Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
File:                     GtwAk8WviUz1ILWTbjCyFQkN6fg.mft (raw, json)
Hash identifier:          /Immc1LGkRuV97udNYDNlXHOOENRCNkP8JA/pnEsJng=
Subject key identifier:   0E:4E:6B:EA:E1:43:44:43:F2:3F:BE:07:B3:7C:BD:3C:3A:F4:86:40
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Certificate issuer:       /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial:       01969DF5A3EE4EDE32E4648DC2FF22241A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
Manifest number:          0CE9
Signing time:             Mon 05 May 2025 01:00:43 +0000
Manifest this update:     Mon 05 May 2025 01:00:43 +0000
Manifest next update:     Tue 06 May 2025 01:00:43 +0000
Files and hashes:         1: GtwAk8WviUz1ILWTbjCyFQkN6fg.crl (hash: MPeleBlW0rWFm/lJtb86uMisDURBmutX6JC5PqQeryo=)
                          2: UJ4olMWApP7MwaE2AnHAAWvvURE.roa (hash: j8yhG+CkxtZBOA9heOK1DNmQYHzy/3/vJayn7f/Unnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:f5:a3:ee:4e:de:32:e4:64:8d:c2:ff:22:24:1a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
        Validity
            Not Before: May  5 01:00:43 2025 GMT
            Not After : May  6 01:00:43 2025 GMT
        Subject: CN=0e4e6beae1434443f23fbe07b37cbd3c3af48640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:74:ff:f2:ab:02:4e:87:32:05:cd:cf:9a:ee:
                    ee:b9:84:1d:8f:66:f7:ca:7c:e2:c5:8a:cd:be:18:
                    94:34:9e:e0:ec:ed:99:29:4c:b7:6b:41:e6:ac:6e:
                    a2:92:8c:39:79:0e:85:65:21:29:8e:63:43:84:5a:
                    21:79:2c:86:30:19:cc:79:28:06:75:c2:ca:39:9b:
                    86:54:84:1d:e9:ce:58:20:95:56:2d:16:ea:d4:59:
                    37:9f:3e:b5:e3:a3:55:af:6d:0c:69:83:7d:16:55:
                    67:13:be:54:ec:01:e3:2d:59:f4:5c:67:7b:eb:7d:
                    f2:15:61:6a:e4:c2:d9:5a:62:6a:cf:75:91:c3:be:
                    fd:ab:7b:92:8f:75:b1:df:f6:eb:76:ac:79:eb:32:
                    36:d5:a4:e6:13:fd:a8:87:9b:33:59:33:1b:62:6b:
                    3d:d3:73:c3:80:f2:7c:40:b3:6c:04:87:5a:d7:eb:
                    17:35:d0:78:83:ac:4b:20:1a:41:c0:3a:33:6a:d6:
                    41:3d:a3:d4:57:7c:52:b7:29:2d:22:c2:b9:ab:f0:
                    83:6b:bc:cd:46:5d:cf:9d:77:f3:42:05:16:f8:aa:
                    14:c8:7a:41:e2:f9:0e:a5:ef:cf:29:9c:b6:ee:5f:
                    c3:33:cb:71:c3:df:26:ed:ad:f9:1e:dd:2e:a1:34:
                    87:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4E:6B:EA:E1:43:44:43:F2:3F:BE:07:B3:7C:BD:3C:3A:F4:86:40
            X509v3 Authority Key Identifier:
                keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:16:9c:50:83:ca:c8:40:bf:44:a4:44:c7:11:a4:1f:b5:d4:
         67:38:65:e7:62:63:1a:e0:90:7b:67:13:80:d9:9d:b1:d8:ca:
         1b:65:81:dd:e4:bb:6c:90:58:0b:10:1c:ec:ed:f1:6b:15:f3:
         64:69:74:87:09:c2:24:4e:f9:1c:bc:f3:d2:93:e2:0e:f8:8b:
         c8:6e:af:49:44:63:a1:42:9b:1b:52:9d:59:ed:cf:e8:af:e7:
         1b:ba:b0:96:40:e3:72:1f:37:99:69:5f:fa:5f:1d:bf:a9:14:
         43:0e:7e:11:b1:5c:eb:de:6a:7c:cf:9f:3c:34:02:ce:bd:1e:
         b4:46:80:41:e4:18:de:16:35:97:46:aa:eb:f6:33:89:e5:81:
         b3:d3:37:42:b7:25:9c:25:be:2f:d0:3b:99:ca:78:a5:e1:d3:
         87:57:d1:ab:55:a4:83:78:e9:a8:04:56:59:5f:63:b0:b8:5e:
         b8:fc:05:f7:df:f9:fe:98:7b:c8:a0:30:9a:23:dd:a6:a7:81:
         dc:25:45:9d:41:6b:e6:d3:22:6a:9b:b7:63:bf:23:cf:65:0b:
         e4:ef:50:cf:25:44:c4:28:0c:78:05:02:a7:be:e4:74:9f:52:
         fc:b8:a6:b5:ed:3a:30:2e:f2:23:72:c2:6b:bb:83:e8:11:3c:
         c5:a2:2e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:43:08 2025 by rpki-client