Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
File:                     gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft (raw, json)
Hash identifier:          +VQaBxhdqW28N1Xbnzpb2VPZ/pE25ABq3eQPFr3hUTg=
Subject key identifier:   19:27:02:11:AB:99:3B:4A:7A:01:29:B9:2A:63:58:66:F4:E3:29:35
Authority key identifier: 80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C
Certificate issuer:       /CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
Certificate serial:       0195116BBB8CD14E0003E0B653A308455ECE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
Manifest number:          0FF6
Signing time:             Mon 17 Feb 2025 01:00:27 +0000
Manifest this update:     Mon 17 Feb 2025 01:00:27 +0000
Manifest next update:     Tue 18 Feb 2025 01:00:27 +0000
Files and hashes:         1: gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl (hash: 8lE3qG9Cjd/g7cwwrggy+PZy7c1gcRMgKqsAurfZGfw=)
                          2: iR_ztCB6R1k94ApZF9GyNibhF8I.roa (hash: YgaarQK+xvFmoK9MLi28PlE1obREeY36cujrYCHGRgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:6b:bb:8c:d1:4e:00:03:e0:b6:53:a3:08:45:5e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
        Validity
            Not Before: Feb 17 01:00:27 2025 GMT
            Not After : Feb 18 01:00:27 2025 GMT
        Subject: CN=19270211ab993b4a7a0129b92a635866f4e32935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c0:27:b0:18:c3:0a:3d:cc:5b:8c:3f:af:fc:
                    29:be:cc:5c:07:89:6b:96:78:da:d9:56:eb:dd:fe:
                    8f:28:bc:4e:b7:5d:02:fb:f7:6b:96:88:9e:cb:70:
                    b0:5d:e5:ea:22:7d:b3:5d:a8:b1:18:58:9b:93:1d:
                    d7:1a:4b:0b:60:00:ab:2e:0f:c1:07:6c:e4:c4:86:
                    aa:73:59:ee:86:83:d6:bb:fe:9c:97:86:7e:37:da:
                    c4:c3:df:66:41:ef:fe:be:de:4e:69:e3:ee:7e:27:
                    64:52:bb:0b:47:a4:10:28:07:27:80:ce:58:ae:56:
                    a8:5b:f8:7d:98:3f:b5:23:c6:ac:c9:21:ad:c9:e5:
                    f8:b2:71:9e:6d:f2:69:b5:cc:14:ac:f9:7d:3d:8b:
                    65:22:7a:60:81:3e:e5:56:9a:ff:ee:67:f3:ff:f5:
                    02:0a:08:47:5a:b3:5f:bc:82:31:47:cc:9e:dd:cb:
                    c5:c2:cd:5e:3f:db:72:10:fe:5b:0d:86:d9:c8:28:
                    2f:09:f9:b8:f1:70:4b:e7:ab:c1:64:fb:77:de:f5:
                    26:ba:ad:91:2d:35:b0:49:7f:c9:9c:51:fd:a5:b6:
                    ee:c8:47:bf:00:9f:6d:74:9d:79:af:84:b1:b9:4a:
                    aa:32:1e:d1:e0:ab:d8:75:aa:11:30:05:6e:97:73:
                    8a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:27:02:11:AB:99:3B:4A:7A:01:29:B9:2A:63:58:66:F4:E3:29:35
            X509v3 Authority Key Identifier:
                keyid:80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7d:f5:bf:29:18:b9:95:53:f9:e8:74:3e:d1:28:5b:c0:dc:
         cb:0f:10:72:9e:34:eb:46:ad:02:6d:73:cb:65:db:17:ce:d0:
         f7:04:39:86:73:eb:2a:be:5f:fb:dc:ea:02:93:cc:cd:30:53:
         fe:db:87:4c:70:1f:17:fc:48:19:3d:8f:5e:0e:ec:43:84:e6:
         00:7f:0d:f8:a9:ae:db:e7:d2:87:52:78:00:3a:99:f7:82:9a:
         be:9e:54:4b:3b:9d:88:4d:1c:b1:ba:2f:d3:48:b6:88:6e:49:
         4f:6d:fe:18:25:00:7d:40:52:29:cc:ce:47:e8:31:f4:e1:fa:
         d5:22:fe:31:f8:91:74:2b:56:fe:f0:ef:29:bf:f4:8e:4d:6f:
         ea:5e:c3:61:a5:5a:6e:c2:7e:7b:1f:fe:05:4f:45:e0:b5:c4:
         6f:cc:b2:d4:16:52:c5:f9:7e:7c:72:03:43:f7:9f:d9:b1:32:
         c7:07:8c:78:54:58:37:bf:4d:5b:59:3c:fa:5e:86:27:dc:4c:
         8c:4d:9c:05:f9:75:35:cc:dc:69:c1:6d:3e:3b:5a:28:74:78:
         b4:9c:93:3e:fe:cb:1b:63:f3:c5:7c:0d:50:1c:08:67:e3:7c:
         27:d4:e2:03:7d:c8:d5:52:9d:b3:bd:36:26:f3:bb:f5:4e:bf:
         76:44:1f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:12 2025 by rpki-client