Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
File:                     G1WOmRP2tWzD1WD5T_E38s1vSGI.mft (raw, json)
Hash identifier:          K2sR4rhdIoSTKi2VmhXZhFq0DUwavp9LYDTBtjYLj60=
Subject key identifier:   3F:3B:9A:67:93:6F:1C:CD:C2:68:05:AA:A3:28:04:58:D4:F6:22:40
Authority key identifier: 1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62
Certificate issuer:       /CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
Certificate serial:       019745C2513961D4D94EEEC651F7C2DCFE61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
Manifest number:          0592
Signing time:             Fri 06 Jun 2025 15:00:52 +0000
Manifest this update:     Fri 06 Jun 2025 15:00:52 +0000
Manifest next update:     Sat 07 Jun 2025 15:00:52 +0000
Files and hashes:         1: G1WOmRP2tWzD1WD5T_E38s1vSGI.crl (hash: w8cBn5Mel2SvxVRFB19K8Qz+T7mfyxNwi4S46432lsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:c2:51:39:61:d4:d9:4e:ee:c6:51:f7:c2:dc:fe:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
        Validity
            Not Before: Jun  6 15:00:52 2025 GMT
            Not After : Jun  7 15:00:52 2025 GMT
        Subject: CN=3f3b9a67936f1ccdc26805aaa3280458d4f62240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:09:05:7b:c9:ab:d4:14:ab:08:55:3e:07:2d:
                    a6:3b:63:2f:f1:78:bf:9c:10:40:f0:64:bc:3b:27:
                    3c:6f:75:11:eb:a5:d7:a5:68:af:04:95:21:c9:c1:
                    c2:0e:2d:cf:dc:58:4e:7e:b1:d9:f8:14:2d:5c:51:
                    bb:89:af:1e:6a:ce:8a:b1:8f:13:c1:bb:de:51:15:
                    a6:17:6f:2d:36:ce:19:1d:3d:f8:53:6b:04:b9:30:
                    50:69:c5:cb:84:a5:ac:0f:0f:93:cf:55:43:79:cc:
                    8f:21:62:11:bc:77:3c:56:89:8b:52:72:5c:99:2b:
                    7e:d0:7e:90:a6:ba:75:ff:c7:21:10:36:cb:9d:73:
                    ec:d3:01:df:a1:6a:21:16:6e:7a:ff:06:81:3f:43:
                    ad:00:56:fb:aa:e2:d3:83:9a:64:b9:8b:00:9f:bc:
                    f0:64:58:fe:4b:2a:0d:bd:1c:c9:4c:2a:e5:aa:27:
                    24:f6:72:e9:b1:85:9c:3d:3d:02:e3:a2:41:26:5e:
                    c9:6c:94:9c:89:1c:81:0d:bd:37:fd:1c:c4:05:47:
                    05:c6:e6:28:03:56:53:f9:bb:15:03:ba:ff:03:20:
                    f7:02:ac:44:33:c7:05:b4:a1:9e:b3:19:88:d4:58:
                    e4:e6:bc:15:fb:b6:e5:12:45:5c:98:6f:0d:80:c6:
                    1a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3B:9A:67:93:6F:1C:CD:C2:68:05:AA:A3:28:04:58:D4:F6:22:40
            X509v3 Authority Key Identifier:
                keyid:1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f6:aa:fd:5b:ba:87:ca:07:5e:66:9e:57:a2:be:bd:84:de:
         4f:25:12:56:b1:d9:59:96:bf:1a:77:74:21:2b:68:6d:75:b0:
         48:fe:94:e6:79:f5:57:6c:85:37:11:25:b0:95:25:5b:e4:d6:
         a2:0b:70:70:22:db:04:e7:af:af:a1:5a:35:58:0b:f1:63:5d:
         a5:f3:89:0a:14:de:fc:50:9c:ab:5c:81:1f:2c:ee:d1:fb:6d:
         16:e3:72:24:28:4b:2f:fe:4c:ee:e9:0a:25:4f:61:7f:43:f2:
         0d:9c:86:55:c4:b9:b0:87:10:7a:59:67:f9:f1:01:d3:6f:2e:
         35:4e:df:e1:12:56:d6:f7:7d:cc:1a:e1:d7:d5:ca:5d:ff:d4:
         89:74:c5:cf:e5:c2:66:d3:02:43:26:31:fa:aa:03:40:f3:90:
         ed:c5:80:73:7d:ef:b2:e4:f8:30:4a:eb:21:17:82:f6:40:87:
         f7:e9:5c:23:45:12:87:a7:c0:9c:6d:0f:ee:61:e0:17:0f:54:
         27:b5:16:7c:c0:6c:71:95:bd:43:5b:7d:c1:3d:86:39:ad:84:
         11:79:48:09:12:3f:00:bf:e0:74:ae:1d:c7:49:93:ab:cc:d8:
         70:0e:cd:90:9b:2c:d8:37:e7:62:46:7f:48:10:a8:35:c5:d3:
         53:e7:ea:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:06 2025 by rpki-client