Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
File:                     gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft (raw, json)
Hash identifier:          hnWNfiTFDQEOL1/sxnzdzyZZdYn6BICiMRdQe221gEE=
Subject key identifier:   D7:5B:23:E4:96:0B:16:DF:53:15:DF:60:84:17:51:49:78:0A:B0:C8
Authority key identifier: 80:79:2B:DC:B6:21:CB:F2:1C:04:56:33:3B:84:3C:A3:2C:13:1A:FC
Certificate issuer:       /CN=80792bdcb621cbf21c0456333b843ca32c131afc
Certificate serial:       0194C42CA58FA70D0075A7417BCC011F7C82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
Manifest number:          0EA4
Signing time:             Sun 02 Feb 2025 01:00:47 +0000
Manifest this update:     Sun 02 Feb 2025 01:00:47 +0000
Manifest next update:     Mon 03 Feb 2025 01:00:47 +0000
Files and hashes:         1: gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl (hash: 7DKh/RlO5NUGU+JzQPbQMBh0S3xhaenoH94fA0N3k+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:2c:a5:8f:a7:0d:00:75:a7:41:7b:cc:01:1f:7c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80792bdcb621cbf21c0456333b843ca32c131afc
        Validity
            Not Before: Feb  2 01:00:47 2025 GMT
            Not After : Feb  3 01:00:47 2025 GMT
        Subject: CN=d75b23e4960b16df5315df6084175149780ab0c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:32:bb:a9:5f:c8:fa:ca:61:12:e0:d2:49:02:
                    e1:06:15:70:bd:14:21:d0:91:22:7f:c9:71:f1:18:
                    9d:3e:8b:db:ef:06:2c:c6:e7:6e:c9:91:f3:dc:59:
                    bb:d9:83:78:0a:12:b3:ef:e6:50:fa:29:85:63:6c:
                    3a:f6:20:66:cc:cf:ef:e0:3e:94:b7:f0:fc:90:c9:
                    47:9e:f3:36:34:00:43:46:4a:5a:d2:b3:29:0a:e3:
                    9e:ef:66:79:17:b2:0f:3e:7a:9f:dc:8d:f0:f1:55:
                    1c:85:5f:3e:4e:a6:b4:57:2f:ae:66:a5:59:c8:91:
                    9a:9b:b1:f3:8c:85:ff:79:3c:65:d5:2e:d6:32:04:
                    f4:4b:91:bb:8e:27:b2:e2:00:62:8f:e5:66:99:f4:
                    af:4e:07:04:56:a7:63:9a:7d:65:6d:60:7a:2b:c9:
                    4b:49:b5:dd:da:f0:f1:95:a9:e3:78:94:1a:1c:e9:
                    8a:92:9f:83:ec:ef:7d:89:bd:e0:3e:8a:fc:c2:12:
                    62:5a:6a:cc:48:7c:24:5e:3b:2a:4b:55:3d:47:b6:
                    a4:65:46:f4:8f:2c:a5:b5:01:d9:7e:18:69:01:68:
                    26:da:08:b6:0f:dd:bc:aa:f4:74:ee:1a:3d:10:7d:
                    af:7e:fa:86:c7:8a:97:7c:e8:a9:8e:d8:d7:89:d7:
                    52:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5B:23:E4:96:0B:16:DF:53:15:DF:60:84:17:51:49:78:0A:B0:C8
            X509v3 Authority Key Identifier:
                keyid:80:79:2B:DC:B6:21:CB:F2:1C:04:56:33:3B:84:3C:A3:2C:13:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:62:9d:f9:b6:4d:7b:31:17:dc:d7:2a:6a:76:8c:ec:bd:c5:
         62:28:76:be:5c:6c:d2:49:f5:b3:39:12:05:3a:f9:d3:16:d5:
         6a:b4:ae:cd:f4:41:7c:70:6d:ff:40:70:4a:b0:95:7d:b8:52:
         f3:38:11:6b:90:f5:f3:d5:7d:02:fc:a7:12:1e:52:54:15:b3:
         ac:02:88:e0:93:39:f5:ed:7c:ea:e6:14:d7:71:25:bb:25:22:
         ee:7d:07:03:c3:7f:81:87:73:6d:f8:eb:4e:92:44:b9:e6:6c:
         3c:37:1e:e2:ed:08:f3:f3:37:ea:8f:2f:45:8e:45:90:38:bd:
         3f:f8:e1:ff:07:90:97:fa:32:32:9d:07:62:8e:3f:77:cd:12:
         5c:96:40:c9:95:26:48:13:d6:12:e4:b8:7a:7d:81:12:8b:8e:
         dc:7c:46:13:ba:39:c1:0a:58:bc:9e:35:23:0c:d0:3a:51:bf:
         fd:b4:c0:ad:5c:6e:08:fa:56:b6:9a:a8:97:51:11:bb:98:4a:
         bf:e4:2a:49:87:c8:3c:93:76:59:31:89:71:c1:3b:a2:88:98:
         94:9d:19:62:0c:85:e9:f5:d6:7d:46:36:77:ef:78:f4:8c:ed:
         04:31:50:7c:4f:53:ed:6c:fb:d2:06:f1:04:e7:35:4d:2d:a2:
         40:e0:12:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:53 2025 by rpki-client