Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
File:                     gsbbjg23mzF0_umfxqYFz1bfvck.mft (raw, json)
Hash identifier:          4SiNwA3NH01kC9ew/PJntjema91/HlChBq8kKnVq9Pc=
Subject key identifier:   D2:B4:9B:25:9F:D0:30:D2:22:34:87:FB:EA:EA:54:F2:AA:D0:99:22
Authority key identifier: 82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9
Certificate issuer:       /CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9
Certificate serial:       0196B5C7670CB69A76AF47B3A667071029B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
Manifest number:          06A3
Signing time:             Fri 09 May 2025 16:01:06 +0000
Manifest this update:     Fri 09 May 2025 16:01:06 +0000
Manifest next update:     Sat 10 May 2025 16:01:06 +0000
Files and hashes:         1: gsbbjg23mzF0_umfxqYFz1bfvck.crl (hash: J8iXpPoPHprw96gVf2Po4DQfkrgyVHvfBAUzG7IS1ko=)
                          2: x6jSUPrNwCyjzV69rEteWUbA8bw.roa (hash: 1zp500CT5AdJ87LI8ByrofonFUUOcrdgDO051AN4e6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 16:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b5:c7:67:0c:b6:9a:76:af:47:b3:a6:67:07:10:29:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9
        Validity
            Not Before: May  9 16:01:06 2025 GMT
            Not After : May 10 16:01:06 2025 GMT
        Subject: CN=d2b49b259fd030d2223487fbeaea54f2aad09922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c4:66:04:fb:87:5a:04:ea:08:4e:4f:77:19:
                    30:b3:3f:07:10:ff:7b:68:cc:ba:68:1e:d1:da:e1:
                    d8:3d:86:5c:9f:c0:64:9b:99:c3:b6:d1:97:d8:be:
                    db:f8:5a:da:bd:53:81:4f:c2:61:2d:5c:f2:1f:6a:
                    5a:d0:0d:80:fd:55:6d:1e:4b:2c:73:6c:e8:39:ab:
                    09:ff:a5:26:d0:da:3f:e8:40:b0:2d:f1:df:81:71:
                    6a:98:9d:d1:54:4a:b1:54:15:68:77:8b:72:20:67:
                    0d:bf:5e:22:20:a0:9d:c2:a8:e5:11:72:04:10:2d:
                    27:f9:4d:96:ba:3c:eb:b6:86:b7:6c:bd:47:48:79:
                    f2:d2:2c:e4:b4:44:fe:11:44:be:93:a9:d1:39:a9:
                    36:50:77:d2:9a:1c:91:08:e3:ab:da:d7:3c:46:dc:
                    b4:5b:97:0e:f2:3f:ca:1d:8a:28:6b:4b:e5:90:1e:
                    b4:9d:a7:e2:77:9b:6a:73:1f:42:13:fc:e4:9d:0e:
                    ba:3a:95:9c:2d:50:69:80:4b:5b:96:31:1c:b6:78:
                    a6:a4:15:14:45:bf:d9:8b:7a:fc:e9:ca:94:e5:6f:
                    5e:6d:f6:d0:38:37:c4:02:e3:8e:49:31:26:3a:86:
                    e5:18:c2:97:66:30:31:ec:ca:d2:a1:09:cb:a2:d9:
                    73:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B4:9B:25:9F:D0:30:D2:22:34:87:FB:EA:EA:54:F2:AA:D0:99:22
            X509v3 Authority Key Identifier:
                keyid:82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:bc:dd:71:f2:33:2e:18:10:44:7a:6d:18:6d:93:70:aa:ed:
         f2:db:9c:15:02:97:db:46:e5:fa:80:a3:18:88:46:e7:f0:09:
         ba:93:dc:d4:15:20:ad:63:45:f2:54:0c:c9:ae:53:ab:6e:6d:
         61:9e:eb:e7:8f:31:69:31:2d:f6:ac:0e:dc:01:dc:3d:a9:3b:
         7d:50:70:ba:77:cc:ed:c5:b1:85:ad:cb:c6:c3:6a:5e:0d:e5:
         e6:10:93:fc:38:55:8e:69:b9:76:56:dc:dc:d5:43:8b:0a:9e:
         7a:6c:c5:82:10:d3:90:44:2a:9a:d4:8d:b9:76:78:1f:9e:ca:
         b4:d3:ab:47:a0:9f:f6:3a:73:e1:90:e3:8d:93:a9:8d:1c:87:
         4c:b4:80:ad:37:7d:43:7b:84:e1:6f:77:23:7b:90:4b:f5:bf:
         d0:2a:ef:7b:24:4d:9a:4e:2e:59:da:07:03:32:d9:0f:65:6b:
         fa:85:fa:10:1d:26:aa:65:0a:f4:4c:e4:67:c2:4a:79:a6:ee:
         80:5e:d2:e4:69:b7:a8:e0:6f:bf:e5:ed:d1:23:dd:6b:ca:f1:
         2a:a6:69:8b:f9:5f:14:0a:79:34:b4:37:56:89:fc:97:ed:e6:
         0a:ab:e1:14:56:2c:8f:b9:6d:41:d1:aa:bf:9d:a2:52:c8:61:
         42:be:dc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:44:35 2025 by rpki-client