Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
File:                     GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft (raw, json)
Hash identifier:          OJIf0zf9kViGStmuYylU48iaLqCThCvP3M2mYo75aAE=
Subject key identifier:   6B:6F:B0:ED:18:81:1A:67:EA:83:70:76:D2:1D:37:7B:3E:35:73:73
Authority key identifier: 19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
Certificate issuer:       /CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Certificate serial:       01958EF350DD261751F374DFAC7CC5DD7ACE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
Manifest number:          1493
Signing time:             Thu 13 Mar 2025 10:01:05 +0000
Manifest this update:     Thu 13 Mar 2025 10:01:05 +0000
Manifest next update:     Fri 14 Mar 2025 10:01:05 +0000
Files and hashes:         1: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl (hash: DIjc4dUsq/6tl/ZUqWvM/18z0Ru2O4D/1ukzV0f/iHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8e:f3:50:dd:26:17:51:f3:74:df:ac:7c:c5:dd:7a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
        Validity
            Not Before: Mar 13 10:01:05 2025 GMT
            Not After : Mar 14 10:01:05 2025 GMT
        Subject: CN=6b6fb0ed18811a67ea837076d21d377b3e357373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c8:36:28:a6:f3:ce:58:3b:2d:d1:18:b8:79:
                    9b:c9:a6:a1:ce:73:f5:3e:c5:71:e2:b3:7d:33:cd:
                    34:32:44:88:99:bb:94:f2:21:a1:b0:2e:6d:2f:3f:
                    53:ee:ba:a3:c6:41:3c:7d:15:66:6a:c1:53:21:61:
                    d6:1d:72:18:d7:22:be:8c:68:2c:a2:1d:b2:4c:33:
                    fe:74:95:64:26:6d:f2:47:b7:4a:a5:e0:8b:eb:20:
                    7b:54:ec:cd:35:ef:3c:5c:83:09:26:69:b5:ed:bb:
                    7b:aa:96:ea:55:29:a3:06:4e:4b:32:68:12:cc:3f:
                    87:ed:c0:3d:55:1f:60:76:01:6d:ac:ac:2c:8d:f4:
                    e8:28:d6:1d:08:0f:c2:cd:e8:a9:48:45:a2:66:f9:
                    b4:49:6f:7b:15:77:10:10:7b:78:f1:27:44:7a:ae:
                    1b:b1:01:49:3e:61:53:5c:a8:45:61:6e:f6:29:ad:
                    bd:4a:8e:ca:67:ca:5f:2a:6e:0c:25:c9:1a:69:ad:
                    40:2b:6b:e3:cd:13:d9:ca:f8:c6:05:f1:84:1c:b4:
                    7b:df:06:20:7b:dd:41:4a:22:a9:ee:9c:99:17:38:
                    45:29:28:01:6a:04:4b:38:2c:8f:dd:48:20:23:40:
                    be:9a:2f:88:b5:c3:32:9f:c3:7c:8d:c2:f7:a7:81:
                    db:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6F:B0:ED:18:81:1A:67:EA:83:70:76:D2:1D:37:7B:3E:35:73:73
            X509v3 Authority Key Identifier:
                keyid:19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:21:16:2b:00:e1:84:aa:80:37:af:df:d1:b0:99:13:70:43:
         44:3f:8b:4c:98:37:90:a7:46:12:0e:c9:fc:59:b1:a4:92:a5:
         6b:c0:c4:68:f0:3a:8e:46:8c:61:3a:f7:30:2c:1b:f1:6e:75:
         d3:4c:a7:a9:a7:51:19:1c:e1:7e:a1:05:aa:bd:c8:6f:13:a9:
         4a:67:7f:54:25:4f:01:91:69:06:be:47:60:39:e8:7a:89:49:
         4e:42:22:3a:7f:dc:5b:e5:ef:77:ad:04:94:7f:86:47:82:6d:
         4d:f0:6e:3f:65:eb:c9:ff:7b:9b:9c:89:fc:72:1d:a6:16:99:
         77:27:75:78:be:c0:41:ee:ed:d2:2f:3a:41:4d:f9:e8:50:b8:
         f0:ea:6c:b7:5d:23:ad:5e:3f:fc:98:8e:6f:2f:c0:65:d9:c5:
         c0:1d:e9:d5:ee:a4:7a:c4:b8:60:c6:6d:30:cc:bb:ee:9d:1c:
         d7:e9:7a:00:d9:8c:d7:df:84:c1:8f:4e:a8:ef:e0:3d:ac:55:
         71:45:78:77:01:f3:3c:c2:c2:99:84:95:ca:1a:54:ab:40:e1:
         5a:88:14:95:96:fb:28:5f:81:58:2b:11:b9:a3:f8:5e:cd:f4:
         de:bf:94:45:e0:f6:d8:0d:87:29:72:62:ba:73:6a:20:cb:fa:
         ee:34:1d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:53 2025 by rpki-client