Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
File:                     GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft (raw, json)
Hash identifier:          9ORwfiPZbNNN0ZbxD5aM8Dn+tRrgms7apzq/tILWFiU=
Subject key identifier:   FF:38:D7:04:BD:C7:5E:7F:72:F8:B6:D7:A0:76:14:97:F8:0A:E6:40
Authority key identifier: 19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A
Certificate issuer:       /CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
Certificate serial:       019644E8A5DC2D1BFA34F05BB6C111D056D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
Manifest number:          0312
Signing time:             Thu 17 Apr 2025 18:00:19 +0000
Manifest this update:     Thu 17 Apr 2025 18:00:19 +0000
Manifest next update:     Fri 18 Apr 2025 18:00:19 +0000
Files and hashes:         1: GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl (hash: wZySPifFq0Y9LAnt26rpn1N44DuMKscHiT16VNkq7lM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:e8:a5:dc:2d:1b:fa:34:f0:5b:b6:c1:11:d0:56:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
        Validity
            Not Before: Apr 17 18:00:19 2025 GMT
            Not After : Apr 18 18:00:19 2025 GMT
        Subject: CN=ff38d704bdc75e7f72f8b6d7a0761497f80ae640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e4:2e:9e:75:42:2d:aa:2d:76:13:92:56:bc:
                    a6:2c:a6:2e:14:f0:c5:0f:e3:c4:9a:8a:d4:dd:74:
                    48:07:a8:9c:92:1f:ad:46:ee:bd:0e:f4:f1:c1:27:
                    f0:a6:d7:ad:b1:72:01:a2:0a:59:8b:bb:74:81:6f:
                    51:2f:b0:b9:a6:ee:f2:09:42:15:64:2d:9a:03:e7:
                    88:46:2f:13:a4:7c:e0:0e:b5:bb:64:36:06:cc:c9:
                    d0:16:0c:a8:01:95:91:b2:f1:c7:3a:84:0c:b2:ac:
                    42:d1:3c:3f:ee:e4:36:63:7e:1e:42:4f:7d:f9:11:
                    5b:f3:18:aa:e3:92:60:bd:67:f8:4f:0e:67:67:bf:
                    bd:aa:d8:cf:b9:91:4a:30:2f:36:07:b5:b5:56:ab:
                    93:9b:cb:c5:ec:83:b6:43:67:57:74:64:fd:02:e4:
                    61:ea:7f:01:50:bb:5e:b7:ef:da:66:59:62:7d:c4:
                    69:eb:5b:98:5b:43:5d:c5:e4:9d:f3:5d:c9:f2:6e:
                    d5:2a:93:41:d6:38:6b:de:0c:3b:ba:78:e1:16:07:
                    ab:8d:c0:00:f9:5e:c0:06:54:8a:47:99:3b:87:ae:
                    85:0f:03:ca:37:50:45:d8:3d:a9:97:bc:8b:b5:54:
                    65:93:fe:1b:0c:13:f5:d4:87:5c:b3:9e:d8:10:bc:
                    4f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:38:D7:04:BD:C7:5E:7F:72:F8:B6:D7:A0:76:14:97:F8:0A:E6:40
            X509v3 Authority Key Identifier:
                keyid:19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:58:c0:08:f4:06:dd:4c:66:d6:7a:dd:f8:4e:8f:f3:a7:8c:
         ef:64:e3:14:0f:e2:f5:ad:6a:b4:a2:13:c3:00:1a:5c:f8:77:
         81:2e:42:a4:0e:45:4a:48:31:06:71:d1:8d:03:ac:68:f7:d4:
         57:4f:c9:2d:99:0c:fb:18:4a:d0:92:f0:46:65:7e:cd:ae:2f:
         b1:0f:e2:d1:82:ce:bf:54:37:8b:f8:e2:f8:ea:cd:45:4b:e7:
         34:ff:65:3a:7f:b0:ff:ad:7d:c6:81:55:c8:60:aa:94:ca:a6:
         92:14:4d:8d:26:a0:1d:0d:3b:d2:d4:f3:21:2c:a7:fb:44:b2:
         f5:ef:ba:bf:56:d0:38:b2:d4:44:33:93:23:d5:f3:2a:f6:48:
         9b:b0:61:46:ac:52:3c:d9:95:55:9f:79:f0:7c:01:4a:35:61:
         60:c0:14:3a:2b:71:bc:46:cc:5b:e6:fd:d5:48:cf:b2:16:d2:
         05:59:5c:d3:3f:aa:dd:9b:9d:c6:97:a7:e1:78:a0:ce:0f:b4:
         26:bd:5e:72:d0:06:3e:e8:12:6f:37:a0:a6:d9:57:07:3c:76:
         ce:b5:4e:5f:b6:9e:08:ef:54:a9:90:9a:07:ee:31:0b:09:c9:
         92:57:8d:cd:03:42:59:61:9d:6c:5d:99:ff:fc:60:3c:5d:3b:
         f2:b5:fc:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZE6KXcLRv6NPBbtsER0FbTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NWZhODMzMDI1MmEwN2YyNTBlNTFkOGU0NzRiYjM4ZDdk
YzNiOWEwHhcNMjUwNDE3MTgwMDE5WhcNMjUwNDE4MTgwMDE5WjAzMTEwLwYDVQQD
EyhmZjM4ZDcwNGJkYzc1ZTdmNzJmOGI2ZDdhMDc2MTQ5N2Y4MGFlNjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OQunnVCLaotdhOSVrymLKYuFPDF
D+PEmorU3XRIB6ickh+tRu69DvTxwSfwptetsXIBogpZi7t0gW9RL7C5pu7yCUIV
ZC2aA+eIRi8TpHzgDrW7ZDYGzMnQFgyoAZWRsvHHOoQMsqxC0Tw/7uQ2Y34eQk99
+RFb8xiq45JgvWf4Tw5nZ7+9qtjPuZFKMC82B7W1VquTm8vF7IO2Q2dXdGT9AuRh
6n8BULtet+/aZllifcRp61uYW0NdxeSd813J8m7VKpNB1jhr3gw7unjhFgerjcAA
+V7ABlSKR5k7h66FDwPKN1BF2D2pl7yLtVRlk/4bDBP11Idcs57YELxPcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP841wS9x15/cvi216B2FJf4CuZAMB8GA1UdIwQY
MBaAFBlfqDMCUqB/JQ5R2OR0uzjX3DuaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1Ytb013SlNvSDhsRGxIWTVIUzdPTmZjTzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9lOWIwZTAtZjRiNi00NmRhLWFmZjgt
YmU3MDg3ZGJmNTM2LzEvR1Ytb013SlNvSDhsRGxIWTVIUzdPTmZjTzVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9lOWIwZTAtZjRiNi00NmRhLWFmZjgtYmU3MDg3ZGJmNTM2
LzEvR1Ytb013SlNvSDhsRGxIWTVIUzdPTmZjTzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVjACPQG
3Uxm1nrd+E6P86eM72TjFA/i9a1qtKITwwAaXPh3gS5CpA5FSkgxBnHRjQOsaPfU
V0/JLZkM+xhK0JLwRmV+za4vsQ/i0YLOv1Q3i/ji+OrNRUvnNP9lOn+w/619xoFV
yGCqlMqmkhRNjSagHQ070tTzISyn+0Sy9e+6v1bQOLLURDOTI9XzKvZIm7BhRqxS
PNmVVZ958HwBSjVhYMAUOitxvEbMW+b91UjPshbSBVlc0z+q3Zudxpen4Xigzg+0
Jr1ectAGPugSbzegptlXBzx2zrVOX7aeCO9UqZCaB+4xCwnJkleNzQNCWWGdbF2Z
//xgPF078rX8tA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:47 2025 by rpki-client