Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
File:                     GbsyomYvkFwNi_JH7ODbxnmha4Q.mft (raw, json)
Hash identifier:          uBe/PgnZ+boLk0YZ5GXWqSjT8Yd9e1z40vW+8yT3sB4=
Subject key identifier:   F1:F1:A3:F3:94:FA:BC:59:67:17:21:E9:AB:EF:A8:F4:49:AC:2A:BF
Authority key identifier: 19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84
Certificate issuer:       /CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
Certificate serial:       01963EE6B4C4E48DEE3399A59B9D12320FB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
Manifest number:          0213
Signing time:             Wed 16 Apr 2025 14:00:28 +0000
Manifest this update:     Wed 16 Apr 2025 14:00:28 +0000
Manifest next update:     Thu 17 Apr 2025 14:00:28 +0000
Files and hashes:         1: GbsyomYvkFwNi_JH7ODbxnmha4Q.crl (hash: YvJBjtUsUnuKaI7CWlh0KSqVzlflQPqhwKkr6mwEMt0=)
                          2: rm-ctcMQkJoTJnbIDJV3c0v42nw.roa (hash: 0ZXTmxuKHi0QHBCAQY3aiWs6mf8IDw4nbeNjb8cUWcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:e6:b4:c4:e4:8d:ee:33:99:a5:9b:9d:12:32:0f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
        Validity
            Not Before: Apr 16 14:00:28 2025 GMT
            Not After : Apr 17 14:00:28 2025 GMT
        Subject: CN=f1f1a3f394fabc59671721e9abefa8f449ac2abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:8e:87:a6:2d:ba:77:5c:84:c8:b6:bc:82:
                    ec:f1:be:92:fc:d7:84:8a:d8:60:f9:06:22:57:ad:
                    bc:98:56:83:da:aa:b2:a3:a2:f0:87:c0:49:00:51:
                    c1:0c:7a:ad:f3:51:75:30:70:bc:e3:b2:1a:ff:72:
                    59:91:70:2b:52:39:20:25:a0:ce:c3:d4:d6:a4:1c:
                    bc:bb:dc:0d:cc:be:4b:66:66:c6:d6:24:7e:4e:86:
                    3d:55:a0:9f:3a:5b:4d:0f:ae:78:d5:75:30:fa:0a:
                    07:01:ad:b9:b1:d0:80:28:42:84:52:1a:15:7b:f1:
                    25:79:2a:f6:84:1d:c4:c1:9e:aa:40:78:30:06:da:
                    36:2b:e5:e9:5d:0c:3b:a5:1d:22:ce:4e:98:51:cb:
                    61:f8:8d:84:9a:11:90:1d:14:9a:b4:cc:4d:b0:aa:
                    1d:cf:01:51:9d:15:94:ea:66:77:60:4d:13:49:50:
                    ce:f0:0c:88:88:24:9d:6a:d7:cb:f4:fa:e9:98:f3:
                    d2:33:ab:e2:08:0d:33:f2:c5:33:e0:6d:ab:93:0b:
                    14:7b:9d:bb:44:9b:dc:22:db:4d:73:3d:15:59:24:
                    30:e9:dc:74:71:04:24:63:bb:8a:aa:0b:ae:cc:6e:
                    c4:54:90:0b:86:7d:71:81:86:a4:44:62:89:f6:f2:
                    d1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F1:A3:F3:94:FA:BC:59:67:17:21:E9:AB:EF:A8:F4:49:AC:2A:BF
            X509v3 Authority Key Identifier:
                keyid:19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:7c:13:00:27:65:21:51:52:e6:bb:8a:02:25:57:70:de:00:
         d7:3d:24:5a:ee:b6:e6:45:57:40:1e:8f:20:b9:10:a7:2c:63:
         10:b3:d3:fc:3d:8a:55:44:72:0a:5d:d5:55:fd:30:14:73:fc:
         25:10:9e:29:d9:0f:62:fb:88:0e:d3:d8:84:0d:ed:70:9e:ab:
         00:f5:85:c9:d4:94:8b:6a:95:b8:54:27:9e:8e:31:3b:95:52:
         93:f6:2f:53:f1:5e:b1:16:08:a1:dc:4c:e4:45:1d:96:f8:6b:
         f4:a2:24:6c:95:bb:86:d8:c0:95:25:e5:e0:15:ee:ba:b9:54:
         17:43:71:dd:15:80:eb:81:3d:b2:af:09:52:07:f5:1d:eb:f3:
         04:0f:cd:2e:65:be:2a:81:5e:dc:a7:f9:fe:32:31:fb:39:85:
         c2:23:a9:c8:9e:96:e8:af:98:d1:f6:08:85:f3:47:bc:9a:91:
         24:9a:39:cf:d6:06:9a:4a:af:ce:80:d3:79:8b:92:d1:af:70:
         82:f4:91:b5:59:a3:91:29:b2:3a:43:a9:93:7c:88:d9:11:fe:
         4e:5a:71:ad:73:22:c2:fb:3f:b9:50:61:66:21:d3:a4:f2:a5:
         5f:8c:84:2f:e8:c3:07:9a:94:3b:71:dd:62:62:d8:fb:d1:b5:
         d1:c8:65:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:54:38 2025 by rpki-client