Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
File:                     GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft (raw, json)
Hash identifier:          trSiXWooII1iYCFT5U4yJ6mVz5avN9WWkwyzQQ47EpA=
Subject key identifier:   FA:D5:64:15:A8:4A:CC:15:73:2B:64:7E:6B:08:30:2E:5B:B6:CF:0F
Authority key identifier: 18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
Certificate issuer:       /CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Certificate serial:       019510C78386F866C5C9E2C7DBEE10DAFE87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
Manifest number:          1457
Signing time:             Sun 16 Feb 2025 22:01:05 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:05 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:05 +0000
Files and hashes:         1: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl (hash: R2drUv/hSJ4bA/Op4nxZY2BFupqBABHQiL+8IsqCM8A=)
                          2: YuDsO55F13UZ0cxSF251Oa2EzOk.roa (hash: E2zFm6YI+MUI5s6ZcM5A4TjlG7YlaadinjimTXzpUsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:83:86:f8:66:c5:c9:e2:c7:db:ee:10:da:fe:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
        Validity
            Not Before: Feb 16 22:01:05 2025 GMT
            Not After : Feb 17 22:01:05 2025 GMT
        Subject: CN=fad56415a84acc15732b647e6b08302e5bb6cf0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b5:0a:06:b0:6f:d4:34:2d:2a:13:ba:0f:01:
                    50:5f:c5:3c:1f:eb:9b:07:7e:51:4d:71:c0:e7:16:
                    e7:88:37:19:c5:61:a9:69:35:b2:47:12:3f:88:03:
                    e6:80:a5:1d:fa:43:5d:35:b0:b0:4b:be:a8:82:f1:
                    35:fa:e6:0f:f7:20:f5:b0:b6:a7:96:21:6a:8c:1e:
                    b9:fb:6a:84:73:3f:d2:c0:74:1b:8a:10:a8:b4:14:
                    9f:89:f5:a9:a7:04:a1:b6:a7:fc:0c:de:d4:a6:ec:
                    81:df:b0:9b:26:2c:8d:88:47:f8:cf:05:0b:a4:94:
                    3a:73:10:e9:2d:db:9f:0c:98:ee:67:2e:4c:c0:d7:
                    ef:a3:ba:78:48:79:73:7a:6d:83:91:7e:ca:35:bf:
                    da:b1:3f:25:a9:6e:b3:55:03:1b:8d:58:d0:2c:53:
                    5b:34:42:16:7e:52:11:fc:92:70:c1:5c:5e:6e:9c:
                    60:00:7a:fe:64:2c:f6:63:41:8c:fc:28:a9:f4:94:
                    c7:2b:0e:11:7d:08:bb:a5:b2:37:0b:fe:a5:58:db:
                    c6:ff:b8:76:cd:66:54:b3:7a:24:f0:1f:09:37:2f:
                    3c:50:54:17:76:33:3e:a3:8e:52:55:c6:46:5f:e0:
                    ef:d5:16:ed:22:57:a6:87:10:29:d8:d3:d7:e2:5e:
                    87:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D5:64:15:A8:4A:CC:15:73:2B:64:7E:6B:08:30:2E:5B:B6:CF:0F
            X509v3 Authority Key Identifier:
                keyid:18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:73:7a:61:a6:07:6e:5b:cd:bf:60:a8:d5:ee:01:a4:fd:39:
         82:71:7d:f8:5b:d1:35:0f:28:11:f8:d3:e6:8a:4d:83:2c:45:
         97:8b:ed:3e:16:3b:8f:b7:b9:37:1c:db:2f:24:50:95:32:f3:
         af:10:3c:cd:91:e7:7c:ff:47:cf:dd:14:be:0a:47:6d:ce:aa:
         34:ec:34:98:78:d8:b3:48:a6:18:6d:37:08:7f:27:9f:58:fa:
         cc:a0:5f:37:4e:5d:98:14:cb:59:b8:d9:e1:a7:b7:99:d3:91:
         96:8b:dc:3e:d9:8c:29:a9:27:b8:a6:e4:9e:4d:1e:4c:ad:4d:
         8d:95:aa:86:c4:4e:d8:22:c9:51:d3:48:80:d7:ed:8f:4f:6e:
         91:ab:b8:f7:8e:cc:d5:90:91:c2:7f:e4:c5:47:73:7c:0f:43:
         13:2d:00:2e:00:22:bb:8d:6e:fd:ea:9d:af:10:29:b2:50:ed:
         cf:7a:1e:2b:e9:41:8d:cb:ad:61:e9:17:cd:47:ca:8a:31:f1:
         a1:22:6b:51:16:ae:ec:49:22:07:69:18:41:7f:6b:ba:10:69:
         ed:46:c3:cd:02:7c:9c:57:ac:6c:74:f6:67:6e:e6:11:c5:47:
         a9:9c:2f:d9:1d:df:bf:51:c0:96:95:7d:52:73:02:fe:1e:20:
         61:01:fe:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:45 2025 by rpki-client