Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
File:                     Goed4cdfu9LDHR2QgUBW8n1X13Y.mft (raw, json)
Hash identifier:          aXgw4Ccq03JV4tsewmJdAWfLZsLZJSynrh7nqBAqyXM=
Subject key identifier:   F0:60:B4:AC:06:3F:C2:5F:D4:8C:4D:7B:1B:FD:58:74:4A:93:3E:37
Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
Certificate issuer:       /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Certificate serial:       01964F6CC19FB26C6A5D7835600D6B1A8B05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
Manifest number:          14FB
Signing time:             Sat 19 Apr 2025 19:00:49 +0000
Manifest this update:     Sat 19 Apr 2025 19:00:49 +0000
Manifest next update:     Sun 20 Apr 2025 19:00:49 +0000
Files and hashes:         1: Goed4cdfu9LDHR2QgUBW8n1X13Y.crl (hash: M59lqpsxsWMjR415iF9HYlD08okXCO5G5p8wnLqCjT8=)
                          2: SY-aLuRiAgoWaZ-G7IiNuENAxfA.roa (hash: FJ99//JtNMttiwoypIrlcD1qx1Pik8unMC0r91//nuo=)
                          3: V7vJK1PzSdzcivTHP2kjHgag3Cc.roa (hash: OnLS3rg6t36BwcZTS3yV6qxgn2/9ln9WoFUEiCOulgw=)
                          4: umrbROcVD8F_XU1iMMOs7YeDor4.roa (hash: OZEW+D1b6/plYCkSsv4RF+haf9Cmn+tdLrcmbAbfFig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6c:c1:9f:b2:6c:6a:5d:78:35:60:0d:6b:1a:8b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
        Validity
            Not Before: Apr 19 19:00:49 2025 GMT
            Not After : Apr 20 19:00:49 2025 GMT
        Subject: CN=f060b4ac063fc25fd48c4d7b1bfd58744a933e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c0:ff:fc:96:3e:9f:65:31:41:6b:f9:c1:47:
                    1e:81:a3:47:ce:90:3c:b2:8c:f9:9a:f5:d8:0c:20:
                    d5:d2:35:f9:3c:7b:47:14:11:02:1a:89:92:1f:7d:
                    de:89:c8:da:40:64:76:59:02:0f:7c:00:2d:55:32:
                    10:5f:0d:67:c5:9c:09:ba:a9:12:42:33:de:a0:dd:
                    a4:e1:f4:6c:03:7a:32:3b:b7:73:e0:2a:1c:7a:2c:
                    f9:28:e7:c4:88:a6:bb:11:51:34:f2:8e:29:33:d6:
                    3d:39:1a:33:a3:52:27:ab:3e:20:87:94:fb:6f:f7:
                    8a:32:e5:0b:06:04:ed:ac:f6:7c:f4:80:94:4a:54:
                    2c:d5:15:e0:31:86:53:2b:a4:84:ed:9f:98:b1:d7:
                    dd:5a:06:75:9f:1e:c2:12:c2:d1:c0:f4:47:ed:88:
                    bc:96:99:18:98:68:81:e4:8e:ba:f6:72:31:9f:07:
                    51:3a:2b:e9:1b:e4:3a:4e:a6:e3:cd:9d:eb:27:5b:
                    28:19:4b:35:1e:3b:f9:dd:59:62:a8:5c:97:83:b4:
                    ef:f8:f7:8d:c2:05:1c:3c:45:3c:3a:09:72:9a:4a:
                    1d:22:d7:ca:e5:45:bf:dd:50:8f:7e:d9:91:d6:02:
                    3b:2c:37:2b:17:13:48:c4:0f:50:2c:a6:10:b9:24:
                    94:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:60:B4:AC:06:3F:C2:5F:D4:8C:4D:7B:1B:FD:58:74:4A:93:3E:37
            X509v3 Authority Key Identifier:
                keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:68:a3:08:76:49:fb:12:1e:c2:f6:b8:3a:0a:37:73:30:52:
         51:05:37:a2:a7:62:37:7b:70:cf:15:2d:25:6e:cc:85:94:75:
         ad:88:fa:7d:fe:57:08:cd:31:94:e7:ab:17:54:47:f8:0c:8d:
         8e:6e:eb:19:af:cf:81:1a:ad:50:78:e4:45:07:8b:51:eb:49:
         52:53:4d:e0:a1:60:bd:ec:51:d0:97:bd:04:a2:cd:af:b0:06:
         40:57:47:28:89:02:c9:f0:8b:b5:e4:b6:16:87:e0:05:02:a9:
         d4:44:c4:b0:8e:24:ac:a4:2a:80:73:e9:ef:ad:0b:1f:63:c0:
         20:4d:36:9f:1f:37:3e:67:80:e5:f9:70:6a:5e:19:4c:45:84:
         e4:0b:92:6b:b4:2c:5e:56:b2:52:9e:12:e1:46:34:14:73:a6:
         9c:9f:a6:55:d9:2a:c1:e2:e3:12:04:bd:b4:f8:a6:3d:25:bb:
         25:1e:22:b9:55:ce:d5:ec:44:71:fd:44:2c:89:78:2a:5e:0f:
         91:e3:08:ee:1a:c1:f0:12:e4:10:34:25:7d:b4:35:f7:56:16:
         00:78:b4:64:44:fb:f0:75:e6:bb:e5:06:78:9e:24:88:8d:fd:
         9d:1f:0a:f1:73:22:9e:ff:8b:ca:4a:db:97:52:bc:af:ed:89:
         50:a5:8b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:28 2025 by rpki-client