Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
File:                     gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json)
Hash identifier:          nMfxqvcb7/8kRhE//MJPplNiF/R8TGYYcFqGnKAbhP4=
Subject key identifier:   8E:6B:50:8C:43:7F:A4:FB:6D:58:78:E6:6A:4B:B0:AC:BF:88:14:F5
Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
Certificate issuer:       /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Certificate serial:       0195903D0EDACBAAC026AE86487B31715620
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
Manifest number:          05DE
Signing time:             Thu 13 Mar 2025 16:01:15 +0000
Manifest this update:     Thu 13 Mar 2025 16:01:15 +0000
Manifest next update:     Fri 14 Mar 2025 16:01:15 +0000
Files and hashes:         1: 248bDK_2X4s3D78cLTN1zTJo8ls.roa (hash: kLQEr1R8+53FUqqBvs455Xwu5a5on81N6ifpRavsyZA=)
                          2: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: GTbEIiS4cAmM/Yin+dABnuWMMgzjuvEplE7vIR+Z3Yo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:90:3d:0e:da:cb:aa:c0:26:ae:86:48:7b:31:71:56:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
        Validity
            Not Before: Mar 13 16:01:15 2025 GMT
            Not After : Mar 14 16:01:15 2025 GMT
        Subject: CN=8e6b508c437fa4fb6d5878e66a4bb0acbf8814f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:27:81:d5:5d:2e:e6:8d:79:56:1b:c4:67:
                    1d:e9:bf:d5:2e:20:74:d2:a7:2d:a5:00:0f:61:5a:
                    cc:5a:fa:f1:41:c3:28:79:d3:53:19:3c:79:4b:25:
                    ae:04:62:a6:73:81:bc:cb:aa:dd:95:09:32:dd:e9:
                    ac:f6:82:9d:90:ec:85:0d:c7:b4:ac:cc:e7:9e:8f:
                    ee:f4:d3:e5:53:ce:3c:25:31:c6:d4:15:cb:b8:43:
                    74:74:df:bc:eb:e7:58:e7:f6:c0:2f:01:4d:1d:9a:
                    52:62:d2:97:11:d6:90:5f:c6:82:79:df:ba:8d:4e:
                    28:9f:01:d7:45:55:92:9c:f3:22:10:15:bb:08:27:
                    9c:5e:fb:a9:a9:53:a4:a4:a0:ad:c2:1a:12:dc:6b:
                    d0:3c:b8:8a:96:09:68:03:b3:84:b9:7c:69:91:8d:
                    7f:ea:95:6e:40:7d:cb:c4:01:aa:44:3d:92:54:11:
                    9d:67:55:85:93:88:9a:d2:07:3a:4c:44:10:1f:7d:
                    64:f5:d5:d3:a1:71:50:26:b7:f0:f5:d9:38:ac:d1:
                    a7:99:16:f2:81:3c:9f:3f:58:86:34:82:f9:6c:8d:
                    57:d9:13:6a:7e:db:6e:b0:13:c6:ac:ed:4b:d8:c9:
                    09:fc:ce:4f:b0:43:1f:7b:65:2b:2f:2d:19:c8:11:
                    94:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6B:50:8C:43:7F:A4:FB:6D:58:78:E6:6A:4B:B0:AC:BF:88:14:F5
            X509v3 Authority Key Identifier:
                keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:3e:76:7f:a3:81:3e:04:5e:1d:e8:cd:89:0d:fb:f9:f0:3b:
         a3:26:2c:2b:25:56:8a:fb:ff:e1:98:9f:48:15:f4:da:5b:86:
         41:a5:53:ce:76:b2:de:f7:a8:23:5e:0a:8d:d4:78:d3:15:7e:
         35:55:63:73:02:e5:a1:37:48:96:0d:86:e3:0d:e2:16:4b:07:
         f6:94:9e:65:43:62:b7:fb:34:1e:5b:55:d7:c5:4b:44:f3:cd:
         ed:95:a7:f6:f3:ed:92:cb:71:5b:1f:11:1e:97:09:32:0d:08:
         cc:61:84:ab:21:1b:7f:2d:32:77:1d:92:ba:5c:97:f6:fc:c4:
         5a:04:32:36:d8:0e:b7:ef:58:3b:93:62:04:ed:33:4a:c7:a6:
         62:f0:aa:64:05:e5:c4:8b:85:0d:db:55:fe:aa:e3:54:08:7e:
         e6:92:20:b7:e2:49:4c:71:53:fc:3f:0d:4a:ae:d1:fe:64:9f:
         0e:dd:c1:25:ef:b1:94:b9:17:ef:36:d1:49:e6:4d:8c:bc:74:
         d4:69:cb:fd:37:f2:c2:6f:26:14:c6:97:e5:6e:58:9d:a7:14:
         63:49:45:36:7e:6b:65:b8:ae:e9:a6:0c:aa:f9:f1:ba:74:72:
         b1:91:f3:de:fb:a7:db:e0:7c:58:a1:b7:a2:97:a3:be:ec:63:
         ae:58:2b:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQPQ7ay6rAJq6GSHsxcVYgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZmU3ZDAwZTk0Y2QyYTdjYmY3ZjllODJjZjA5OTI0MTc0
MThkZjYwHhcNMjUwMzEzMTYwMTE1WhcNMjUwMzE0MTYwMTE1WjAzMTEwLwYDVQQD
Eyg4ZTZiNTA4YzQzN2ZhNGZiNmQ1ODc4ZTY2YTRiYjBhY2JmODgxNGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDongdVdLuaNeVYbxGcd6b/VLiB0
0qctpQAPYVrMWvrxQcMoedNTGTx5SyWuBGKmc4G8y6rdlQky3ems9oKdkOyFDce0
rMznno/u9NPlU848JTHG1BXLuEN0dN+86+dY5/bALwFNHZpSYtKXEdaQX8aCed+6
jU4onwHXRVWSnPMiEBW7CCecXvupqVOkpKCtwhoS3GvQPLiKlgloA7OEuXxpkY1/
6pVuQH3LxAGqRD2SVBGdZ1WFk4ia0gc6TEQQH31k9dXToXFQJrfw9dk4rNGnmRby
gTyfP1iGNIL5bI1X2RNqfttusBPGrO1L2MkJ/M5PsEMfe2UrLy0ZyBGUxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5rUIxDf6T7bVh45mpLsKy/iBT1MB8GA1UdIwQY
MBaAFIL+fQDpTNKny/f56CzwmSQXQY32MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yMGM3ZTctYTQ5Zi00MDMxLWJhNzct
NjNkZjYwMzE2MWM5LzEvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8yMGM3ZTctYTQ5Zi00MDMxLWJhNzctNjNkZjYwMzE2MWM5
LzEvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADz52f6OB
PgReHejNiQ37+fA7oyYsKyVWivv/4ZifSBX02luGQaVTznay3veoI14KjdR40xV+
NVVjcwLloTdIlg2G4w3iFksH9pSeZUNit/s0HltV18VLRPPN7ZWn9vPtkstxWx8R
HpcJMg0IzGGEqyEbfy0ydx2SulyX9vzEWgQyNtgOt+9YO5NiBO0zSsemYvCqZAXl
xIuFDdtV/qrjVAh+5pIgt+JJTHFT/D8NSq7R/mSfDt3BJe+xlLkX7zbRSeZNjLx0
1GnL/Tfywm8mFMaX5W5YnacUY0lFNn5rZbiu6aYMqvnxunRysZHz3vun2+B8WKG3
opejvuxjrlgr7A==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:32 2025 by rpki-client