Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
File:                     _gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft (raw, json)
Hash identifier:          Bd52YrplOJy81GgrzjYyKfkrOMcA5AtSPZNl3qu5G1k=
Subject key identifier:   BA:28:5D:22:48:28:00:4E:AE:30:AD:2B:5D:30:55:99:2A:DC:9B:95
Authority key identifier: FE:0C:14:A0:BD:C1:19:F1:ED:49:62:02:D8:9B:E4:FD:26:59:FF:01
Certificate issuer:       /CN=fe0c14a0bdc119f1ed496202d89be4fd2659ff01
Certificate serial:       0196C0EF70F11216A8CFC1A05F6109593E7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
Manifest number:          0620
Signing time:             Sun 11 May 2025 20:00:39 +0000
Manifest this update:     Sun 11 May 2025 20:00:39 +0000
Manifest next update:     Mon 12 May 2025 20:00:39 +0000
Files and hashes:         1: _gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl (hash: WIw3lneD3XwRxZYFyg3IalIkqvK2ddzuDqrtD6V0gcM=)
                          2: oYPmCSWvS8EzeEC8QLUq6x_eYrI.roa (hash: 1A9wNN6kYL22cNZ71fS4DQFjU5QHCoE6jNJ2g/Xtw44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 20:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:ef:70:f1:12:16:a8:cf:c1:a0:5f:61:09:59:3e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe0c14a0bdc119f1ed496202d89be4fd2659ff01
        Validity
            Not Before: May 11 20:00:39 2025 GMT
            Not After : May 12 20:00:39 2025 GMT
        Subject: CN=ba285d224828004eae30ad2b5d3055992adc9b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c2:f5:7e:34:1a:1a:2e:85:23:b0:a9:41:ce:
                    81:de:c1:bd:61:d6:83:fc:7d:31:18:6b:9a:60:ed:
                    ed:c9:50:5f:f4:a8:d8:52:56:84:66:a3:71:72:4c:
                    6c:c9:68:88:20:ac:da:21:2c:cb:01:67:22:fe:83:
                    64:45:26:17:39:13:16:d3:08:15:b0:6f:dd:25:cc:
                    80:8a:eb:3b:d7:cb:cb:7a:81:bf:7f:f6:43:1a:25:
                    54:bd:f4:3c:0a:a7:5a:31:aa:04:7c:c4:d0:ac:11:
                    94:4f:3f:ee:f1:61:a7:b0:33:88:6a:ed:31:56:8d:
                    dc:5a:02:49:b9:16:d8:fb:1c:ab:94:de:92:c7:b4:
                    9a:e1:59:f2:82:4c:dc:63:31:4d:ec:2c:96:1b:06:
                    69:83:b0:96:a0:32:ad:d2:d7:f3:a6:da:0f:1e:46:
                    b7:18:89:70:46:5d:5f:2a:db:38:29:72:40:f4:d7:
                    b1:ce:ce:d3:f1:95:dd:5c:8c:41:0e:57:6f:71:b2:
                    9f:f5:58:8b:1e:0e:7c:e7:ff:2c:8e:a1:16:08:c0:
                    2c:c3:cc:ab:a2:8a:4f:4f:79:38:fc:ce:9e:88:8c:
                    3d:b8:37:41:a1:fc:96:93:d9:65:0d:6a:56:14:11:
                    56:3c:96:81:5a:a7:97:e8:20:6c:8a:63:85:93:f7:
                    06:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:28:5D:22:48:28:00:4E:AE:30:AD:2B:5D:30:55:99:2A:DC:9B:95
            X509v3 Authority Key Identifier:
                keyid:FE:0C:14:A0:BD:C1:19:F1:ED:49:62:02:D8:9B:E4:FD:26:59:FF:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7b:e4:9f:84:2c:6b:23:08:37:3e:90:36:80:f4:8a:cd:22:
         b7:16:f8:76:47:2e:bc:85:e3:c8:b4:6c:09:43:17:57:63:dc:
         38:55:7c:b4:4a:85:b4:f9:a4:d3:64:92:67:1c:7b:d0:3d:79:
         ca:e3:df:4b:7f:7f:62:ca:a7:ba:c9:5e:09:13:3e:1a:c2:bc:
         25:bf:d6:99:44:39:ca:b4:bf:f3:ff:47:5e:27:41:e9:e9:11:
         12:2b:50:5d:bf:48:b6:0e:f2:89:db:b1:7a:2a:24:2c:70:5b:
         fa:5f:7c:78:98:72:61:5d:6f:0a:da:3c:82:19:82:89:74:ed:
         cb:8e:3c:94:55:f6:e7:77:bb:a1:07:fb:94:11:16:1e:7c:99:
         0b:55:2e:ed:b5:58:47:ca:06:09:9f:b8:54:6e:5d:0c:de:07:
         d6:31:73:18:61:4b:42:0f:d6:67:94:8d:e7:92:35:0e:b0:70:
         ae:40:8f:c5:f9:34:2e:f1:c9:db:b9:3b:5b:13:d4:9d:18:e3:
         a8:f3:b1:6c:a9:82:e2:f3:9b:6e:79:03:da:73:be:5b:a6:20:
         55:36:e7:67:65:23:d2:4e:38:47:cc:e5:05:67:23:40:2f:36:
         b7:8f:0a:68:ca:c9:c7:30:be:e5:f3:97:a8:b0:4b:fb:12:ee:
         cb:2d:38:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:28:16 2025 by rpki-client