cf:74:7d:
                    46:5d:26:c8:e3:ca:37:98:54:e5:4b:c8:42:49:3f:
                    31:f3:e1:2e:7e:09:56:d9:f8:39:c6:42:a6:7d:e2:
                    b8:fa:06:f9:4a:5e:1e:55:e0:79:d1:8c:58:09:a1:
                    7d:8b:82:85:8b:7d:53:7e:19:28:43:c2:54:14:e8:
                    7d:ce:dd:ed:57:11:96:44:e4:65:a2:8d:54:bb:33:
                    52:9b:b8:30:0f:5e:5d:99:74:3b:4d:c7:45:88:64:
                    57:14:10:d4:ca:32:eb:30:8a:64:00:40:57:89:22:
                    66:a0:2a:a4:2f:3c:06:0d:a9:2d:5e:5f:b7:a2:5f:
                    0e:a2:d6:c7:21:2e:ed:6c:2a:62:7c:61:b9:78:45:
                    23:ec:a6:cd:56:3d:4f:67:ea:3c:d7:d7:9b:55:35:
                    25:2e:5c:bd:84:db:e9:82:c4:62:c7:a8:d7:7a:dc:
                    20:af:1f:86:33:f2:cf:7e:26:63:19:24:86:0d:00:
                    e7:db:59:46:19:b7:a9:00:e1:20:dc:47:b6:35:c4:
                    06:a3:4c:5e:e0:22:07:4c:78:e8:88:04:ae:7f:24:
                    48:b9:f6:dc:96:de:ed:3f:30:7c:52:5e:0e:06:68:
                    26:54:92:62:c9:e9:1f:dd:78:85:96:39:99:90:d2:
                    b3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:66:6D:D2:76:A2:9F:46:F3:67:C1:51:C8:A7:D1:FE:A9:5B:F8:E4
            X509v3 Authority Key Identifier:
                keyid:1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:51:59:7d:53:6d:4e:4c:61:15:92:5e:f1:9b:fc:4c:4b:3a:
         c4:58:a1:8a:25:ae:41:9f:cc:2a:fb:ef:bb:fb:eb:20:4a:47:
         39:c3:68:fa:a2:de:ce:bd:ce:53:96:92:76:32:03:ae:9c:15:
         4e:a5:e4:35:37:4a:07:fd:a2:41:6b:54:9f:55:21:5f:41:71:
         a2:82:a5:2c:e5:54:3c:cf:bc:ad:04:7e:d2:96:77:7e:57:a6:
         1f:9e:b8:c3:42:54:ae:8c:32:7b:e0:f2:85:ca:27:f9:2f:82:
         bf:3f:31:41:5a:5f:5d:89:38:a2:45:1b:17:08:b2:fb:ad:45:
         f7:3e:86:c1:7d:eb:91:c0:e9:2c:c2:fc:2a:ef:2e:bc:9c:b3:
         b1:31:23:f8:9e:f4:8f:5c:d3:6b:e7:e2:5c:52:0e:aa:88:95:
         4b:3f:9d:d5:91:f7:2b:a5:bf:b8:cf:10:fd:e6:b7:f6:6d:e8:
         37:c8:14:91:72:b5:9f:80:e2:76:8c:8d:1d:6a:a7:b4:50:1b:
         9c:bb:ad:32:3a:ab:5a:a4:e6:64:7c:34:57:46:8c:1d:2b:78:
         fe:b8:36:e0:f0:6f:d0:d7:7b:68:ee:d5:d5:c5:f7:40:8a:88:
         6d:17:56:8c:3a:d6:5c:f2:7c:9e:19:03:72:88:e8:50:6a:e9:
         4e:c7:fd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:28:07 2025 by rpki-client