Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
File:                     Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft (raw, json)
Hash identifier:          YqF2rY4ccyYJTa7HLyk5BLK1vSU5P8dB5f2iDHJjFwI=
Subject key identifier:   8F:1F:43:B3:61:4B:23:87:05:A3:ED:04:87:65:9A:21:41:FD:49:78
Authority key identifier: 1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA
Certificate issuer:       /CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
Certificate serial:       019653B6D40D344D08D5DC3408EBF03CED6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
Manifest number:          0F3B
Signing time:             Sun 20 Apr 2025 15:00:12 +0000
Manifest this update:     Sun 20 Apr 2025 15:00:12 +0000
Manifest next update:     Mon 21 Apr 2025 15:00:12 +0000
Files and hashes:         1: Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl (hash: 1xKf8VoPZa6qA2V4G3orI8vyjGaWud9cparxvZCKWc8=)
                          2: H0COiaXg1EPyNKPDom-EUSSKISY.roa (hash: MIq94Fsgw9khyXovQNvHuap+wuDPe/60Pb4JAxZUi4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 15:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:b6:d4:0d:34:4d:08:d5:dc:34:08:eb:f0:3c:ed:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
        Validity
            Not Before: Apr 20 15:00:12 2025 GMT
            Not After : Apr 21 15:00:12 2025 GMT
        Subject: CN=8f1f43b3614b238705a3ed0487659a2141fd4978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:c5:57:d6:9b:ea:a5:a3:2b:f1:13:86:5f:
                    f9:ad:c8:f0:2a:fb:11:ce:41:3e:00:06:a1:fd:6a:
                    54:7d:75:ad:1e:f0:71:b7:0a:9e:a7:7d:21:98:a0:
                    73:ef:61:ee:34:ec:e0:7c:48:d1:2e:40:27:8d:1e:
                    48:71:76:97:5a:b3:0c:32:e2:1d:27:52:e3:fe:ac:
                    5b:34:d9:9c:bd:b1:cb:03:fd:1d:07:f4:14:2b:4f:
                    bd:cb:67:0f:52:cd:a8:f7:60:36:30:69:a5:61:f8:
                    71:e1:b1:04:fa:88:c8:a2:29:8c:87:70:b0:1b:aa:
                    cd:9d:96:b5:21:e5:2d:49:60:03:3d:57:db:1d:c5:
                    6f:28:88:fb:f4:05:82:ce:dc:be:8f:95:4b:35:de:
                    a3:1a:30:0f:19:76:21:60:44:24:ca:df:4c:a6:be:
                    47:3e:0c:c8:bd:79:a7:4b:e1:f4:a4:73:2b:f0:46:
                    62:87:9a:f9:8a:69:0d:ac:5f:44:72:f9:2b:9f:dc:
                    38:c8:8a:c3:1d:3f:3d:0e:ea:3c:88:e0:08:1e:ec:
                    cc:18:f9:fc:fa:7b:9d:d0:dc:2d:55:e3:a3:dc:69:
                    fd:7b:44:bc:63:72:72:0f:8f:89:11:db:46:e3:b7:
                    b2:d4:8b:52:a3:da:e2:05:23:07:fe:25:28:c6:90:
                    87:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1F:43:B3:61:4B:23:87:05:A3:ED:04:87:65:9A:21:41:FD:49:78
            X509v3 Authority Key Identifier:
                keyid:1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:0f:dd:21:e4:44:f9:c3:c4:2b:3d:ca:00:e4:8a:4f:07:65:
         2d:f1:d4:04:98:69:9e:8f:d1:69:75:25:9f:6e:9b:01:7f:ab:
         e5:ab:06:5d:53:dd:bd:b9:71:39:9e:71:8b:e7:f6:2c:e7:f7:
         4a:e2:64:9c:a2:f2:80:8f:42:80:1e:c3:44:e5:35:32:fe:b5:
         ec:57:6b:ce:8f:f7:5b:83:00:b5:77:19:02:5c:8f:08:92:f3:
         51:13:59:11:c7:d1:d5:d5:8d:46:f0:dd:13:6c:52:33:ba:4e:
         82:67:02:2f:2c:44:fc:0b:80:c0:8b:7f:fa:f8:ac:61:f4:1c:
         86:2e:7a:78:18:f4:0d:83:5a:42:e7:8c:40:2d:90:ba:67:05:
         b3:a8:90:46:d0:7d:05:a3:06:1e:50:2a:e1:fb:01:9d:40:c4:
         67:25:88:2f:5e:eb:f1:4c:50:5a:9c:f9:7b:4f:85:14:9a:70:
         ac:7e:98:b1:09:19:9f:34:1b:09:2d:a2:7d:3a:df:0e:56:0a:
         d4:c2:47:fb:7e:89:e4:14:17:13:64:84:58:25:68:fe:24:84:
         74:1f:e0:c2:49:58:3c:98:55:3d:9c:b3:3c:24:9d:a5:45:d7:
         9b:f1:52:c4:90:35:b5:23:2f:a6:94:c5:4f:12:48:77:6b:f7:
         4b:78:e5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:35:15 2025 by rpki-client