Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
File:                     GoPORK5McB6pcdM036u8WyjmR24.mft (raw, json)
Hash identifier:          ixUbEDk94VnrddGcjwn6AXqqNTD1BCCo0i7Q9Uhx15w=
Subject key identifier:   B9:1A:95:00:99:41:C7:CA:83:96:59:87:6D:BD:0C:E7:E7:12:2C:FB
Authority key identifier: 1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
Certificate issuer:       /CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Certificate serial:       01974F334ADB83347A3B4CF993EB5F5D9552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
Manifest number:          0DD0
Signing time:             Sun 08 Jun 2025 11:00:50 +0000
Manifest this update:     Sun 08 Jun 2025 11:00:50 +0000
Manifest next update:     Mon 09 Jun 2025 11:00:50 +0000
Files and hashes:         1: GoPORK5McB6pcdM036u8WyjmR24.crl (hash: O7t7FI0SV0WcjneW2cpz1qeyCjBkChXAt0cBMMGS1pw=)
                          2: SQ1S01mKdl_pihHLfmAxp6MIz2s.roa (hash: johDj2G38KeECNaaDLbNbGiHRKn5fDm9dO2HYe9gZvY=)
                          3: zcLtcjUtyxFL1FO3b-VJlyOeg6k.roa (hash: g80ZM0Uc7RbA4rF7A3IOl5uS7MyE5SE2vouCF+EvudA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:33:4a:db:83:34:7a:3b:4c:f9:93:eb:5f:5d:95:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
        Validity
            Not Before: Jun  8 11:00:50 2025 GMT
            Not After : Jun  9 11:00:50 2025 GMT
        Subject: CN=b91a95009941c7ca839659876dbd0ce7e7122cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:16:8f:12:ec:df:a8:3c:cb:3a:72:85:98:5b:
                    81:8c:0e:62:24:01:73:65:79:80:f9:1b:81:56:d7:
                    43:01:0e:12:cf:b9:19:e1:a7:df:33:5c:52:45:33:
                    72:46:89:4a:91:bb:3c:dc:56:7a:b8:aa:89:a5:c4:
                    36:d2:12:e4:45:b7:d7:84:55:e9:10:69:8b:09:f2:
                    41:89:63:47:26:17:81:61:bf:c3:bc:45:88:95:38:
                    a0:b5:1a:9d:63:1a:13:34:79:48:53:05:11:22:36:
                    79:eb:fb:8a:7f:59:1e:28:80:0c:4b:02:d5:7c:0d:
                    70:52:8c:ba:11:2d:84:ae:71:ac:c8:cc:4c:f7:ef:
                    c4:8d:44:0c:de:1a:8b:4b:99:cb:6e:db:4e:12:04:
                    0c:62:10:88:ef:32:60:c3:2a:8b:22:2c:e1:36:ee:
                    f3:0d:b3:b4:e8:67:52:1a:77:f9:90:07:7f:f2:a2:
                    b4:05:d6:75:42:93:bd:7f:e4:b6:bf:6f:c7:4c:dd:
                    5e:e9:fc:0a:70:e9:1c:85:d3:67:e0:3d:8e:22:88:
                    49:47:1e:6c:68:f3:4b:38:5f:e2:4c:0f:b6:fb:a1:
                    76:eb:7c:4b:55:a9:78:d9:f8:9e:0b:ec:56:1d:7a:
                    ca:41:8e:5c:7d:38:40:45:fe:29:39:c1:02:ce:ed:
                    31:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1A:95:00:99:41:C7:CA:83:96:59:87:6D:BD:0C:E7:E7:12:2C:FB
            X509v3 Authority Key Identifier:
                keyid:1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:cb:3c:a7:5c:bf:62:d7:c7:07:c2:bf:a2:73:64:03:07:e3:
         ec:eb:fb:07:f1:34:0d:03:64:5b:88:eb:56:49:af:a3:37:a8:
         b6:26:1d:7d:1b:07:42:be:91:24:e6:24:90:35:01:f9:fb:9f:
         98:fb:4c:4d:ad:7b:31:14:89:0e:6d:18:d6:05:8b:c7:3e:66:
         8f:58:bd:4d:83:69:8e:21:16:52:17:e5:f5:71:22:05:ba:53:
         df:97:1a:04:0d:d7:3e:c3:c0:71:cf:55:0f:6f:47:7a:78:01:
         10:02:2e:09:83:6f:77:1d:43:e2:4d:48:21:74:26:a5:76:99:
         6c:44:7a:08:6a:29:a6:b1:0d:e2:87:c7:ad:3d:b7:f1:0f:0e:
         e8:9b:0f:77:e0:89:05:89:af:20:a9:62:b2:ee:89:72:b6:08:
         ee:4f:a1:c2:4e:6a:b8:bf:9e:04:cd:ab:75:14:63:97:1c:9f:
         ce:61:06:0f:a7:84:ab:57:f1:3f:a4:ff:86:59:a7:c0:7d:93:
         c3:b5:56:88:9c:f2:b8:d9:2e:dc:33:7e:de:c5:e0:64:d2:80:
         d4:13:83:53:2d:f4:15:f4:ee:d0:ff:4c:ba:10:d1:10:4e:7f:
         2b:fb:fb:03:14:5e:8a:98:89:8c:f9:01:47:d4:fa:9b:f6:b5:
         b8:6c:74:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:12:24 2025 by rpki-client