Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
File:                     GUoR_la49HpaFBUDK3f_n7CC4D8.mft (raw, json)
Hash identifier:          Mi8FjqwlqVcUjDrOQKWNB1ZQIRnmOd5ux/AqdEvXZ+0=
Subject key identifier:   81:79:C2:86:68:FD:17:BB:C5:D4:5D:22:EE:5D:47:D7:F8:24:CD:2C
Authority key identifier: 19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F
Certificate issuer:       /CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f
Certificate serial:       019510C7601BBDCF3512340715FC6AD40EB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
Manifest number:          0F14
Signing time:             Sun 16 Feb 2025 22:00:56 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:56 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:56 +0000
Files and hashes:         1: GUoR_la49HpaFBUDK3f_n7CC4D8.crl (hash: mg4cU/RFIjatFf+weKlp9TIHTcaTk9ir2a8y6rZxLdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:60:1b:bd:cf:35:12:34:07:15:fc:6a:d4:0e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f
        Validity
            Not Before: Feb 16 22:00:56 2025 GMT
            Not After : Feb 17 22:00:56 2025 GMT
        Subject: CN=8179c28668fd17bbc5d45d22ee5d47d7f824cd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5d:42:eb:5f:2c:77:ad:78:4a:40:e9:75:9a:
                    6d:ea:d8:47:ee:c9:f6:a3:0e:2f:af:99:ca:f7:89:
                    7e:26:c2:f2:99:71:5b:ab:a3:14:75:aa:5a:94:69:
                    dc:98:ff:41:b1:8e:d5:45:0d:39:5e:b5:8a:56:d4:
                    83:ff:12:d5:0d:ac:76:f4:44:3d:df:f7:78:a5:4e:
                    f6:90:cb:51:cc:52:93:f9:9c:27:62:be:9f:7b:91:
                    06:67:a5:20:df:e3:c3:53:14:1f:0c:97:e6:ae:47:
                    1b:6b:d1:62:1a:22:79:56:f8:9d:c1:e0:8b:91:b8:
                    0f:ed:90:61:11:dd:8e:db:ad:17:7e:5b:71:9a:8c:
                    84:40:93:14:7c:65:43:e2:02:b1:a3:71:dd:00:4c:
                    d5:b2:92:26:6b:5d:f7:ce:39:33:8c:81:3c:b2:d8:
                    f1:96:52:aa:6f:61:42:16:a5:5e:dc:68:29:06:25:
                    05:8e:f9:f5:db:94:79:e9:85:10:1f:4a:b0:d1:78:
                    2d:94:45:68:44:aa:64:c7:67:78:f6:5a:9f:90:45:
                    e9:d2:3d:a1:6d:0a:fc:4f:f6:74:ff:fa:db:da:a3:
                    14:1e:60:b4:4d:6f:58:dd:b2:16:40:a6:31:e9:ef:
                    d8:b0:5a:f0:35:ba:fa:1a:70:ea:36:c1:25:c3:68:
                    89:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:79:C2:86:68:FD:17:BB:C5:D4:5D:22:EE:5D:47:D7:F8:24:CD:2C
            X509v3 Authority Key Identifier:
                keyid:19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:5d:51:83:c7:68:66:54:be:bc:96:a7:04:95:02:01:45:a3:
         9e:b5:71:67:8b:88:c4:41:cd:f0:c3:06:88:28:03:d7:02:2e:
         2b:59:19:4b:4c:7d:41:b0:91:30:66:1f:19:bc:35:82:a8:5e:
         ea:89:2b:08:bb:25:13:de:4c:ea:a1:34:c7:61:80:32:34:57:
         95:27:8f:41:4c:b8:20:1c:92:35:03:14:5c:fa:ab:23:10:0e:
         8b:32:3d:dc:4e:b7:23:3e:87:5d:dd:35:c5:85:91:a3:df:b2:
         25:c8:9f:64:f5:2e:0c:3a:29:05:18:e8:af:83:ef:88:e9:56:
         8b:91:fa:a5:e5:e6:86:ec:01:10:fe:45:72:ec:9c:70:64:fb:
         96:d9:20:f8:e4:8e:55:5a:d3:65:a3:91:d5:c7:b3:74:4f:ca:
         8f:32:10:21:ef:ff:88:69:88:b3:ed:b1:49:97:a5:03:a2:a8:
         4c:11:86:2b:5a:29:9e:1d:b9:8f:87:3a:18:fb:6c:d2:ff:9a:
         23:37:f0:71:ec:2c:77:27:c7:4a:bf:c8:5d:53:d4:ea:8d:ae:
         7f:bd:ec:da:b1:61:ac:0d:0f:c1:16:6b:a0:f5:8b:46:15:87:
         e4:14:a1:82:bc:c1:2d:3d:0f:cc:fe:b9:9c:8d:bf:2e:a0:8b:
         59:7d:43:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:47 2025 by rpki-client