Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
File:                     gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft (raw, json)
Hash identifier:          x3Xi9L9r9lh71CA6Fb9NpC4ELMbh/CnBMb0tSxjxaDU=
Subject key identifier:   37:5D:AD:29:26:92:B8:08:AE:F5:39:35:40:34:F6:16:EE:F7:F5:E4
Authority key identifier: 82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
Certificate issuer:       /CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Certificate serial:       019511A2ED7E6C0041FCDD3C88418FCE7BD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
Manifest number:          1456
Signing time:             Mon 17 Feb 2025 02:00:45 +0000
Manifest this update:     Mon 17 Feb 2025 02:00:45 +0000
Manifest next update:     Tue 18 Feb 2025 02:00:45 +0000
Files and hashes:         1: 1GcdqVYrNeFzAfzIvWc1uwT98aA.roa (hash: 4uQf4DSwbX7BKGTdoGDfjY+9K4u0Qbg5gbpIHJoyB/8=)
                          2: gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl (hash: vY9eoYDqvvXsZsaeQuQcpYV2973TlKxx9lMWTgiCHbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:a2:ed:7e:6c:00:41:fc:dd:3c:88:41:8f:ce:7b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
        Validity
            Not Before: Feb 17 02:00:45 2025 GMT
            Not After : Feb 18 02:00:45 2025 GMT
        Subject: CN=375dad292692b808aef539354034f616eef7f5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6f:fb:53:5e:57:85:8f:29:f7:06:a9:92:43:
                    f9:e3:f3:d2:dc:ac:f4:1b:a0:96:ce:bd:86:f2:74:
                    b2:3f:20:38:c2:0b:8f:fa:8c:0a:11:ba:7e:55:b7:
                    9f:cc:f9:70:6e:87:ed:d5:d2:57:3a:ac:bb:f0:69:
                    f0:b0:6c:9d:ca:75:58:d2:cf:6b:ee:1f:98:98:1c:
                    ed:7f:f4:88:85:3b:b4:16:8b:79:84:a1:cd:97:3c:
                    e1:00:c8:c0:75:23:ad:5e:3b:76:0e:15:5e:74:11:
                    2d:84:5c:89:ef:3a:5d:f0:03:60:16:6d:f8:fb:51:
                    1e:99:df:ac:a0:92:9e:0b:11:63:b4:81:c0:63:36:
                    b5:8d:a6:c1:16:49:2c:14:fd:ae:c3:f7:99:0f:28:
                    4b:57:cb:d3:ad:ee:22:ac:9d:0c:21:52:2e:7b:dd:
                    a7:fb:21:e3:fa:ff:b6:8d:a5:e9:a8:31:97:95:c2:
                    7c:9f:fa:5c:6d:18:48:46:40:1f:b9:06:56:5e:2c:
                    04:40:96:c8:2d:c5:e6:7e:9e:94:61:bb:a8:42:21:
                    8d:b5:ec:be:ec:2c:2d:e9:93:7a:d6:a6:cc:1d:50:
                    b4:09:7c:bc:b6:02:59:2f:86:f7:28:d5:47:88:f3:
                    b1:91:02:fb:6e:1b:80:f1:ce:bb:a4:0f:e2:27:8f:
                    0b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5D:AD:29:26:92:B8:08:AE:F5:39:35:40:34:F6:16:EE:F7:F5:E4
            X509v3 Authority Key Identifier:
                keyid:82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:65:2c:3d:72:51:5b:3c:ff:4a:8b:3f:dc:fb:ab:f2:e9:dc:
         9d:35:cf:30:eb:ec:a3:4c:65:6f:28:3e:50:ae:93:92:b3:ea:
         58:6a:f9:58:08:b9:2c:98:50:7b:fc:37:09:cf:16:9d:b2:81:
         c2:29:e3:ec:49:99:4f:4a:e2:47:bd:fc:6d:65:0d:01:29:16:
         79:1a:32:75:42:f9:cc:8d:e2:d8:6c:33:c3:25:fc:39:34:16:
         56:85:eb:5a:70:33:b9:3d:0e:df:c6:57:00:81:63:a4:1f:64:
         3d:2e:e4:78:4d:be:ba:bd:ca:2f:90:52:6a:05:c4:2d:70:6e:
         c7:af:95:48:cd:38:f5:94:1f:7a:17:cd:05:56:1d:16:0d:36:
         61:98:28:04:94:4e:e4:17:95:d0:26:12:e3:26:51:75:9b:b0:
         f9:fa:23:01:70:8a:d4:c0:cf:40:ec:f7:11:46:16:2a:5e:eb:
         ae:fa:14:2d:69:f4:32:27:de:c5:49:2b:70:03:35:22:09:f4:
         ee:bd:65:b0:31:37:82:1d:aa:21:b0:71:5f:19:e6:2a:8f:57:
         3b:47:6e:f9:2b:3f:ed:b4:d2:e5:ec:24:31:89:f7:20:d5:da:
         1f:6b:a2:30:e6:db:59:4c:2c:a0:6e:32:d4:16:86:5e:80:b3:
         45:83:b7:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURou1+bABB/N08iEGPznvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzllYWQ4MzVhOGZjZmFlMGQ5ZWUyODM5Y2QxNjg4MWJh
MTFkZDcwHhcNMjUwMjE3MDIwMDQ1WhcNMjUwMjE4MDIwMDQ1WjAzMTEwLwYDVQQD
EygzNzVkYWQyOTI2OTJiODA4YWVmNTM5MzU0MDM0ZjYxNmVlZjdmNWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2/7U15XhY8p9wapkkP54/PS3Kz0
G6CWzr2G8nSyPyA4wguP+owKEbp+VbefzPlwboft1dJXOqy78GnwsGydynVY0s9r
7h+YmBztf/SIhTu0Fot5hKHNlzzhAMjAdSOtXjt2DhVedBEthFyJ7zpd8ANgFm34
+1Eemd+soJKeCxFjtIHAYza1jabBFkksFP2uw/eZDyhLV8vTre4irJ0MIVIue92n
+yHj+v+2jaXpqDGXlcJ8n/pcbRhIRkAfuQZWXiwEQJbILcXmfp6UYbuoQiGNtey+
7Cwt6ZN61qbMHVC0CXy8tgJZL4b3KNVHiPOxkQL7bhuA8c67pA/iJ48LTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDddrSkmkrgIrvU5NUA09hbu9/XkMB8GA1UdIwQY
MBaAFIJ56tg1qPz64NnuKDnNFogboR3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYWFhZTQtZWQyNC00NDczLTllYzUt
ZWUyOWM5MTM2ZThiLzEvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kYWFhZTQtZWQyNC00NDczLTllYzUtZWUyOWM5MTM2ZThi
LzEvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmUsPXJR
Wzz/Sos/3Pur8uncnTXPMOvso0xlbyg+UK6TkrPqWGr5WAi5LJhQe/w3Cc8WnbKB
winj7EmZT0riR738bWUNASkWeRoydUL5zI3i2GwzwyX8OTQWVoXrWnAzuT0O38ZX
AIFjpB9kPS7keE2+ur3KL5BSagXELXBux6+VSM049ZQfehfNBVYdFg02YZgoBJRO
5BeV0CYS4yZRdZuw+fojAXCK1MDPQOz3EUYWKl7rrvoULWn0MifexUkrcAM1Ign0
7r1lsDE3gh2qIbBxXxnmKo9XO0du+Ss/7bTS5ewkMYn3INXaH2uiMObbWUwsoG4y
1BaGXoCzRYO3cg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:11 2025 by rpki-client