Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
File:                     gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json)
Hash identifier:          dzsKhwf+Qh6ZQPROtYGY55iK5TJ9Zb+oq342HbJTi7o=
Subject key identifier:   68:01:5B:8D:A6:EB:1A:53:3A:C5:EE:AE:2F:37:7A:1D:1E:3E:60:03
Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
Certificate issuer:       /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Certificate serial:       019510C6F54A3383E9F515387CC7503315D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
Manifest number:          059C
Signing time:             Sun 16 Feb 2025 22:00:29 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:29 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:29 +0000
Files and hashes:         1: 248bDK_2X4s3D78cLTN1zTJo8ls.roa (hash: kLQEr1R8+53FUqqBvs455Xwu5a5on81N6ifpRavsyZA=)
                          2: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: MaQi0fSNq/yUfyxQxbKu75Cax00UKFbamP/lVPXLzsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c6:f5:4a:33:83:e9:f5:15:38:7c:c7:50:33:15:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
        Validity
            Not Before: Feb 16 22:00:29 2025 GMT
            Not After : Feb 17 22:00:29 2025 GMT
        Subject: CN=68015b8da6eb1a533ac5eeae2f377a1d1e3e6003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c3:37:4d:21:c7:07:0e:48:34:1d:a9:ef:e4:
                    9a:bb:3e:2e:cd:a7:af:08:15:40:a9:37:fe:3c:b2:
                    e7:a2:4d:63:31:99:43:b5:a1:3b:88:23:0e:10:d7:
                    15:4d:38:33:16:d4:7a:71:90:52:e9:d6:92:73:2e:
                    7b:ba:e2:11:e2:fb:06:0b:ca:33:5f:4e:de:59:92:
                    e6:d6:4b:8f:de:54:fc:d7:2a:9a:dc:6d:f0:5c:60:
                    20:12:26:aa:48:24:b1:c4:1e:9e:e8:fa:e2:90:5c:
                    49:1f:70:82:95:cc:e5:0f:cc:05:54:e7:18:51:c8:
                    d2:9d:92:c4:21:9b:e8:2f:26:9a:d4:aa:20:ed:fd:
                    21:45:4e:6e:04:3d:fa:84:16:ad:8a:67:56:2f:1d:
                    ce:49:57:cb:82:4b:a5:8e:72:52:93:4d:ee:83:d3:
                    75:b9:fe:62:63:bd:f4:56:90:16:83:cb:58:20:c9:
                    7c:bc:38:57:23:d5:33:58:8c:f4:ef:53:4d:0f:24:
                    e9:d2:64:e1:a7:b8:bc:8b:e7:1e:12:f9:71:b6:af:
                    35:7a:9f:a1:17:46:4e:6c:cf:70:19:b8:78:2c:a0:
                    87:63:0b:10:a2:f7:29:a3:6c:61:61:b7:fe:7f:4a:
                    ce:3c:3e:e8:ca:db:e8:ca:94:19:d9:95:20:26:58:
                    cb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:01:5B:8D:A6:EB:1A:53:3A:C5:EE:AE:2F:37:7A:1D:1E:3E:60:03
            X509v3 Authority Key Identifier:
                keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:10:72:e9:90:34:d3:89:86:73:16:4d:0e:6f:fd:4a:5d:47:
         4f:9b:9a:dc:e8:0b:e6:fc:6a:7c:e0:38:fd:27:f5:92:d4:61:
         d3:00:12:a9:28:b5:14:9d:2b:19:7b:ff:b9:40:69:42:58:8f:
         72:da:59:8b:e7:d5:59:ba:b1:b1:5b:87:2a:20:4e:d7:30:a1:
         27:b8:f8:f5:16:b0:21:8e:9d:a7:c3:97:7e:59:8c:7c:c9:cf:
         43:53:3c:d6:b8:ba:e8:16:a9:a5:56:06:7b:ed:c1:68:01:5b:
         fb:20:36:07:fe:1e:8e:92:e9:80:0d:23:18:c0:5a:c4:83:f3:
         6c:b5:99:4d:50:c2:46:65:2f:8c:f4:34:dd:6b:cf:fb:7c:43:
         8d:9c:4b:0e:59:e2:96:e8:59:f1:65:91:35:d0:da:9b:cd:49:
         e6:e7:5d:ad:de:05:db:45:05:a6:b9:cb:6f:08:3d:db:90:e6:
         32:d9:ac:3a:c8:1b:4f:79:0b:3e:75:c0:ce:85:c7:5a:fa:33:
         23:a7:26:37:5e:1a:ce:a4:42:b5:f0:47:16:a9:25:22:2f:7d:
         e6:9f:e2:87:0a:a3:01:5a:0c:cf:a9:25:59:5a:e9:f5:c4:b7:
         e4:8a:fa:be:a1:82:6a:46:2f:a0:e8:07:34:b7:6b:df:c8:8e:
         9c:f8:4d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:50 2025 by rpki-client