Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
File:                     gqSUodrlSHPfot61bQMTNAdqyVs.mft (raw, json)
Hash identifier:          G1j7cuKO4T8eX38jWwOnkDHyL7amPhUzR0yyB+8/Ax0=
Subject key identifier:   10:EA:46:E4:91:C2:A5:14:7B:E0:0E:40:4D:3A:30:16:37:13:E3:92
Authority key identifier: 82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B
Certificate issuer:       /CN=82a494a1dae54873dfa2deb56d031334076ac95b
Certificate serial:       01963EAFC7984E6FD62B9F2F3B0E5EC6C769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
Manifest number:          069D
Signing time:             Wed 16 Apr 2025 13:00:29 +0000
Manifest this update:     Wed 16 Apr 2025 13:00:29 +0000
Manifest next update:     Thu 17 Apr 2025 13:00:29 +0000
Files and hashes:         1: gqSUodrlSHPfot61bQMTNAdqyVs.crl (hash: RyxIV2Au2xj3AR7QivaKrziNMBCfhYLMteUvH10Ie3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:af:c7:98:4e:6f:d6:2b:9f:2f:3b:0e:5e:c6:c7:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a494a1dae54873dfa2deb56d031334076ac95b
        Validity
            Not Before: Apr 16 13:00:29 2025 GMT
            Not After : Apr 17 13:00:29 2025 GMT
        Subject: CN=10ea46e491c2a5147be00e404d3a30163713e392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:28:7a:06:a5:6e:d5:c0:32:ef:15:55:4e:c6:
                    5f:8f:88:c7:2a:dd:e9:40:05:a2:fe:28:77:9f:4e:
                    c3:b8:34:c0:74:de:5e:4a:1a:a1:a7:81:40:de:0c:
                    13:e0:66:d3:78:0e:f9:3c:d2:c1:7f:32:62:3d:37:
                    fa:d1:dc:36:0f:39:84:58:97:11:40:3d:fb:4a:30:
                    84:3f:59:53:2a:c1:ab:be:7a:aa:72:21:12:fc:2a:
                    e6:63:7f:0b:ed:dc:ba:3e:3b:f7:ba:45:89:5f:de:
                    c0:4f:64:c7:c5:dc:4a:3b:03:97:6f:36:3a:e8:b2:
                    53:3a:49:a4:0a:4c:f5:e3:31:ca:e9:9f:12:83:58:
                    59:7e:b7:8f:6f:8e:6c:0e:72:c9:da:06:90:3c:69:
                    d8:e8:c9:df:7b:2c:ad:15:95:48:88:50:b0:2b:39:
                    cd:36:58:03:12:29:26:93:82:63:1e:2e:c8:8a:06:
                    c2:f1:2b:7d:ec:fd:b7:18:b0:6e:62:3e:e9:aa:58:
                    ed:dc:71:6e:cb:58:67:63:a9:a0:02:77:80:09:d5:
                    5b:79:06:44:a0:a5:6b:6d:0b:c5:01:06:38:74:99:
                    11:47:4a:ab:a5:ce:fd:58:97:48:af:10:b5:ee:65:
                    e5:ba:e2:c0:3c:d7:89:08:b4:8d:ba:f8:a2:3b:08:
                    8a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EA:46:E4:91:C2:A5:14:7B:E0:0E:40:4D:3A:30:16:37:13:E3:92
            X509v3 Authority Key Identifier:
                keyid:82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:43:48:22:05:18:4c:41:db:ac:5c:30:a4:e1:f4:1d:a9:22:
         36:ec:67:1e:af:6e:29:67:b1:e4:21:5f:47:83:a8:17:7b:86:
         95:b7:75:b2:c1:22:26:d0:82:55:a2:c7:35:4b:f6:37:df:6c:
         b7:8e:58:ab:8f:cd:08:95:f5:55:41:74:2b:19:a1:c1:fe:62:
         58:93:22:bb:44:bf:a8:4e:72:7e:5f:ff:0e:c2:ec:33:da:71:
         1c:62:85:89:d3:85:f5:9d:8e:5f:df:e3:f8:ae:e0:99:0a:e4:
         ae:01:a7:19:cf:91:be:72:f4:13:31:98:e6:02:78:0e:57:ba:
         83:9c:bc:5b:b6:d9:b2:2f:4f:0a:be:5e:ff:21:69:f6:54:4b:
         5b:fe:42:c9:7b:d8:77:f8:d5:84:3c:94:39:36:62:89:aa:d3:
         9e:86:9f:60:46:39:f2:05:e8:65:e2:1e:c6:0f:4a:09:8a:d4:
         4c:a1:37:1b:2e:6d:df:43:30:63:5a:f8:8c:0b:a2:99:ea:ba:
         5b:96:96:35:f5:25:cb:e6:d1:76:cb:eb:c7:c5:10:6d:0e:ed:
         77:cc:c8:45:c1:28:94:87:f7:9a:e3:73:02:a4:70:d2:05:79:
         71:30:40:e8:86:51:33:57:ac:87:b4:31:0b:8f:c7:ed:ce:7b:
         30:2c:77:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:19:12 2025 by rpki-client