Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
File:                     gvJFXc9FrmWm_cz494Ic48UkAR0.mft (raw, json)
Hash identifier:          hNguEFeuY+NXrSzHIAE/UwY3dSTAU7befKyleeBQ+eE=
Subject key identifier:   3C:25:55:3B:87:67:1E:75:A1:CC:09:2F:76:08:66:06:88:02:DB:E4
Authority key identifier: 82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D
Certificate issuer:       /CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d
Certificate serial:       01903AE2A9CFB380A66EA977B91EE4A46D45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
Manifest number:          11B9
Signing time:             Fri 21 Jun 2024 13:00:51 +0000
Manifest this update:     Fri 21 Jun 2024 13:00:51 +0000
Manifest next update:     Sat 22 Jun 2024 13:00:51 +0000
Files and hashes:         1: KDc9zn9cqlIR7ARDK5a_gbc0nxA.roa (hash: XYkFBezOK7oJIel/pfOmvbAlcnuRacjE1AQyhygzUXc=)
                          2: gvJFXc9FrmWm_cz494Ic48UkAR0.crl (hash: oi/0aTCryZiaa58DnQ+F9j4SvPHpIsr0IX14GH7og/s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e2:a9:cf:b3:80:a6:6e:a9:77:b9:1e:e4:a4:6d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d
        Validity
            Not Before: Jun 21 13:00:51 2024 GMT
            Not After : Jun 22 13:00:51 2024 GMT
        Subject: CN=3c25553b87671e75a1cc092f760866068802dbe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ee:ba:f4:48:3c:c4:86:be:38:8a:b3:68:2c:
                    a9:df:6c:74:6d:4c:9f:99:f3:02:b9:c3:85:85:40:
                    ec:d6:c1:04:1e:0d:27:97:46:11:e9:96:d3:b3:a4:
                    d3:30:b1:3d:2b:c3:b2:a4:08:9e:21:3e:94:4d:3b:
                    15:43:e9:b8:73:5d:66:0e:b1:a6:d9:e6:18:5b:e7:
                    e9:4e:2c:13:84:61:75:19:59:ed:2b:56:e6:a6:c9:
                    2b:d1:1b:f8:4f:7e:aa:3d:6b:78:c7:c7:e5:b5:20:
                    bf:26:e2:49:ce:91:f0:d4:b4:90:20:5b:77:d7:13:
                    9e:d8:cb:c1:a5:fd:a3:e9:1b:66:da:6e:3b:00:dc:
                    19:c7:02:43:4a:bf:cd:0a:53:1b:31:24:0f:0d:35:
                    a1:4d:52:c2:99:f3:d8:b6:33:68:23:8f:61:a2:7a:
                    63:e8:76:11:34:1b:04:87:89:48:b6:70:4a:d7:47:
                    31:c3:74:61:3a:f6:a9:10:44:c2:8a:f0:a0:ae:37:
                    10:a3:01:82:b0:a9:b7:fa:10:1a:86:5f:81:83:98:
                    dd:87:10:c0:6d:9c:a7:9b:c9:1f:58:68:9e:88:77:
                    f7:1c:26:87:97:1b:a2:39:8b:bf:e9:f1:4a:4e:90:
                    7f:f8:5c:c5:15:e5:c8:3c:16:c0:4c:4b:a1:e0:23:
                    d0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:25:55:3B:87:67:1E:75:A1:CC:09:2F:76:08:66:06:88:02:DB:E4
            X509v3 Authority Key Identifier:
                keyid:82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5e:08:cc:87:a7:47:ea:ee:19:37:a4:e5:30:7a:7d:15:cb:
         e5:00:1e:9f:fe:12:e2:f6:e7:db:b3:c2:78:52:8f:50:0f:5d:
         ef:80:3c:95:a6:d5:4c:5f:b2:2d:54:92:d5:58:38:47:6c:9a:
         63:8e:5e:b8:b7:f0:c4:dd:5a:95:cf:fe:31:1d:20:ac:39:4f:
         ad:0e:bf:a4:7c:b9:7c:53:87:93:41:53:63:80:96:51:e3:b6:
         68:e9:d8:65:99:ee:a0:d4:8f:66:0f:46:18:69:94:82:7e:ac:
         fc:b8:64:16:97:3e:df:67:70:e9:b2:bb:c4:62:f7:09:3b:aa:
         90:ef:1b:90:a9:db:e0:4c:e4:ff:50:58:4b:3a:e6:f2:d0:66:
         d9:79:f0:d2:7d:a9:01:e3:6d:4b:7f:a0:dc:1c:3d:4b:22:06:
         14:87:97:a6:45:5f:87:06:51:d5:10:7f:ff:1e:a1:68:c9:d1:
         b0:81:74:52:c5:08:f5:6f:69:53:12:e0:fd:78:76:80:cf:0e:
         25:ad:25:1b:08:8d:f5:31:1b:3b:4a:7d:2b:a4:07:36:f6:20:
         86:e0:86:c3:02:6e:34:a1:80:76:40:a1:e2:a3:ed:dd:2b:f5:
         a3:ce:12:8d:3e:4c:4b:61:75:ac:7d:cf:f7:0b:2f:64:36:4e:
         28:0b:16:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 20:01:37 2024 by rpki-client on console-fra.rpki-client.org