Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
File:                     GUoR_la49HpaFBUDK3f_n7CC4D8.mft (raw, json)
Hash identifier:          MeiHoJAZejksc3gc8VAGKBpe4m7Mor74PNqF0eK/zCI=
Subject key identifier:   65:69:5A:45:47:21:43:AB:B1:38:8E:28:1B:4A:AB:28:FF:C5:6E:47
Authority key identifier: 19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F
Certificate issuer:       /CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f
Certificate serial:       0197469E075819A0ACB49F7CB4907998D613
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
Manifest number:          1039
Signing time:             Fri 06 Jun 2025 19:00:50 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:50 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:50 +0000
Files and hashes:         1: GUoR_la49HpaFBUDK3f_n7CC4D8.crl (hash: QfJsN+oMqZmww9T/WtMF8AmxAU7XrUYD8R6KUe/3E14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:07:58:19:a0:ac:b4:9f:7c:b4:90:79:98:d6:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f
        Validity
            Not Before: Jun  6 19:00:50 2025 GMT
            Not After : Jun  7 19:00:50 2025 GMT
        Subject: CN=65695a45472143abb1388e281b4aab28ffc56e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3b:0b:c0:97:e5:b5:cc:4e:cf:ea:5a:c8:e6:
                    d8:c2:e0:d4:87:1b:37:05:9c:9b:5d:56:57:e8:58:
                    67:45:c0:60:71:07:3b:9f:10:48:e8:08:6e:97:4e:
                    be:85:2d:7d:fc:03:61:1b:94:43:2d:cb:c6:86:70:
                    95:78:d9:e9:ec:43:2a:0c:16:b8:0a:ee:14:58:0e:
                    ff:06:57:29:83:5e:f0:a0:95:d8:32:b9:27:04:28:
                    d6:68:58:bc:07:c5:ee:ee:b6:fb:0a:04:93:f0:a7:
                    e9:8a:5f:0e:00:73:69:8b:be:6b:f5:d2:17:16:8c:
                    e4:ca:5b:00:de:50:ae:6b:c0:61:92:f9:bf:3e:c0:
                    9e:5e:09:0f:49:36:bd:7e:e9:98:f8:b3:07:5f:d5:
                    df:a0:04:2e:68:fb:28:bd:36:8d:5c:4a:90:d9:f6:
                    b8:6c:f3:73:40:35:fa:70:73:17:61:b8:86:81:f5:
                    10:75:4c:a9:fc:14:28:c5:2e:0d:a1:ea:7e:87:4e:
                    0b:24:20:99:f3:ad:54:23:80:4c:36:f0:b4:c6:c2:
                    0b:cd:14:92:84:fe:5f:15:f2:e9:74:97:13:cc:94:
                    19:ee:4a:dd:a4:70:18:a9:76:f0:6a:62:bc:de:78:
                    9c:8c:81:92:89:a9:0d:12:f8:5e:a8:0f:2a:36:24:
                    ec:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:69:5A:45:47:21:43:AB:B1:38:8E:28:1B:4A:AB:28:FF:C5:6E:47
            X509v3 Authority Key Identifier:
                keyid:19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:56:d8:29:02:7b:19:e3:41:7b:d0:91:49:8a:85:97:6c:75:
         ca:d2:6f:92:62:eb:19:fa:29:43:fc:a1:33:da:26:3d:ce:18:
         44:c4:4c:bc:34:e8:27:3e:40:d4:9e:bb:19:1c:96:e4:94:d4:
         34:ff:03:c6:9b:f0:d9:05:c6:a1:30:d6:e8:f7:2c:9e:d3:71:
         7d:2e:ae:a5:93:01:21:50:20:6d:94:ba:f6:43:c5:bf:1b:63:
         9a:4b:09:b1:ff:bc:b1:05:86:96:85:d1:ab:3c:87:41:19:4f:
         00:68:76:1e:92:0a:08:33:95:06:18:94:df:37:ff:38:bd:4b:
         8b:95:6e:a4:18:62:76:ee:99:46:5f:86:fd:30:42:cb:12:c5:
         54:bd:2c:a5:c6:9c:66:41:0d:9e:fb:71:82:28:1c:d6:cf:f1:
         5e:7e:e1:c2:68:7f:da:3d:0c:82:0f:d1:32:64:ec:2e:df:df:
         56:d1:4b:be:65:f7:25:c0:2a:ec:67:aa:f5:a9:5f:9e:d9:24:
         6f:f3:29:e3:7b:93:c3:ea:22:f6:62:0e:0e:57:af:aa:27:e4:
         0c:c7:da:c4:e6:5f:b4:bb:f4:6e:d1:28:c3:9b:2f:35:74:de:
         b7:f4:ed:c0:6a:dc:5e:22:8b:a0:a5:2d:50:b2:87:29:85:38:
         d6:e8:20:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:50:25 2025 by rpki-client