Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
File:                     gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft (raw, json)
Hash identifier:          nh6lNkTH8Ce9A9ojvDCf8AXb0W0O1YZeV0zNccSIrK0=
Subject key identifier:   FD:30:94:7E:31:83:85:B6:C5:BD:49:05:41:2C:C5:1E:CF:97:73:0F
Authority key identifier: 82:FF:FC:FA:DD:27:16:23:C8:D5:05:5D:64:A9:3E:B3:D3:42:5D:BC
Certificate issuer:       /CN=82fffcfadd271623c8d5055d64a93eb3d3425dbc
Certificate serial:       01964F6C715B23B51CCE0BF86FD77C19AD8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
Manifest number:          0AEC
Signing time:             Sat 19 Apr 2025 19:00:28 +0000
Manifest this update:     Sat 19 Apr 2025 19:00:28 +0000
Manifest next update:     Sun 20 Apr 2025 19:00:28 +0000
Files and hashes:         1: 9KyF73rehYPV02tjofB2AZLrL40.roa (hash: puNKsT3QO3F9HAC3FWFKHMpsh3lk62Ax5BDntOG9N0s=)
                          2: gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl (hash: RbL0T8OkjCTQGmirYnLXv34UbCvjkUxHLAbjVcGCX4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 19:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6c:71:5b:23:b5:1c:ce:0b:f8:6f:d7:7c:19:ad:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fffcfadd271623c8d5055d64a93eb3d3425dbc
        Validity
            Not Before: Apr 19 19:00:28 2025 GMT
            Not After : Apr 20 19:00:28 2025 GMT
        Subject: CN=fd30947e318385b6c5bd4905412cc51ecf97730f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:54:ff:90:c4:4d:b5:49:3c:16:e2:c2:f1:69:
                    eb:55:67:20:5a:a9:63:cb:a5:ca:d9:9a:1a:16:e8:
                    5a:cc:49:29:34:67:0f:7d:f7:2a:27:7b:94:de:f7:
                    d7:2d:43:ff:45:4f:2b:85:d7:a2:38:b6:17:6f:c7:
                    e0:83:28:49:2e:fa:fe:57:30:48:de:65:8e:f1:db:
                    07:5b:59:25:d9:a3:ea:48:05:de:8f:78:90:cd:24:
                    8e:cd:48:9e:0f:ba:b2:10:f7:62:b5:6b:fa:cc:a0:
                    03:8d:d0:29:19:4d:b0:1a:58:7a:70:80:57:10:db:
                    83:72:33:1e:25:e2:e7:f5:0d:1c:c3:f3:34:a9:71:
                    d1:7e:16:c4:55:3d:5a:ae:5c:0f:cf:c7:ee:f1:d7:
                    56:c1:38:1d:24:4c:c2:0b:60:05:c4:a3:c8:f0:9e:
                    a1:9c:9f:ae:a1:6b:4f:79:4f:0a:88:50:ea:13:6f:
                    a3:79:cd:66:93:06:5d:b1:83:1a:40:46:87:66:02:
                    fd:41:18:c9:13:01:bc:9a:72:78:d0:36:b9:34:3a:
                    1f:7f:0c:95:c9:e2:86:d0:46:fb:44:aa:47:db:ef:
                    38:d1:ab:26:54:57:c0:cf:5a:5d:5a:b2:23:a8:74:
                    53:1d:fc:48:d0:21:32:17:43:5e:00:2c:96:64:6e:
                    44:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:30:94:7E:31:83:85:B6:C5:BD:49:05:41:2C:C5:1E:CF:97:73:0F
            X509v3 Authority Key Identifier:
                keyid:82:FF:FC:FA:DD:27:16:23:C8:D5:05:5D:64:A9:3E:B3:D3:42:5D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:3d:b9:9c:e6:a9:71:18:86:6e:de:dd:30:b6:a5:1b:0d:b4:
         14:d0:3a:b0:f2:a2:25:16:bb:51:e6:26:00:8a:51:36:b0:c8:
         8c:71:41:de:a9:e0:e2:57:9a:be:da:18:fa:56:c4:d9:f6:7a:
         16:86:d8:7a:39:45:12:17:71:d7:58:b0:15:88:86:0a:c6:cc:
         f6:48:d4:f5:40:1c:56:c0:17:79:ac:66:2c:72:4f:11:06:cc:
         f0:24:f2:40:a2:b8:a7:76:92:1f:9a:da:be:16:ff:47:2f:1a:
         bd:f0:cf:b1:05:07:ae:f1:5b:c6:5f:f3:b4:83:e4:07:c9:b2:
         0e:ff:da:3c:34:e3:f2:65:84:3a:d2:7f:f3:33:2d:c3:ce:8d:
         5e:13:d9:70:dc:a7:a0:91:fd:40:17:a0:84:5c:07:d9:ce:d4:
         40:d5:16:d8:92:dc:ef:1a:b3:a0:98:8a:e9:5c:a4:16:b1:3d:
         46:b8:0b:5a:06:b1:f4:df:92:3c:b4:03:c3:13:1b:ea:b8:3d:
         7c:66:e4:82:3b:52:cd:27:db:57:6c:58:b6:5e:79:e6:8a:5c:
         f7:f1:d5:22:ef:a3:f2:e6:fa:39:30:5b:51:cc:20:00:67:65:
         7b:33:eb:8f:e2:cd:a2:de:68:c3:c1:a9:82:94:e5:8b:4c:a7:
         4f:74:80:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:12:38 2025 by rpki-client