Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File:                     GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier:          Z+IhLZ20IXrJlIsRs7rcPvJk0JdVit8y7rCwZUt6baI=
Subject key identifier:   FA:EF:14:75:1F:24:27:E6:34:E8:9F:2C:CE:6D:16:00:35:12:98:C4
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer:       /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial:       0196B069928A58E346DB1045F8B83B84A2C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number:          14C0
Signing time:             Thu 08 May 2025 15:00:30 +0000
Manifest this update:     Thu 08 May 2025 15:00:30 +0000
Manifest next update:     Fri 09 May 2025 15:00:30 +0000
Files and hashes:         1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: fxweWFhVQlKMWdXr0Y65wAkuFmNJ3MumOacBmq/nrWg=)
                          2: g9iZztKhPBfdB3SMkUVgLaoGa6I.roa (hash: 3cdl1mhf1MuyZrBGoECoS2FydheWQgVhXvTorzFZles=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:69:92:8a:58:e3:46:db:10:45:f8:b8:3b:84:a2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
        Validity
            Not Before: May  8 15:00:30 2025 GMT
            Not After : May  9 15:00:30 2025 GMT
        Subject: CN=faef14751f2427e634e89f2cce6d1600351298c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:25:5d:05:00:6f:be:02:c6:4b:69:c2:a5:46:
                    10:54:bf:8f:80:0e:dd:c3:b8:b0:32:e0:99:d8:66:
                    55:9d:28:29:be:24:78:d3:30:a9:2b:1d:8c:cb:90:
                    59:37:1d:e4:95:d4:84:9a:94:16:32:7a:72:f3:62:
                    18:4b:03:61:9c:5e:e4:ee:24:68:fb:10:97:d7:eb:
                    87:fc:7b:5d:15:7d:c4:2f:01:28:36:6a:ea:0d:69:
                    bd:b5:d4:fd:00:bb:01:c4:47:72:73:8e:68:7a:fa:
                    5e:da:7f:d4:79:9f:83:9c:aa:80:cf:30:d1:86:d3:
                    93:95:45:81:86:74:9a:89:d1:b1:0b:37:f8:65:a2:
                    4e:94:ae:5d:27:79:62:ef:9b:80:69:cb:89:68:e3:
                    3d:70:25:22:9d:60:3b:9e:20:f4:b8:90:14:94:f2:
                    8b:32:81:46:92:95:77:0f:02:7a:a2:d9:89:22:88:
                    f1:43:71:68:05:e8:31:20:fc:da:c0:0f:b5:11:b0:
                    38:4e:92:03:2c:52:be:66:69:09:1f:5f:36:68:9b:
                    9e:4d:ee:01:32:a4:32:83:ee:90:2e:ef:14:22:bc:
                    be:d3:86:18:82:f9:94:e3:2b:93:aa:c6:81:c5:7a:
                    40:8a:8a:bd:dc:42:69:c1:74:5b:95:d1:b2:1c:57:
                    22:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EF:14:75:1F:24:27:E6:34:E8:9F:2C:CE:6D:16:00:35:12:98:C4
            X509v3 Authority Key Identifier:
                keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:45:11:17:2b:e2:0d:30:d0:cb:9c:89:be:39:5e:a0:f0:40:
         4f:b8:04:99:48:47:b6:c9:3c:e5:91:63:cb:75:f5:f4:01:e7:
         4e:15:a1:d0:a5:50:17:35:7f:eb:ce:3e:6b:bf:3e:e6:64:03:
         b7:f5:a2:e0:1f:76:f6:8c:35:24:b4:df:e4:71:2b:69:cd:cc:
         9f:10:53:a0:19:4f:a4:72:9a:9a:54:f2:27:2d:d6:64:97:47:
         3c:d0:9e:bb:f4:32:5c:fd:3f:06:f3:07:e5:b7:b9:1c:97:0d:
         08:3f:24:47:eb:ea:17:61:1f:79:f3:7e:56:25:b9:5b:1b:8b:
         0e:10:a6:f5:c4:eb:c7:42:9a:6c:12:16:94:b0:bb:a1:63:bd:
         9a:c5:db:1d:5e:ec:8f:c3:4c:b3:cd:9b:6c:fc:e0:59:86:72:
         0c:4f:67:27:2c:22:25:d8:71:b8:3c:2e:5c:04:e2:27:9a:74:
         ac:3e:e3:78:c2:e3:fa:9a:15:e1:79:ec:41:3e:2a:7a:d4:1f:
         48:7b:71:d0:fb:c0:62:f6:97:80:8b:f2:b9:fb:c6:f9:62:a1:
         d7:b6:ab:57:91:53:e8:59:95:34:86:6e:d3:ad:94:ab:67:ca:
         76:5c:0a:85:cc:af:83:1b:ae:4a:ab:40:1b:23:63:7a:94:03:
         20:3a:9c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:56:39 2025 by rpki-client