Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
File:                     GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft (raw, json)
Hash identifier:          l2E8oz68cLQpD5lJuXXNvNQ8kVObS1D+qPmnRdda3DI=
Subject key identifier:   4E:40:4D:75:F1:29:6B:98:06:40:A5:89:11:2C:5C:17:14:71:4C:FC
Authority key identifier: 18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8
Certificate issuer:       /CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
Certificate serial:       0194BB602E43DE8F60F5D3A2251AED0277A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
Manifest number:          07AE
Signing time:             Fri 31 Jan 2025 08:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:30 +0000
Files and hashes:         1: GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl (hash: XhyQ5fnPzVlwBTQCZZAyyb1IKt5l4leFx6iWSMEfZdg=)
                          2: ZnGF6W1D3X-NrkNFr6eImmQhdy8.roa (hash: Bt9KY5B97syBzqVEmQ0mMOoNBbtJyQudj313FGbVLOw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:2e:43:de:8f:60:f5:d3:a2:25:1a:ed:02:77:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
        Validity
            Not Before: Jan 31 08:00:30 2025 GMT
            Not After : Feb  1 08:00:30 2025 GMT
        Subject: CN=4e404d75f1296b980640a589112c5c1714714cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c4:2a:66:7d:c1:47:07:93:71:54:08:b4:b5:
                    24:bf:af:1f:29:fe:4a:e6:3d:6c:e0:0e:bc:b6:e3:
                    1e:18:fb:26:fc:77:c9:4b:b3:6d:8f:a9:7b:49:bb:
                    eb:26:56:04:ea:20:82:8c:2d:c9:64:2d:a6:24:c4:
                    d5:38:7f:55:14:6b:8d:ee:6d:5a:27:cd:af:e1:49:
                    ff:2b:39:b0:d5:18:4d:9e:55:28:34:74:db:df:47:
                    13:41:d2:86:f3:85:4e:32:be:22:aa:9e:47:17:c0:
                    19:f3:c9:8d:03:98:3d:2c:07:6f:2b:89:44:98:5b:
                    1d:8c:e3:73:00:39:6e:0f:52:30:f3:9c:ea:dc:83:
                    99:80:4f:25:fc:19:bc:2b:34:2a:7c:2e:58:84:d6:
                    c5:ff:a6:8b:40:3f:3c:f0:1d:47:71:fa:91:4a:9e:
                    9d:20:ea:92:57:24:2c:17:46:3e:cd:9c:27:ea:fe:
                    63:92:09:ba:d5:8f:8a:ab:8d:08:c5:4d:8d:d0:0d:
                    d7:15:fb:dd:65:fa:66:6b:63:59:8d:33:95:30:43:
                    5e:c0:15:79:34:b2:4a:2a:8b:74:70:c9:e0:45:8a:
                    ff:92:22:92:1f:74:4d:a9:e6:2a:0a:cd:30:fe:1d:
                    87:65:b6:e2:e2:01:ae:52:c7:5f:16:7f:b8:40:8f:
                    ab:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:40:4D:75:F1:29:6B:98:06:40:A5:89:11:2C:5C:17:14:71:4C:FC
            X509v3 Authority Key Identifier:
                keyid:18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:4e:0e:c6:1d:dc:a5:5b:95:81:d3:76:bb:4d:36:df:f0:59:
         a8:2d:7a:02:82:ec:d9:60:3d:49:d2:c6:f5:41:97:8e:2c:24:
         87:56:2a:b2:70:3a:ef:a1:49:e5:4b:ca:97:0e:5b:29:c9:4d:
         d9:51:f9:06:d8:1b:c2:38:d0:85:d7:75:6e:37:2e:9c:fa:fb:
         78:53:11:66:d5:e5:37:ed:8e:43:e2:cc:22:77:2f:16:90:35:
         cb:bf:4f:db:bc:c5:5d:3f:d0:9e:09:96:22:af:d9:5b:d3:ce:
         91:03:3f:0f:7b:00:95:1e:8d:16:1a:68:91:75:70:20:c8:9e:
         e1:a0:4b:c6:52:9e:d6:89:4b:f7:cf:35:6e:c8:36:58:2b:41:
         06:a1:2e:72:bb:84:d7:36:0a:a5:2e:fd:10:b3:be:13:43:55:
         1b:6e:9a:52:9c:82:35:27:2a:cd:9a:c9:0e:92:b1:36:2e:90:
         4e:c1:4e:75:7b:4f:e5:90:c2:a3:a7:22:c6:a4:83:5a:1c:83:
         f3:ce:6a:ae:cc:c2:81:33:40:cb:8f:7e:b8:d9:dd:02:fa:aa:
         6f:1d:fa:67:0b:30:4f:cf:c3:31:8a:01:5c:0d:c0:09:86:e3:
         d4:e1:67:b2:55:b9:28:99:36:72:91:d1:a6:a9:37:33:3b:e8:
         d3:99:bb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:20 2025 by rpki-client on console-fra.rpki-client.org