Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
File:                     G8qoP8mkEL2z4P0thIcgE0dxvs8.mft (raw, json)
Hash identifier:          AADKVHXsmDTa0jH4Ht8PI1dYHYPMf8Zfl1LUmDX/gsg=
Subject key identifier:   8B:7E:05:B8:D5:26:AD:C3:9E:08:DD:D0:F2:B7:0E:B6:1A:0D:E7:AE
Authority key identifier: 1B:CA:A8:3F:C9:A4:10:BD:B3:E0:FD:2D:84:87:20:13:47:71:BE:CF
Certificate issuer:       /CN=1bcaa83fc9a410bdb3e0fd2d848720134771becf
Certificate serial:       01963EE725519C29CBE57CA9D10D2133DB4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
Manifest number:          1480
Signing time:             Wed 16 Apr 2025 14:00:57 +0000
Manifest this update:     Wed 16 Apr 2025 14:00:57 +0000
Manifest next update:     Thu 17 Apr 2025 14:00:57 +0000
Files and hashes:         1: G8qoP8mkEL2z4P0thIcgE0dxvs8.crl (hash: trtvWVB0i7xTkV0C5O1S5Q9GRwLUY2qaq6Vzn8KZiLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:e7:25:51:9c:29:cb:e5:7c:a9:d1:0d:21:33:db:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bcaa83fc9a410bdb3e0fd2d848720134771becf
        Validity
            Not Before: Apr 16 14:00:57 2025 GMT
            Not After : Apr 17 14:00:57 2025 GMT
        Subject: CN=8b7e05b8d526adc39e08ddd0f2b70eb61a0de7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9c:53:ca:eb:17:4e:9f:51:fb:dd:11:54:60:
                    5c:a4:b3:d5:36:9d:11:e4:5b:c3:e0:8f:42:d2:4e:
                    ec:c9:83:45:68:6d:92:09:db:fd:44:6b:75:cf:fe:
                    cb:06:ff:78:05:9b:8a:38:2c:cb:45:69:4a:a9:ef:
                    a9:9c:df:51:67:9d:b4:a2:42:1c:31:a5:b8:8c:92:
                    19:2b:b7:3d:7b:46:62:f1:a4:0f:42:ef:3d:35:a4:
                    25:ca:c9:92:aa:85:0d:cc:c0:c9:79:13:6a:4f:2b:
                    f8:40:26:20:1d:8c:85:de:55:3c:43:fa:56:23:7d:
                    1e:9d:b4:44:16:95:93:4a:60:39:f3:3c:1b:a8:3c:
                    32:9e:55:93:8b:8e:4f:d7:9f:0d:9e:b7:0e:84:0a:
                    48:db:ee:b2:46:dc:c3:f3:2c:c3:60:48:13:0c:a4:
                    08:f4:c9:10:d5:52:0f:95:c6:c0:c1:67:d2:ff:25:
                    3c:d9:e6:5e:d4:4a:6e:b6:e1:16:27:b9:45:34:04:
                    ac:21:5d:93:9f:ad:62:df:e9:bb:aa:42:d7:f6:6a:
                    2d:c3:6b:94:45:6d:2c:35:fe:bf:54:af:78:9c:bd:
                    0d:f8:40:86:60:a5:cc:e3:65:e5:39:52:ab:53:33:
                    12:73:f9:be:9b:f3:d5:80:0b:f9:36:66:f9:ac:3c:
                    27:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7E:05:B8:D5:26:AD:C3:9E:08:DD:D0:F2:B7:0E:B6:1A:0D:E7:AE
            X509v3 Authority Key Identifier:
                keyid:1B:CA:A8:3F:C9:A4:10:BD:B3:E0:FD:2D:84:87:20:13:47:71:BE:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:e4:40:40:05:ea:67:9b:e3:7b:9f:ef:e9:37:9c:bb:b6:35:
         22:38:81:ee:a8:bc:e5:75:3f:93:8c:a8:9d:aa:a2:29:0b:4d:
         78:d1:40:64:12:a6:a2:7e:fa:a5:b1:ed:85:22:3b:20:36:b1:
         c5:e6:c6:bf:5b:1a:7f:1f:58:7a:53:ec:d9:db:28:06:6c:0e:
         b7:7d:29:f0:1d:eb:a1:ac:78:d3:2e:33:b0:08:af:94:af:91:
         f3:08:a2:28:41:cc:63:fb:41:52:3f:b5:12:8a:9d:f6:77:16:
         19:3e:b6:36:7d:dd:0a:b2:62:d0:66:a1:89:96:c3:ae:29:f5:
         ba:a0:fc:00:4e:fb:72:60:ba:37:04:8e:fa:0a:b0:22:e6:0a:
         f7:f0:de:a5:e0:cc:3a:da:3d:ca:79:7d:bf:3c:98:37:10:0f:
         27:8e:f1:cc:72:c7:d6:c0:01:1c:49:35:5b:2d:98:e5:cc:df:
         74:d0:2d:c9:5c:d1:44:a7:52:f8:4b:e5:74:e7:c2:19:6a:21:
         99:5f:67:eb:fb:91:b3:b2:21:bb:78:0e:dd:2e:ba:e2:11:4d:
         3c:cc:43:46:4c:59:88:48:bb:9f:9f:ab:8f:a3:38:78:f3:46:
         d9:cd:5c:83:f5:60:6f:54:d5:40:cd:b6:95:24:56:1d:50:a8:
         cf:f6:8d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:42:29 2025 by rpki-client