Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
File:                     GxubyMfg_Ee_iwpXLRpXLWppa7c.mft (raw, json)
Hash identifier:          QesBZiwcGntoobec8izFr2KTfHoXTrouFHY6rpjFkXw=
Subject key identifier:   FA:10:69:BE:3C:50:EA:2D:F6:87:E5:D2:B5:0D:D1:0B:0D:4A:AC:00
Authority key identifier: 1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7
Certificate issuer:       /CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
Certificate serial:       01964E23013AA482F84EA95330E8B1AB9098
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
Manifest number:          0D1F
Signing time:             Sat 19 Apr 2025 13:00:38 +0000
Manifest this update:     Sat 19 Apr 2025 13:00:38 +0000
Manifest next update:     Sun 20 Apr 2025 13:00:38 +0000
Files and hashes:         1: GxubyMfg_Ee_iwpXLRpXLWppa7c.crl (hash: biIdj8agzukfdWkdO3FNXefHyXmTctAbI7KRK9HrnQA=)
                          2: xGuOIxMFC1Wn9_vw4MtsHeq3I1E.roa (hash: kcCBBOjP/JTwKy7Io6Y4tXVkBszU8YzDmmO1xZCayZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:23:01:3a:a4:82:f8:4e:a9:53:30:e8:b1:ab:90:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
        Validity
            Not Before: Apr 19 13:00:38 2025 GMT
            Not After : Apr 20 13:00:38 2025 GMT
        Subject: CN=fa1069be3c50ea2df687e5d2b50dd10b0d4aac00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:08:b9:f5:9a:c2:d7:66:14:3e:ff:12:a7:
                    e1:61:b6:c1:d5:ff:ad:25:14:84:2f:90:54:1b:16:
                    3d:83:64:21:43:73:66:ca:39:60:58:7e:dc:2c:d2:
                    59:27:a4:c4:38:ff:13:72:58:87:bc:37:38:37:ef:
                    31:f3:d7:d1:cf:1d:08:26:bc:a5:2a:a9:df:84:45:
                    cf:11:8e:59:5b:b3:dc:54:1f:0f:8e:e8:01:45:dc:
                    73:c5:c0:fa:66:6b:56:69:db:0e:b3:b3:c2:b6:8b:
                    d3:6c:18:61:06:a6:6d:05:46:27:e2:9c:70:2a:be:
                    e6:fb:ad:3d:90:3f:a1:5f:0f:de:2f:c1:b3:2f:8b:
                    8a:45:07:17:db:3a:24:1b:50:3a:ad:c6:7d:e2:4b:
                    5a:20:eb:2b:9d:67:d8:ae:78:8d:0c:97:a6:78:45:
                    6e:8c:f7:c9:59:2e:ca:38:04:95:7f:85:34:7d:39:
                    e0:a2:ad:c6:37:c2:98:7f:b0:b8:8d:d6:64:c8:83:
                    0d:0b:79:1a:78:47:f2:b5:d0:86:48:ac:5b:a5:50:
                    fc:e3:08:94:6c:28:82:ba:38:52:ff:68:7e:74:0c:
                    b4:0e:bc:34:2f:f8:60:56:7e:92:85:3f:4e:c2:87:
                    b5:f9:9f:a4:1e:eb:e1:0d:a9:7c:9d:9d:4b:03:02:
                    7c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:10:69:BE:3C:50:EA:2D:F6:87:E5:D2:B5:0D:D1:0B:0D:4A:AC:00
            X509v3 Authority Key Identifier:
                keyid:1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:1b:65:f9:fd:d8:9c:3c:44:29:ec:23:81:6b:9f:b5:68:23:
         d7:b5:ac:a1:45:2e:f9:9e:98:86:01:e0:8b:2b:ee:96:22:6e:
         65:03:4c:da:eb:cc:c5:cd:96:aa:e3:5a:3d:29:51:35:af:3d:
         e4:0a:46:0f:d2:49:ec:bb:18:16:7d:8a:df:f6:8d:ed:e9:c7:
         1a:29:4a:7a:92:23:03:d1:bf:96:2a:dc:f0:e5:12:37:eb:62:
         30:ea:00:4c:54:47:e4:c7:65:7b:e2:1e:30:f7:c1:3b:69:96:
         3e:04:71:f6:df:3f:9e:e9:e5:0e:20:87:e7:0a:c7:72:b5:32:
         4a:c5:1e:69:de:89:58:0c:db:ef:af:ae:1d:33:76:fa:79:4a:
         46:5e:64:32:7a:22:92:02:f8:b3:9d:bf:5c:c1:4c:f8:ef:54:
         ec:04:a7:14:69:33:bb:0e:1a:6d:b0:0a:bb:44:95:24:be:39:
         c6:74:30:b8:0f:b0:7d:07:6b:2c:b0:0e:1a:fd:6c:61:c4:8b:
         ff:bb:d5:ac:f4:89:e0:40:75:81:80:25:e9:cf:86:52:37:b8:
         dc:f8:90:da:6d:18:6f:34:32:8c:c4:a1:37:8a:05:b1:ed:af:
         88:73:22:bb:90:de:a0:b8:6d:2a:4f:da:be:16:01:29:bb:5d:
         cc:2c:7a:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOIwE6pIL4TqlTMOixq5CYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMWI5YmM4YzdlMGZjNDdiZjhiMGE1NzJkMWE1NzJkNmE2
OTZiYjcwHhcNMjUwNDE5MTMwMDM4WhcNMjUwNDIwMTMwMDM4WjAzMTEwLwYDVQQD
EyhmYTEwNjliZTNjNTBlYTJkZjY4N2U1ZDJiNTBkZDEwYjBkNGFhYzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstcIufWawtdmFD7/EqfhYbbB1f+t
JRSEL5BUGxY9g2QhQ3NmyjlgWH7cLNJZJ6TEOP8TcliHvDc4N+8x89fRzx0IJryl
KqnfhEXPEY5ZW7PcVB8PjugBRdxzxcD6ZmtWadsOs7PCtovTbBhhBqZtBUYn4pxw
Kr7m+609kD+hXw/eL8GzL4uKRQcX2zokG1A6rcZ94ktaIOsrnWfYrniNDJemeEVu
jPfJWS7KOASVf4U0fTngoq3GN8KYf7C4jdZkyIMNC3kaeEfytdCGSKxbpVD84wiU
bCiCujhS/2h+dAy0Drw0L/hgVn6ShT9Owoe1+Z+kHuvhDal8nZ1LAwJ8wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoQab48UOot9ofl0rUN0QsNSqwAMB8GA1UdIwQY
MBaAFBsbm8jH4PxHv4sKVy0aVy1qaWu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3h1YnlNZmdfRWVfaXdwWExScFhMV3BwYTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80ZDJhOWYtNmY3OC00Y2M2LTlhZDYt
MGY2Yjg0NjhjNzlkLzEvR3h1YnlNZmdfRWVfaXdwWExScFhMV3BwYTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80ZDJhOWYtNmY3OC00Y2M2LTlhZDYtMGY2Yjg0NjhjNzlk
LzEvR3h1YnlNZmdfRWVfaXdwWExScFhMV3BwYTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxtl+f3Y
nDxEKewjgWuftWgj17WsoUUu+Z6YhgHgiyvuliJuZQNM2uvMxc2WquNaPSlRNa89
5ApGD9JJ7LsYFn2K3/aN7enHGilKepIjA9G/lirc8OUSN+tiMOoATFRH5Mdle+Ie
MPfBO2mWPgRx9t8/nunlDiCH5wrHcrUySsUead6JWAzb76+uHTN2+nlKRl5kMnoi
kgL4s52/XMFM+O9U7ASnFGkzuw4abbAKu0SVJL45xnQwuA+wfQdrLLAOGv1sYcSL
/7vVrPSJ4EB1gYAl6c+GUje43PiQ2m0YbzQyjMShN4oFse2viHMiu5DeoLhtKk/a
vhYBKbtdzCx66g==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:26 2025 by rpki-client