Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
File:                     GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft (raw, json)
Hash identifier:          fIEzwDNeIxFg61QJ8PrGj1FkOOKqn5ganlrA30cOzBY=
Subject key identifier:   D8:19:AA:6E:97:DC:66:ED:93:F5:8E:0E:76:4F:DF:5D:37:32:AC:97
Authority key identifier: 1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
Certificate issuer:       /CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Certificate serial:       019672D48AA5DBFF70195FFE7CF6529D5742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
Manifest number:          0FDA
Signing time:             Sat 26 Apr 2025 16:00:53 +0000
Manifest this update:     Sat 26 Apr 2025 16:00:53 +0000
Manifest next update:     Sun 27 Apr 2025 16:00:53 +0000
Files and hashes:         1: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl (hash: TwQ2+S02mUaKayns1pYEhKAjnmXvsgnTNIPOWrQCv90=)
                          2: fhVodD3Al80st-44wh_3zJPa9hw.roa (hash: fjogseqmXaDswGCqZQtmESnsh5NfjXgWetNNokS6YuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:d4:8a:a5:db:ff:70:19:5f:fe:7c:f6:52:9d:57:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
        Validity
            Not Before: Apr 26 16:00:53 2025 GMT
            Not After : Apr 27 16:00:53 2025 GMT
        Subject: CN=d819aa6e97dc66ed93f58e0e764fdf5d3732ac97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3e:92:05:af:75:e8:1e:3f:07:6a:10:02:09:
                    14:4c:62:69:72:09:c0:fc:64:41:39:ea:9e:0c:02:
                    b8:8d:3e:fc:84:d9:26:bf:13:ad:d0:ff:40:6a:2a:
                    34:08:3a:4a:da:aa:f7:19:d6:e7:d7:1b:e8:ff:07:
                    e0:e8:f4:74:aa:17:ed:a7:1f:91:ce:23:cc:27:50:
                    9b:9e:f8:7d:52:73:5e:6a:80:60:eb:d1:cf:57:ab:
                    eb:2f:fc:53:4c:a2:94:f4:cb:53:84:db:49:b9:af:
                    71:dd:fe:5d:44:5e:e8:68:8f:40:16:b0:c6:fa:46:
                    e6:90:88:e3:87:b5:0f:12:58:7d:66:2c:8c:fa:cb:
                    62:25:3d:33:ca:01:e6:b8:75:3f:1a:48:19:35:d5:
                    01:bd:33:f4:40:03:e2:58:bc:71:a9:06:25:c7:4e:
                    bf:23:c9:43:a0:28:2a:a8:72:a3:cd:da:f6:99:af:
                    51:c2:01:d3:8c:4a:fd:60:c5:71:b8:31:51:07:6f:
                    19:ed:52:82:f4:55:bd:6e:da:86:3b:a1:16:9f:77:
                    60:58:a6:8f:e7:74:e2:63:d0:11:8f:01:23:06:d6:
                    b2:d1:7e:8d:25:53:2a:be:8c:e3:1a:86:03:72:4a:
                    26:53:de:6b:d5:60:b7:e4:a4:66:60:5d:99:70:00:
                    98:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:19:AA:6E:97:DC:66:ED:93:F5:8E:0E:76:4F:DF:5D:37:32:AC:97
            X509v3 Authority Key Identifier:
                keyid:1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:3d:fc:31:bf:89:53:71:61:96:c8:ea:31:c4:67:23:ff:e5:
         cf:d2:36:0b:be:91:85:93:05:45:44:1a:1f:2d:eb:65:a1:e7:
         8a:5b:32:e1:c3:45:d7:d5:10:f3:f4:69:cc:ce:d5:50:41:b8:
         7f:86:29:26:33:39:e4:a5:50:b3:37:81:41:9f:75:e0:90:5b:
         21:49:32:76:e7:43:55:7f:86:3f:81:3b:ce:89:fb:b4:77:35:
         32:f1:8a:c2:b7:6d:17:04:95:ae:be:6d:8c:cb:ac:57:35:fe:
         12:97:f1:fa:70:03:6d:14:02:c4:45:a6:01:97:84:c3:94:a5:
         3a:a5:77:66:7d:57:26:04:0d:fc:ff:0e:42:20:26:b2:a9:05:
         cd:2f:f2:de:77:e7:d5:da:e0:90:70:45:a9:df:cc:2e:9a:d1:
         54:24:f2:94:e3:c5:73:55:a6:e1:af:73:33:69:32:c1:00:80:
         a4:1c:c7:89:06:62:1c:73:d4:9b:68:2f:f5:b3:ec:c5:5c:47:
         9b:11:f6:fa:c0:8d:c6:52:f9:af:d9:c4:b2:8a:4e:36:d1:48:
         6a:44:a2:42:ed:9e:2b:0e:cb:78:e1:3f:7f:88:c1:41:e6:59:
         84:9c:8d:a8:11:a6:dc:d2:fe:d8:c6:c7:30:4f:18:89:5a:47:
         b4:04:38:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:57:33 2025 by rpki-client