Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
File:                     GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft (raw, json)
Hash identifier:          KkizGeorGJNP2WfE0EbckrSDSDSJL+EqXdKaSceDR8Y=
Subject key identifier:   98:39:32:2B:65:DD:C8:05:CE:54:D4:F0:5A:5C:C9:19:1F:7B:E5:C9
Authority key identifier: 18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49
Certificate issuer:       /CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
Certificate serial:       0196BE256D7A76D8AA2088E4469ED50C4D64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
Manifest number:          1531
Signing time:             Sun 11 May 2025 07:00:45 +0000
Manifest this update:     Sun 11 May 2025 07:00:45 +0000
Manifest next update:     Mon 12 May 2025 07:00:45 +0000
Files and hashes:         1: 2nLsQqPE5llC17hwQkkSOMH6bAs.roa (hash: bh0+wwwfSzTifnsB5Zplv4YF5NGG3Z0ysixgx0plOO8=)
                          2: GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl (hash: YaveVl/oyw4O9iiSkjmtpV4n2VeFtbJuyhT4x6r+v6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:25:6d:7a:76:d8:aa:20:88:e4:46:9e:d5:0c:4d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
        Validity
            Not Before: May 11 07:00:45 2025 GMT
            Not After : May 12 07:00:45 2025 GMT
        Subject: CN=9839322b65ddc805ce54d4f05a5cc9191f7be5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:74:c2:32:c3:a8:7d:3e:95:eb:48:e7:37:
                    81:22:de:c0:af:17:86:12:47:e2:b9:b4:9b:51:52:
                    29:c9:c6:76:e7:4d:9b:57:a7:63:76:0b:3e:28:39:
                    ee:97:f0:51:e5:44:be:5e:a8:04:c4:ac:d5:36:ae:
                    3d:52:71:b5:6e:e9:e2:51:96:f9:aa:b0:7d:0b:9f:
                    24:6b:08:4d:c3:0a:28:b2:ab:24:5c:ac:d2:63:8d:
                    f0:28:a6:28:0f:d8:8d:ac:f4:38:57:a6:4b:f3:99:
                    97:4e:4e:d8:1d:c5:2c:9b:65:2b:71:9a:00:04:e3:
                    e6:33:36:aa:11:52:78:66:ce:37:be:2d:fb:1f:24:
                    fb:3c:9c:e3:c8:7c:ea:b1:a5:d3:3d:6b:32:0f:fe:
                    92:48:c7:84:53:67:f3:9f:4e:62:47:3d:f3:49:e5:
                    fd:9f:91:51:62:8b:6d:11:22:e5:42:09:c7:40:34:
                    83:98:af:5b:ed:99:45:19:f8:ed:dd:4e:da:2a:3a:
                    1a:7e:0f:b5:d2:db:c4:1e:0b:ff:0a:40:11:b5:a4:
                    51:22:7a:13:9c:54:84:58:07:d5:df:2f:36:6c:39:
                    1f:74:9a:34:59:45:8f:bc:d1:29:6e:0f:d9:c3:13:
                    4e:e3:41:4d:1b:48:c0:4c:eb:7b:11:c6:f8:16:26:
                    28:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:39:32:2B:65:DD:C8:05:CE:54:D4:F0:5A:5C:C9:19:1F:7B:E5:C9
            X509v3 Authority Key Identifier:
                keyid:18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:4a:f2:a6:62:ed:61:9d:51:60:74:b7:0d:42:11:46:87:d6:
         a1:a7:94:54:4f:e1:aa:6d:9f:0e:6f:fd:d3:f7:32:55:fc:3f:
         b6:1a:b1:15:50:66:31:41:0a:27:1f:2d:6c:34:3e:71:d7:45:
         43:69:56:1e:09:ef:a8:17:cc:4a:b8:b8:0a:30:3d:9e:b3:e5:
         59:7f:f6:e1:3d:14:d4:5a:25:80:94:3f:b4:06:fb:03:73:79:
         f8:fc:08:87:1c:55:fd:6d:e4:b6:ce:cc:a2:ea:9f:02:b0:d4:
         2e:11:ea:e6:46:71:ab:6f:a8:61:7f:99:23:39:52:36:8b:83:
         57:1b:01:37:7f:b7:fd:e6:39:10:70:c3:64:29:86:5e:94:b2:
         74:68:38:c6:2a:eb:ec:c3:b1:03:39:79:6b:73:9b:24:a3:d9:
         98:03:a7:76:9f:a4:b9:92:f4:27:76:38:da:d3:de:e0:fd:d1:
         fa:cf:b9:2d:07:a0:95:4f:ad:2e:3c:e4:46:59:95:38:84:b0:
         b7:ab:d0:38:46:82:0f:2d:32:24:52:4d:50:8a:a4:b6:14:04:
         7e:69:98:87:3d:cf:5c:1e:2c:1e:dd:a0:e4:38:64:85:be:4b:
         f8:97:7f:24:1b:23:4e:a4:a4:7e:28:62:9d:c8:37:a2:58:ac:
         c2:12:13:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:51:17 2025 by rpki-client