Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
File:                     GOTxZiOGegux8zeFDqyr_4fEfhA.mft (raw, json)
Hash identifier:          IBZ6LzLsfxcCN/AN9jOqGCfa4PX/+Iy9N6lcjS0ApKg=
Subject key identifier:   6A:31:DE:D4:03:3C:D7:E1:E6:F6:6F:CC:F1:E0:1B:CE:BA:49:53:6E
Authority key identifier: 18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10
Certificate issuer:       /CN=18e4f16623867a0bb1f337850eacabff87c47e10
Certificate serial:       01964CD95EC1ED9F7FA773033E7F920D7E55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
Manifest number:          14F7
Signing time:             Sat 19 Apr 2025 07:00:36 +0000
Manifest this update:     Sat 19 Apr 2025 07:00:36 +0000
Manifest next update:     Sun 20 Apr 2025 07:00:36 +0000
Files and hashes:         1: GOTxZiOGegux8zeFDqyr_4fEfhA.crl (hash: sR6P7BUjY/MejjCQoMJjv6AwZmlO5JWaXcxMS54s02I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:d9:5e:c1:ed:9f:7f:a7:73:03:3e:7f:92:0d:7e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e4f16623867a0bb1f337850eacabff87c47e10
        Validity
            Not Before: Apr 19 07:00:36 2025 GMT
            Not After : Apr 20 07:00:36 2025 GMT
        Subject: CN=6a31ded4033cd7e1e6f66fccf1e01bceba49536e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0e:cc:9a:f1:80:3b:12:e3:04:5b:0d:8a:a2:
                    9d:d2:b9:e6:c7:17:fd:2e:cf:21:22:93:7a:3f:79:
                    7a:28:e0:14:d3:87:4c:28:fc:96:55:27:6f:d1:98:
                    18:76:9d:81:0c:5b:05:79:48:c3:06:e5:6b:8d:4d:
                    e6:fb:6a:cd:89:46:3d:f1:e7:51:4b:1b:7f:03:81:
                    63:ab:94:06:03:a5:e7:4f:76:72:0c:95:ae:45:48:
                    87:f2:52:5f:4d:6e:23:97:9f:e3:11:ad:81:07:dd:
                    69:d7:ee:db:72:9b:bc:19:e6:78:02:31:fa:a2:91:
                    b8:3c:9b:8d:a9:00:d4:1e:37:27:43:ff:aa:db:af:
                    dd:b2:34:22:4d:2b:3c:cf:3c:3f:f2:e6:98:34:7c:
                    aa:ce:ab:fd:41:f8:92:16:ca:0d:90:d2:a8:03:f0:
                    70:1b:b6:34:26:05:09:f3:da:1c:2c:32:62:26:7c:
                    2f:80:70:8f:d0:00:b2:65:b2:29:8e:69:83:b0:3a:
                    c7:b2:4c:ac:ee:80:bf:22:d5:96:56:6f:a2:29:f6:
                    cd:f3:ad:c4:19:55:e3:72:dd:1a:d6:58:d2:bf:6f:
                    75:90:e5:fc:c8:38:f7:7e:5f:60:0d:df:71:0d:87:
                    af:10:8b:24:e2:03:79:da:5b:31:23:17:6e:c1:a0:
                    5e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:31:DE:D4:03:3C:D7:E1:E6:F6:6F:CC:F1:E0:1B:CE:BA:49:53:6E
            X509v3 Authority Key Identifier:
                keyid:18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:44:1a:3d:e0:a7:50:62:83:ff:0a:f0:1c:08:ba:35:06:66:
         ee:8b:53:30:1b:ba:e6:45:71:6d:31:f9:bb:b7:35:45:75:b7:
         a4:79:c7:55:04:ef:b7:f7:c6:b6:33:4e:88:1b:3a:1b:b0:35:
         ca:6e:50:d6:1c:87:ef:17:57:3d:27:4c:b9:1e:da:a2:fa:d9:
         ea:21:16:5a:ad:56:38:99:bd:b7:f9:b2:bb:54:e7:63:f6:ce:
         cb:82:05:ac:4a:c7:51:37:15:97:0a:03:20:f3:b4:bb:eb:81:
         8f:70:79:7a:8a:57:cc:3a:73:32:3a:b2:14:53:cc:a3:e2:7e:
         16:da:a4:d5:a9:35:f4:42:1c:74:06:9d:08:4b:17:34:32:d1:
         a8:65:db:21:04:0b:d2:b6:ce:0e:9d:09:16:6f:54:6c:d1:dc:
         6b:4d:2b:3c:83:a8:d8:70:c3:86:71:b4:11:e5:34:96:75:a1:
         ed:27:4b:16:ed:5f:c6:4c:90:13:9f:3f:51:cc:38:ac:de:9f:
         eb:41:d5:36:cf:93:28:b5:15:7f:6d:22:54:91:ee:23:fc:47:
         cc:67:df:9d:c3:da:c0:37:41:b8:3b:61:e8:65:4c:55:d8:44:
         f7:4f:71:59:c4:59:fb:a3:b2:d3:a6:b2:1c:21:85:ac:d6:80:
         4e:3e:b0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:23:21 2025 by rpki-client