Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
File:                     GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft (raw, json)
Hash identifier:          pac60+RDZvzkwFXeWaCGUTD/Q1d52MaoCC0607MtBWQ=
Subject key identifier:   FA:9D:77:C7:A6:0D:3B:65:61:BC:91:AC:AD:0C:5A:D2:1F:69:BC:D0
Authority key identifier: 19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01
Certificate issuer:       /CN=195a12a0e73482d993260598a25c8f5a5c49d201
Certificate serial:       0196BC6E04447F8EC25BE7A6E243A15680B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
Manifest number:          1530
Signing time:             Sat 10 May 2025 23:00:48 +0000
Manifest this update:     Sat 10 May 2025 23:00:48 +0000
Manifest next update:     Sun 11 May 2025 23:00:48 +0000
Files and hashes:         1: GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl (hash: nj3MLKDyyBCcuS5eCD2NCFQrQo1/JcZhgat793WISaw=)
                          2: UkXF7s7wvZTNugO0xMbM-tho3CU.roa (hash: haf3+lwW0Ofrlk+CxaFcagM4HVa+8i2mqBkmuNQ3QQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:6e:04:44:7f:8e:c2:5b:e7:a6:e2:43:a1:56:80:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195a12a0e73482d993260598a25c8f5a5c49d201
        Validity
            Not Before: May 10 23:00:48 2025 GMT
            Not After : May 11 23:00:48 2025 GMT
        Subject: CN=fa9d77c7a60d3b6561bc91acad0c5ad21f69bcd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:12:99:f0:02:90:76:76:60:2c:a4:ec:2a:ca:
                    be:ee:26:e0:d9:30:e1:5c:17:92:0e:53:e4:5c:af:
                    ab:22:84:14:e5:93:6b:c6:b7:e2:a4:b6:69:ce:41:
                    74:aa:a5:b5:91:d6:7a:9f:e3:67:44:38:5c:02:42:
                    cd:2e:0b:df:bf:69:6f:c4:3b:1b:a2:08:d7:91:21:
                    54:07:25:ca:c1:fe:f4:63:88:cf:92:e7:92:a0:a4:
                    5d:c3:ed:12:4c:29:b6:df:cb:42:a3:58:fc:ec:cb:
                    1d:d2:16:f7:e7:4f:34:d8:6d:1a:a0:e4:e0:a4:9f:
                    40:73:81:06:2c:0b:38:c6:7d:84:c4:91:02:25:f3:
                    18:0a:20:d8:ca:d1:5f:64:f4:5f:c8:f9:4d:64:7f:
                    7f:ae:92:2e:09:2e:f5:8f:55:00:ff:20:07:60:23:
                    43:ec:54:07:b1:20:5c:6e:83:f4:34:7e:1c:11:6f:
                    62:cf:76:4c:61:80:9e:fc:48:79:52:c9:28:94:e0:
                    09:2d:49:84:e8:cc:ed:fb:36:e2:ab:fa:2f:f7:16:
                    ba:cd:9f:36:1c:26:49:f7:e4:49:ee:34:9c:14:d5:
                    72:e0:4b:04:48:e0:1f:5f:f5:66:95:54:00:20:13:
                    a9:ba:ad:ed:4c:fe:dd:0b:16:9d:35:24:ab:47:fc:
                    92:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9D:77:C7:A6:0D:3B:65:61:BC:91:AC:AD:0C:5A:D2:1F:69:BC:D0
            X509v3 Authority Key Identifier:
                keyid:19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:60:2c:60:5a:58:ff:70:c1:2c:42:c1:7c:d9:d1:a1:12:21:
         11:88:19:30:da:36:0f:20:24:bb:d4:6e:9b:fc:36:39:38:da:
         26:24:58:2b:5e:11:ad:b9:e8:f0:40:ae:60:62:db:54:e5:1a:
         90:ee:ec:47:5d:6f:aa:ea:ec:6d:d6:28:96:0b:b4:10:0d:9d:
         e5:81:df:4e:3f:8e:e9:b3:89:bf:79:8f:b1:77:8a:d2:8c:88:
         41:0f:6a:d5:dc:b1:63:0c:6a:5a:53:15:b7:aa:a8:53:71:56:
         fd:a1:28:cd:8c:da:da:d1:a5:ba:b5:68:59:d2:d7:28:3a:01:
         ec:ad:e7:f4:f6:9f:e3:ed:9c:10:c2:cb:18:a9:8a:e1:9a:3b:
         27:61:8f:5f:54:aa:35:18:67:16:40:3f:92:a5:05:95:31:16:
         68:1f:71:30:f2:89:1a:02:51:d2:f9:56:ab:8e:ac:4a:c4:3d:
         a7:fb:d2:18:0c:2b:1a:58:99:a8:83:a0:89:88:a2:3c:e8:d1:
         a0:49:1f:ca:e8:02:e4:b1:51:2f:ec:05:0b:ab:9f:d2:e2:02:
         4a:31:ae:92:77:8e:a8:89:c9:ab:6b:65:3f:52:55:81:80:95:
         50:31:17:b9:98:9c:0c:70:76:f7:d7:85:37:88:da:75:d3:9b:
         6a:fc:45:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:22:43 2025 by rpki-client