Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
File:                     Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft (raw, json)
Hash identifier:          ds9B5oDRRv5TvTE0DZYH6tdmXAQN2w8u3MnDRvcdGpI=
Subject key identifier:   76:66:75:EE:96:47:04:3C:84:27:15:75:1D:73:CF:EC:6A:0F:7C:79
Authority key identifier: 1A:F9:1D:CE:DF:DE:FD:CE:59:BD:B0:50:02:B1:CB:6C:52:F0:C5:D3
Certificate issuer:       /CN=1af91dcedfdefdce59bdb05002b1cb6c52f0c5d3
Certificate serial:       019612B39FB9DD9C76D39C1E25F70827BB60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
Manifest number:          14D8
Signing time:             Tue 08 Apr 2025 00:01:23 +0000
Manifest this update:     Tue 08 Apr 2025 00:01:23 +0000
Manifest next update:     Wed 09 Apr 2025 00:01:23 +0000
Files and hashes:         1: Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl (hash: nRNTtC+FTbnEaOnn7MbptaY5ETQKmJuheQjhYaZmFL4=)
                          2: ttZNv6l1EeF-xiTWTGqQIM7MdNI.roa (hash: 7CYeRmxgoUhsy4kTyySHz2v5rlglnUVr1BYD9Sp0a6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 23:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:12:b3:9f:b9:dd:9c:76:d3:9c:1e:25:f7:08:27:bb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1af91dcedfdefdce59bdb05002b1cb6c52f0c5d3
        Validity
            Not Before: Apr  8 00:01:23 2025 GMT
            Not After : Apr  9 00:01:23 2025 GMT
        Subject: CN=766675ee9647043c842715751d73cfec6a0f7c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5e:3a:3b:e8:b7:53:c0:b9:5d:6a:95:d3:80:
                    24:d8:18:e4:05:c9:b0:71:89:a1:6b:00:35:81:30:
                    01:1a:11:2c:45:7a:30:e0:87:4c:00:e8:5d:db:bf:
                    99:53:f3:09:84:af:d6:96:7b:10:b0:05:77:81:ad:
                    7a:1e:63:7c:1b:7a:55:10:91:b8:f1:e1:8a:a7:85:
                    b5:45:10:dc:88:27:21:7e:f0:24:ac:67:19:cc:5a:
                    12:07:01:8c:40:9a:55:de:18:93:f0:4e:aa:cf:38:
                    c1:3d:a0:77:c2:68:8f:30:31:26:0d:f0:07:31:81:
                    79:45:e4:75:d4:60:c1:3b:af:64:a1:c4:5c:10:9e:
                    e0:d9:92:32:98:23:89:27:3d:b3:61:ef:d6:ae:20:
                    7d:9d:31:0e:b9:0d:5a:7a:f4:de:c7:49:bc:56:23:
                    78:9e:cc:ba:a9:a7:cf:a1:53:ce:e9:40:23:18:60:
                    6a:e5:42:bd:53:f6:c6:39:13:9f:39:1b:bc:d1:dd:
                    15:e9:e9:cd:e8:a6:9f:bd:b4:f6:fb:22:e0:4c:23:
                    f8:7d:76:72:f7:fe:de:fc:6a:73:f2:94:4b:16:66:
                    57:ae:78:2a:02:2c:84:88:8d:67:28:8d:e4:b1:70:
                    37:f0:2a:c4:e7:b3:8a:ea:74:47:41:dc:27:e0:0d:
                    12:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:66:75:EE:96:47:04:3C:84:27:15:75:1D:73:CF:EC:6A:0F:7C:79
            X509v3 Authority Key Identifier:
                keyid:1A:F9:1D:CE:DF:DE:FD:CE:59:BD:B0:50:02:B1:CB:6C:52:F0:C5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:19:1a:01:1a:01:0c:60:aa:f5:da:44:04:f8:d0:64:b1:eb:
         e8:3e:fe:99:fb:95:67:e3:eb:2b:6e:28:c7:ff:79:62:fc:4f:
         72:2e:bb:06:1d:7f:8c:5e:33:46:23:9d:03:61:1e:d6:74:32:
         79:f8:41:cf:04:16:44:99:66:a3:81:da:e2:d4:01:ca:9e:fa:
         8a:fb:43:8f:66:af:b3:ff:ce:f6:32:c2:7f:12:a7:8a:b8:94:
         9d:c2:8a:99:28:e0:3f:67:13:dd:39:75:4f:e9:58:c6:be:7a:
         d9:b6:f6:99:de:d2:98:4d:66:04:85:ce:44:9f:74:6d:74:bc:
         f0:51:24:70:d9:77:24:2b:de:c7:0e:90:d7:04:8e:45:2a:4b:
         05:75:ec:cf:32:82:13:9c:a4:62:60:cf:0d:cc:df:0e:2d:c1:
         0a:78:f6:aa:5f:bc:52:55:d6:88:7f:03:40:02:be:2f:f0:78:
         38:e1:cb:c6:9e:9b:43:84:40:bf:bc:6f:52:b2:42:6b:15:3d:
         64:07:ce:27:cd:75:57:4b:ac:d6:fe:41:2a:da:e3:6d:6c:f0:
         3a:db:c1:b1:6d:07:cc:94:b1:98:de:72:32:d7:5b:18:cb:a6:
         06:98:65:9e:97:83:a6:ec:3e:5a:0b:20:e8:83:2b:c7:ce:f6:
         e4:92:d2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:53:38 2025 by rpki-client