Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
File:                     GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft (raw, json)
Hash identifier:          qj7oM754+ZFb9n0JzgwT8oghQ1gcFs12fHCIfE8S7v8=
Subject key identifier:   04:00:F8:FD:55:03:67:85:C8:0E:95:0B:1E:9D:DC:C7:38:9C:A6:44
Authority key identifier: 19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A
Certificate issuer:       /CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
Certificate serial:       0196BAB6906D93359637ABEBA7C00464787D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
Manifest number:          034F
Signing time:             Sat 10 May 2025 15:00:48 +0000
Manifest this update:     Sat 10 May 2025 15:00:48 +0000
Manifest next update:     Sun 11 May 2025 15:00:48 +0000
Files and hashes:         1: GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl (hash: CgbPGNLKV8K7+fRsY2QTrlztpJHkRMylVRa9wr2WJlQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:b6:90:6d:93:35:96:37:ab:eb:a7:c0:04:64:78:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
        Validity
            Not Before: May 10 15:00:48 2025 GMT
            Not After : May 11 15:00:48 2025 GMT
        Subject: CN=0400f8fd55036785c80e950b1e9ddcc7389ca644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:59:c9:1d:95:09:f1:38:5b:e6:83:c7:af:
                    b3:11:9a:4d:51:92:f1:25:b3:8c:56:13:3b:fd:77:
                    85:ef:b8:0a:34:bc:cb:04:df:1c:3a:f1:6a:89:78:
                    bd:7d:30:c4:dc:e7:3c:b3:db:4e:0e:cf:70:9d:45:
                    8e:20:21:de:f5:59:a9:75:98:d4:19:36:61:10:cc:
                    a1:e4:e8:1b:c1:fe:5a:11:56:cf:30:21:06:e3:a7:
                    1a:04:80:de:64:ea:bd:71:03:47:8e:dc:51:42:d3:
                    b0:ac:1e:f3:2a:27:a7:bd:0d:10:a9:c6:00:da:39:
                    c9:4a:99:11:6f:d6:6c:98:31:71:58:3b:10:3a:f3:
                    2e:ab:37:df:be:72:9a:53:61:35:65:aa:c0:67:b4:
                    a3:a1:33:5f:7a:de:f4:24:b0:dc:dc:5b:f4:51:d7:
                    98:9f:72:47:7d:41:61:16:ab:4f:be:79:fa:1c:d4:
                    b4:88:e3:73:6c:a9:a3:6e:2f:d7:98:68:06:f7:27:
                    28:3e:07:80:e6:dc:16:9e:78:9c:28:ad:15:76:5d:
                    21:e4:c2:42:ec:89:74:ae:ed:94:04:cb:55:b5:71:
                    0e:34:1b:e7:83:a8:7f:8d:55:13:e9:c9:b7:3e:10:
                    16:20:18:29:eb:77:47:69:4b:56:6c:9e:a4:6b:ad:
                    f1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:00:F8:FD:55:03:67:85:C8:0E:95:0B:1E:9D:DC:C7:38:9C:A6:44
            X509v3 Authority Key Identifier:
                keyid:19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:d2:5c:e6:2d:dd:14:e1:9e:30:00:85:f5:b8:45:78:dc:35:
         89:85:d5:b6:f2:c8:70:3c:70:7b:1f:09:31:2a:4d:34:93:05:
         1f:7c:36:87:de:84:01:0c:5d:58:69:cf:31:3c:18:53:37:8e:
         f2:42:36:19:bd:1a:d5:46:a6:e3:cc:5a:bd:8e:5b:4c:7d:6c:
         ca:23:9d:5b:3e:65:1e:30:f2:8e:e4:cd:ec:8d:b2:69:6b:87:
         58:e5:ea:17:6e:f7:5c:1d:c2:d5:c7:ea:da:a4:5a:0c:bb:f2:
         fa:69:5b:78:95:70:c3:eb:ed:61:7f:cd:c3:96:e2:6b:3b:63:
         0b:d6:c8:55:ec:d3:36:77:4e:b4:81:b9:37:6e:2d:18:a8:76:
         5a:e3:9e:92:75:8a:67:28:d8:e6:43:6f:d5:8e:92:da:11:91:
         48:2b:23:59:10:c3:7e:24:d6:b6:3c:be:46:3e:ba:94:1d:1d:
         db:98:5c:ac:a3:0f:75:72:a9:fe:8e:24:dc:ec:34:f1:a1:33:
         67:76:e9:21:08:5f:06:e9:e7:a6:25:d8:e7:59:d1:49:f8:92:
         cb:e6:7a:48:ce:5d:e0:e3:23:05:b6:84:db:5b:91:21:db:1d:
         78:0e:7f:16:f7:4d:c0:6e:13:7c:ad:f4:5b:b5:ea:d6:20:ac:
         05:f5:7b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:19:24 2025 by rpki-client