Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
File:                     GCJBwqTNGwi_W6VBLUkcScjrh40.mft (raw, json)
Hash identifier:          EAEbTDofWCC8jq+YQ+BUP8AMG6sauz80PLcVu+c6eLo=
Subject key identifier:   47:35:D5:A6:F8:9B:4A:7D:04:C8:62:41:6A:7D:EA:CC:F2:6D:9E:E6
Authority key identifier: 18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D
Certificate issuer:       /CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
Certificate serial:       01963F544A7704E9D23F978E289DF5E0E582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
Manifest number:          01D8
Signing time:             Wed 16 Apr 2025 16:00:10 +0000
Manifest this update:     Wed 16 Apr 2025 16:00:10 +0000
Manifest next update:     Thu 17 Apr 2025 16:00:10 +0000
Files and hashes:         1: GCJBwqTNGwi_W6VBLUkcScjrh40.crl (hash: ww5/wIwXdDLpZOD2PtlRB4hpUH/K/ph8aqO/4Oq+qwk=)
                          2: _uaKTHKtfWhbGfsoaUqVE21BcaI.roa (hash: ZcgIbRy8eNOQQ+FS3+GJOt3y/shZQUFy7iI8KMgc4tI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:54:4a:77:04:e9:d2:3f:97:8e:28:9d:f5:e0:e5:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
        Validity
            Not Before: Apr 16 16:00:10 2025 GMT
            Not After : Apr 17 16:00:10 2025 GMT
        Subject: CN=4735d5a6f89b4a7d04c862416a7deaccf26d9ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bd:78:05:3c:7b:ce:fe:da:fb:dc:a7:01:87:
                    f9:9a:e4:51:df:fa:7e:0b:4a:ce:08:28:e6:de:d9:
                    65:64:3d:5f:a3:e0:57:cc:3a:d5:96:14:b5:0e:79:
                    90:47:e6:dd:5e:99:56:2d:fa:dd:a4:01:a9:b7:b1:
                    e1:dc:e2:3f:70:33:52:a4:55:83:8c:3d:65:a3:92:
                    7c:68:4e:8e:7d:8b:f4:9d:dd:11:ca:30:5b:e9:95:
                    f5:15:83:4a:90:39:ba:36:f3:c0:01:79:8c:f8:ff:
                    e3:c6:65:ec:57:bf:a6:38:ee:17:c7:12:74:dc:c7:
                    fc:be:d7:ef:61:5c:c7:1e:1a:b7:6e:b7:ee:c9:93:
                    50:1d:16:26:b8:5a:67:e2:6e:81:0d:51:09:b7:0b:
                    e0:3e:67:35:7a:2b:bc:4f:ff:c3:2e:19:a3:f1:bb:
                    40:4a:e4:76:39:3b:dc:15:91:a8:98:48:aa:e3:a0:
                    51:6e:49:c4:2e:9f:89:14:aa:18:76:5c:52:6e:11:
                    e6:7e:3c:ad:c9:a5:b7:d6:d6:b8:90:e5:64:ee:56:
                    9f:45:89:73:44:5e:8d:9d:6b:58:bc:0b:f6:43:0d:
                    f1:7b:84:72:9e:cf:18:9d:8d:5c:60:06:d7:74:01:
                    3c:74:e1:ba:9a:b0:0d:a7:67:b9:9c:7e:e1:80:da:
                    4d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:35:D5:A6:F8:9B:4A:7D:04:C8:62:41:6A:7D:EA:CC:F2:6D:9E:E6
            X509v3 Authority Key Identifier:
                keyid:18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:43:5f:79:1e:5c:37:d7:96:b2:6b:0c:be:0f:7c:6f:b9:fe:
         01:17:23:4a:70:1d:eb:03:0d:88:b4:92:62:08:60:a7:ab:7c:
         69:82:04:b6:3a:93:6e:bc:a8:42:e1:d2:60:6a:50:34:b1:8d:
         cd:ec:9d:04:a6:2d:bc:af:8e:9f:4d:37:57:f6:c0:28:a2:a6:
         f6:3c:8f:73:83:b9:48:2b:0a:3b:a1:47:c5:01:f3:d0:c6:e4:
         ce:28:0d:f2:9f:8e:00:da:a9:f5:fd:a3:f2:b7:e0:44:2f:98:
         21:c2:3e:2b:d5:bc:ee:60:de:c3:bd:b2:01:a2:5f:cf:f3:aa:
         7f:50:07:9b:76:e8:bb:d6:fb:dd:be:e8:8c:3e:b4:6f:7c:31:
         fa:2b:65:72:30:3f:53:43:e1:a3:a8:d4:37:7b:fc:ac:7d:85:
         d2:fd:74:e5:4a:9a:c4:5a:b5:e0:bc:dc:a2:42:4f:b5:26:86:
         56:03:b0:98:ad:d8:fd:c8:47:db:21:f2:6d:45:e4:34:47:cf:
         f4:d1:32:83:09:e3:68:48:9c:71:3a:8f:dc:b6:02:26:8a:eb:
         69:3d:9b:90:6c:d5:4f:fd:63:1e:82:26:30:7e:a4:01:8a:e3:
         a6:2a:e1:dd:7e:57:b9:b8:bb:5a:ab:60:50:02:5c:ce:6a:24:
         65:b0:28:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:15:06 2025 by rpki-client