Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
File:                     GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft (raw, json)
Hash identifier:          61ItVD4RTRm/TE+e00WHTHCKSVdvl09BHqtU6CcSGP8=
Subject key identifier:   94:37:58:3F:CD:3D:2C:34:BA:35:0F:CA:DB:28:BE:56:9B:E1:46:E7
Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
Certificate issuer:       /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Certificate serial:       0196444498694A8DB3526EC42E3C64C11F37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
Manifest number:          11F2
Signing time:             Thu 17 Apr 2025 15:01:08 +0000
Manifest this update:     Thu 17 Apr 2025 15:01:08 +0000
Manifest next update:     Fri 18 Apr 2025 15:01:08 +0000
Files and hashes:         1: GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl (hash: /UL6fTWhR/ByxkpKoqdiMBVpsL10aaK3Vn4HDIJPeCo=)
                          2: dh95O1dB3GK1CEkOtCIFzjLf5oE.roa (hash: iquwJa/eYSZ4o0HvbhTJ3GQJK6OG8r+hAE6Yg/LMclY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 15:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:44:98:69:4a:8d:b3:52:6e:c4:2e:3c:64:c1:1f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
        Validity
            Not Before: Apr 17 15:01:08 2025 GMT
            Not After : Apr 18 15:01:08 2025 GMT
        Subject: CN=9437583fcd3d2c34ba350fcadb28be569be146e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c5:64:61:d2:55:e2:b9:69:2d:52:20:94:ec:
                    b3:07:dc:d1:bb:89:85:3a:c8:67:e4:b6:1e:f4:4f:
                    48:a9:b3:1c:88:6d:6e:00:2d:2a:1a:a7:a3:50:04:
                    c8:41:49:47:4c:be:7a:7b:d9:d9:cb:43:e8:30:a7:
                    78:8b:9e:e4:e6:58:d3:d4:22:45:ca:6e:02:75:40:
                    6c:f7:09:2c:5d:34:b0:2e:c2:db:91:18:39:0c:96:
                    3d:66:4e:66:95:86:c8:07:4c:d8:1a:91:03:8f:cd:
                    d1:d9:a4:be:cf:a6:a9:fb:37:96:d0:d6:03:19:3e:
                    13:e5:62:82:7c:d5:ab:c3:e2:42:5b:43:73:a0:9a:
                    07:c6:92:2c:0b:f8:39:66:9e:c9:99:21:45:64:ad:
                    d8:32:63:c2:8e:ed:97:b3:86:a6:36:23:19:af:19:
                    b0:8c:b8:e7:4f:04:ca:09:78:02:b7:51:1e:fc:50:
                    28:5f:5e:2f:2b:a6:f1:d5:6d:11:97:d9:85:3f:51:
                    68:22:4f:dc:ee:b8:b1:ad:12:38:ed:73:ce:f5:04:
                    1f:36:58:af:c1:b0:89:dd:7a:51:ef:16:05:4f:89:
                    77:a4:cc:f5:99:fb:8f:37:50:f2:c3:35:f8:4f:21:
                    72:43:81:e3:28:18:7a:13:12:ac:40:f2:c1:eb:e4:
                    41:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:37:58:3F:CD:3D:2C:34:BA:35:0F:CA:DB:28:BE:56:9B:E1:46:E7
            X509v3 Authority Key Identifier:
                keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:3b:a1:3c:70:92:9a:73:bc:94:5e:15:9c:0f:b3:6e:a1:2b:
         0e:7e:c8:49:fc:e6:f2:7b:54:56:84:20:cc:60:9d:6d:43:71:
         c8:e4:dc:f8:fe:35:74:56:0a:10:0c:e9:60:b4:9f:f1:5b:4a:
         fe:82:23:54:72:9c:9a:11:68:d6:6b:b4:21:8c:8b:6a:38:96:
         86:27:c6:e2:a6:08:87:e5:e4:2f:c8:f3:b6:e4:fe:8e:54:da:
         6b:1c:3e:5b:72:a4:22:ec:51:99:72:56:aa:4e:f4:ca:05:4b:
         1b:99:e1:1f:16:f8:27:e5:22:f5:02:41:7c:f7:c2:03:b1:cf:
         32:f2:11:26:cc:d9:8a:33:84:04:51:1f:95:e8:03:22:83:b0:
         bb:9d:38:8c:69:11:7a:99:17:fd:67:c8:74:4d:24:44:a1:e4:
         19:90:34:75:24:6e:e2:37:14:fd:44:bf:ca:8a:b2:9d:76:b8:
         c6:9b:42:70:b0:3f:51:c2:e5:a0:3c:74:0b:f3:9c:a8:6e:8e:
         b4:8c:80:a6:1d:d9:90:64:c5:e3:ae:48:00:29:0e:c9:46:91:
         12:df:b3:35:54:f5:3c:80:3e:d5:47:9a:16:f6:5b:e4:03:27:
         94:09:0e:2e:27:38:8c:c7:e3:41:19:60:d9:a4:2d:13:31:0c:
         a9:40:d6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:29 2025 by rpki-client