Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
File:                     gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft (raw, json)
Hash identifier:          pj7aNuZCkSWbzLi2xdflhrGJ54Kj0BB0BPtltJ9i6Tw=
Subject key identifier:   5A:19:87:B1:43:65:C7:34:DF:35:2B:78:DB:FF:FF:7C:28:D9:27:85
Authority key identifier: 83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
Certificate issuer:       /CN=83020637e89655e299d91843769254af07714994
Certificate serial:       0196138F75CB93748E80EA04B250D2E93BAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
Manifest number:          0944
Signing time:             Tue 08 Apr 2025 04:01:30 +0000
Manifest this update:     Tue 08 Apr 2025 04:01:30 +0000
Manifest next update:     Wed 09 Apr 2025 04:01:30 +0000
Files and hashes:         1: 1-R9Qf46XIEkfXqrQvwwzD2Tou7g.roa (hash: MQ5+3E8S339NrGygiORsr3A7NuJnR4bP2xWWIaK0oj4=)
                          2: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl (hash: cjQ9dOnLn/YZf5BhirtzkZ1w+bIaMrnZeS9f1ieJVZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 04:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:13:8f:75:cb:93:74:8e:80:ea:04:b2:50:d2:e9:3b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83020637e89655e299d91843769254af07714994
        Validity
            Not Before: Apr  8 04:01:30 2025 GMT
            Not After : Apr  9 04:01:30 2025 GMT
        Subject: CN=5a1987b14365c734df352b78dbffff7c28d92785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:83:ae:6e:39:97:f5:9d:ed:0d:48:f3:1e:
                    23:c6:9b:63:7a:ed:cb:ff:34:27:18:e6:47:61:0a:
                    85:c6:c1:f7:43:b3:7f:9e:c6:d2:47:6e:f6:a4:d3:
                    59:8a:be:96:4c:6f:24:a0:68:a2:58:64:77:9b:78:
                    10:03:8a:0b:79:43:c0:10:0d:e1:68:21:ae:bf:42:
                    80:4a:dd:35:af:49:0c:2d:09:54:95:ef:19:21:04:
                    03:80:a9:f8:b4:d5:29:6d:f6:de:d8:46:3a:de:a9:
                    0d:26:8e:0e:47:ef:f1:f7:28:56:98:f6:62:e7:6a:
                    85:a6:ba:42:93:89:08:d5:52:e5:ee:ac:02:78:aa:
                    3b:1b:eb:a1:a4:ee:2e:e0:14:80:01:bb:f5:80:c6:
                    f7:66:03:77:5e:14:8c:24:bc:dc:de:4a:83:99:43:
                    48:5b:8d:e3:be:b1:eb:02:42:aa:f1:cf:ca:ae:dc:
                    34:39:c3:33:b9:02:74:fa:19:3a:af:fc:be:cc:d9:
                    c9:3b:ad:a5:89:82:ea:bb:77:46:e7:27:94:5a:31:
                    97:fd:b7:aa:a7:21:2d:30:de:1a:ff:9d:64:fa:d1:
                    d9:6b:34:aa:43:05:54:99:7c:4e:ec:1c:4f:7e:d1:
                    e9:03:e8:f6:b4:40:7d:71:fb:37:d1:a3:08:eb:8c:
                    0b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:19:87:B1:43:65:C7:34:DF:35:2B:78:DB:FF:FF:7C:28:D9:27:85
            X509v3 Authority Key Identifier:
                keyid:83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:83:66:64:52:0d:45:c0:42:05:33:be:ea:7c:b8:fa:8c:b2:
         ff:b3:9b:43:65:4e:26:83:9d:7b:62:d5:7f:2c:25:8e:89:bc:
         6a:59:3b:18:67:96:1c:ec:7d:82:50:a3:b3:0e:19:68:b6:a1:
         14:d9:27:66:82:44:d2:83:6e:54:38:c2:7f:ad:d9:a2:4c:f9:
         a9:5b:e9:49:07:61:46:f5:a7:ea:a3:d7:fa:7f:03:07:6c:15:
         47:dc:20:8c:fe:bf:01:7d:c2:bd:95:8c:7b:a7:de:8f:b7:59:
         e9:2a:0e:13:a2:af:b9:42:ae:8e:df:0a:4a:1f:4f:57:3f:12:
         86:af:54:7c:b1:23:24:3f:61:35:dc:63:b0:02:12:48:51:74:
         3c:fc:f5:a8:09:18:9d:20:a9:b8:8f:91:b6:b6:6b:fb:18:9d:
         e9:1a:dd:f3:4a:06:e9:38:20:bd:53:6b:43:48:3d:da:c0:00:
         69:bc:94:ed:bc:65:3c:52:c8:c9:95:10:19:8d:8c:68:7e:14:
         f3:13:d7:d9:08:b2:23:25:0b:24:13:10:be:5a:39:57:4a:90:
         54:24:4b:a6:2c:c6:6f:34:b0:18:ba:bc:0a:1c:c6:07:c3:ae:
         e9:85:fb:30:d1:2c:29:c2:c1:46:1f:49:80:d8:8c:58:96:01:
         6d:9c:44:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:58:36 2025 by rpki-client