Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
File:                     GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft (raw, json)
Hash identifier:          zLqAoTs9vN61l4L0+KyOJ6G78aTR8yi/v31VdwzzWvM=
Subject key identifier:   59:18:4A:8E:8B:62:F5:22:56:77:B8:79:66:D0:32:73:31:D6:BD:CA
Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
Certificate issuer:       /CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Certificate serial:       01963989659FFC8A5090A9E04D1689438CCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
Manifest number:          03C6
Signing time:             Tue 15 Apr 2025 13:00:27 +0000
Manifest this update:     Tue 15 Apr 2025 13:00:27 +0000
Manifest next update:     Wed 16 Apr 2025 13:00:27 +0000
Files and hashes:         1: 1BCQS42AU0GGH4PRx7vWlNY6UnM.roa (hash: UsPM1kz8JudOE7Cn+hyYQwficWvW1KbcDmuvAJ6iOSc=)
                          2: 31ag2HrgANjhnzyqvzYcA_GuDbg.roa (hash: 2P8QZCQEYwZ7T/ngNrFwmBzstV47MWzT0cHknGsfldw=)
                          3: GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl (hash: Z3G9RHDSlXhHcAqKwwlEVp4WoqNjVo2rYCDbpaISDwE=)
                          4: xKJMBlinbdfn34LVJF69A7qgGkk.roa (hash: ghKwNM3pv6/CjqUkOttxn9jN7TiH2L3Yp/7tBiGxOUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:39:89:65:9f:fc:8a:50:90:a9:e0:4d:16:89:43:8c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42
        Validity
            Not Before: Apr 15 13:00:27 2025 GMT
            Not After : Apr 16 13:00:27 2025 GMT
        Subject: CN=59184a8e8b62f5225677b87966d0327331d6bdca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:55:37:e5:b6:08:98:41:3e:c7:a7:f8:bd:76:
                    94:e0:82:6e:c9:1c:c2:93:83:4b:bc:5c:da:28:7d:
                    3e:45:5c:93:f4:d6:6f:a4:52:f0:40:ef:b9:95:59:
                    12:46:8a:77:92:6a:f5:25:ba:50:32:be:8f:92:18:
                    0d:cb:4e:84:e7:85:09:05:ae:61:e5:d5:88:9c:6f:
                    11:b7:f5:11:3c:bb:ea:2a:61:31:75:dc:06:b2:c4:
                    3e:cc:13:2e:37:90:47:12:0f:98:bf:49:1b:1b:0c:
                    67:a0:3a:00:31:3f:91:8b:18:fc:88:5b:1c:19:16:
                    cd:5f:f1:73:fe:2e:a5:e9:df:94:54:b1:7e:a4:08:
                    df:f3:7f:cb:5a:a6:3e:cf:f1:d6:63:a7:b1:25:2e:
                    50:79:b9:3f:d2:44:65:e5:22:63:c8:22:c7:85:34:
                    59:31:75:f2:b1:29:90:3e:ac:7e:18:35:88:0e:ef:
                    0b:29:9d:38:10:46:cc:3a:77:57:ca:79:57:d6:e6:
                    06:bb:55:da:6c:55:f8:a0:6d:65:37:23:ed:be:08:
                    48:27:84:b6:b5:ef:1a:f5:52:e8:fe:54:7a:be:02:
                    06:3f:02:6d:e9:a7:da:4a:4f:37:8e:0a:a1:42:8b:
                    aa:d8:23:44:72:78:f8:ed:75:d8:e0:df:14:3d:d6:
                    7b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:18:4A:8E:8B:62:F5:22:56:77:B8:79:66:D0:32:73:31:D6:BD:CA
            X509v3 Authority Key Identifier:
                keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:fe:64:7a:b6:15:83:8c:02:3e:d6:00:4d:04:af:2e:61:b3:
         8c:0d:bf:f9:67:b6:1a:43:a9:65:1f:3b:5e:83:92:82:01:ae:
         fd:77:0e:89:b7:f6:bb:21:e8:ce:8d:90:76:a0:cb:70:0f:4a:
         ce:ed:d0:4a:a7:47:76:be:bb:7a:bd:9c:e3:da:9f:79:d7:98:
         5d:44:25:eb:91:43:e1:66:76:35:97:3c:b9:3f:47:82:f4:7f:
         be:4f:f4:83:bc:a8:5b:ae:ff:f2:2a:91:bf:7b:0f:8b:ea:a9:
         4b:f4:da:a8:c4:eb:42:39:d1:70:31:95:a1:f9:4b:af:a0:48:
         e8:7c:16:e0:11:70:cd:c3:c5:fb:32:bc:fd:0d:f4:0f:f0:ff:
         d4:2d:30:30:f8:3f:32:eb:60:52:cf:f0:65:d8:de:7b:7c:99:
         56:5b:8e:a5:30:72:6a:f6:00:42:ba:63:4b:4f:15:9c:37:77:
         f7:50:cf:57:06:35:4e:e4:43:cc:77:93:26:28:94:c2:c7:fd:
         ab:81:c9:2f:4d:2b:e8:05:bc:98:0c:ec:79:7a:68:c4:59:6b:
         bd:ec:d4:af:b7:e2:49:fd:79:85:b0:78:f2:62:ec:e4:8b:4f:
         0b:0f:3d:f4:3a:4d:f9:40:a8:7d:6c:f4:37:fd:ed:76:95:84:
         d9:c3:f9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:49:09 2025 by rpki-client