Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
File:                     Glyq86CZO3auE-EZE22_AGlpiRE.mft (raw, json)
Hash identifier:          OKaklIH8wfs69u/GQW4LKUBeIy20CjTEd/IpwBOn/F4=
Subject key identifier:   71:91:B0:07:98:D2:74:16:A6:E6:24:F3:59:8B:6B:C7:8B:07:72:12
Authority key identifier: 1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
Certificate issuer:       /CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Certificate serial:       01958CCEB93C88BD1DA9CFFC548667C7E45E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
Manifest number:          05D8
Signing time:             Thu 13 Mar 2025 00:01:52 +0000
Manifest this update:     Thu 13 Mar 2025 00:01:52 +0000
Manifest next update:     Fri 14 Mar 2025 00:01:52 +0000
Files and hashes:         1: 01hxjCh_nvh6suIkW5jDT7FQ5wY.roa (hash: 4bkvBLwedWb76MBEvCC/C6c3YY5NjD8WJrDif149Vao=)
                          2: Glyq86CZO3auE-EZE22_AGlpiRE.crl (hash: hcKIfq43BJ1tPPR86ZoEcwxJ8pP8LtABqPaL/aIH8A0=)
                          3: Qy-saNY8_sMM2Rt7ltQaOCM03mI.roa (hash: DmhtR0W/L8xjpyQ+jiNUqtRwA+94a2kvp+LpXXuTce4=)
                          4: vAu0TRUZ6oCOaUrWzBzbupAQywk.roa (hash: eqD14NcTM0qEFrT33cP0ZL7pYdg/PAWVbM43E+i0ncU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:ce:b9:3c:88:bd:1d:a9:cf:fc:54:86:67:c7:e4:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5caaf3a0993b76ae13e119136dbf0069698911
        Validity
            Not Before: Mar 13 00:01:52 2025 GMT
            Not After : Mar 14 00:01:52 2025 GMT
        Subject: CN=7191b00798d27416a6e624f3598b6bc78b077212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9e:71:66:b6:2c:db:20:88:07:f1:81:37:62:
                    de:80:9a:b9:a1:31:e4:ce:53:15:fa:9f:f7:5c:7e:
                    93:5c:f5:e1:8b:3c:c7:49:44:7f:2f:10:70:10:b2:
                    66:f5:30:1e:b5:1f:23:21:d0:c6:df:58:53:6a:0d:
                    17:87:b5:bf:2a:fa:36:a8:3c:ed:df:8e:33:99:50:
                    f7:f4:cb:f0:94:53:3a:71:d7:a8:21:c7:cf:10:f0:
                    fb:55:bb:30:81:c2:ec:bf:19:0b:71:5f:f0:b9:aa:
                    7d:8e:9e:66:dd:4b:33:53:d8:86:54:a5:7d:bf:a0:
                    be:00:db:ad:b8:fb:e8:c0:29:06:eb:9e:36:1b:39:
                    cd:25:0f:0c:19:3c:4f:6e:f4:bb:23:c4:b8:c0:f7:
                    15:69:1c:88:2b:03:e0:78:e8:11:57:56:ee:78:2c:
                    1e:63:29:7b:40:6c:54:63:ad:68:92:65:9f:95:ff:
                    1c:b8:7c:d3:23:26:4b:15:ab:08:80:fb:be:dd:c4:
                    f2:5c:6c:63:97:4c:9b:5c:b6:64:c0:07:03:dd:fc:
                    bf:80:89:17:53:da:1f:21:ea:1b:eb:1c:cd:1d:28:
                    b2:29:ea:62:ab:18:6d:c3:e7:32:37:34:dd:ba:83:
                    45:e8:22:49:13:b9:70:60:a3:f5:6e:f3:3c:05:00:
                    a7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:91:B0:07:98:D2:74:16:A6:E6:24:F3:59:8B:6B:C7:8B:07:72:12
            X509v3 Authority Key Identifier:
                keyid:1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:fa:14:17:a1:dc:09:13:a0:c6:86:15:42:4d:4c:47:d7:70:
         09:fc:2c:d9:9a:1b:09:c3:8e:8b:53:ac:b7:6b:b1:b3:23:b9:
         15:7e:1e:72:ff:80:26:92:24:32:16:54:41:ef:bd:f3:93:94:
         bc:06:29:dd:03:3e:eb:93:2c:4c:7b:e3:31:d2:da:12:33:79:
         16:bf:67:d7:d7:c9:4f:36:b7:c6:fb:b0:3b:af:a7:1b:5a:e8:
         75:f0:0a:f9:71:dd:14:ef:1c:8c:96:d6:77:63:1e:a0:74:44:
         71:25:ec:b3:d0:21:3f:bc:b2:0c:cc:3b:ba:80:41:c7:75:c1:
         7d:47:08:fa:26:cd:84:a7:3d:93:8e:e0:a6:4e:59:bd:12:be:
         b4:98:cb:0e:78:3b:3c:8a:47:59:96:39:b0:3a:f5:1e:46:e1:
         ee:4c:83:6b:76:ab:09:ea:82:dc:1a:02:7c:96:09:cc:71:e1:
         bb:c3:62:c1:e8:92:08:56:d5:6e:1c:d4:d0:b3:b9:fb:47:87:
         01:ee:ee:b1:d7:21:0a:09:ec:d4:98:6a:da:1c:60:c8:80:c8:
         36:95:e2:92:16:49:79:ab:fd:60:53:0f:e9:df:12:49:e4:5d:
         bb:9e:f3:7b:ed:dc:6f:4c:17:2a:60:b7:9b:df:9a:8a:65:f5:
         48:9d:88:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:04 2025 by rpki-client