Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5b1319-b987-4f94-b326-5769019fefb8/1/gbFPrkTfoOM0kWdDPJJMlkVzmGE.mft
File:                     gbFPrkTfoOM0kWdDPJJMlkVzmGE.mft (raw, json)
Hash identifier:          r5DaJrGUDNTuKrhdOACV9kjAui17cO3c3W1BN+lCRpQ=
Subject key identifier:   F8:D8:ED:F8:10:00:60:3B:5D:C7:CE:6C:D9:F1:C8:83:4C:96:50:53
Authority key identifier: 81:B1:4F:AE:44:DF:A0:E3:34:91:67:43:3C:92:4C:96:45:73:98:61
Certificate issuer:       /CN=81b14fae44dfa0e3349167433c924c9645739861
Certificate serial:       01901EFD97E8D7EB0B4AB8D809A06A7A2E60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gbFPrkTfoOM0kWdDPJJMlkVzmGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5b1319-b987-4f94-b326-5769019fefb8/1/gbFPrkTfoOM0kWdDPJJMlkVzmGE.mft
Manifest number:          0A5D
Signing time:             Sun 16 Jun 2024 03:00:54 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:54 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:54 +0000
Files and hashes:         1: CiO8rz6OpJP8kXEDtL6_femYWdw.roa (hash: xrGwN0Y9hlv70stNpeICmZNMBWdiRqCHB0a8cFQp9FI=)
                          2: gbFPrkTfoOM0kWdDPJJMlkVzmGE.crl (hash: O0dSRDcilg2GfgBdWGmDtGRvsOa9WkqskUEYavw9ZK8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/5b1319-b987-4f94-b326-5769019fefb8/1/gbFPrkTfoOM0kWdDPJJMlkVzmGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/5b1319-b987-4f94-b326-5769019fefb8/1/gbFPrkTfoOM0kWdDPJJMlkVzmGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gbFPrkTfoOM0kWdDPJJMlkVzmGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:97:e8:d7:eb:0b:4a:b8:d8:09:a0:6a:7a:2e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81b14fae44dfa0e3349167433c924c9645739861
        Validity
            Not Before: Jun 16 03:00:54 2024 GMT
            Not After : Jun 17 03:00:54 2024 GMT
        Subject: CN=f8d8edf81000603b5dc7ce6cd9f1c8834c965053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b5:d5:8b:a3:2d:f0:f4:84:38:ed:52:92:93:
                    be:69:0b:e9:df:da:6e:92:6a:0f:fe:4c:0b:0d:e4:
                    9a:28:e7:87:eb:3f:f0:6b:89:b2:55:88:63:a6:76:
                    76:82:01:38:8c:c4:4f:2b:b2:27:5b:51:29:05:cb:
                    8f:70:bf:72:14:d2:86:17:35:d5:3a:5b:8c:4d:6b:
                    27:2a:cd:94:9f:77:11:ec:ba:26:a6:94:bd:64:1b:
                    08:a0:6a:c3:be:2c:e8:d7:be:06:fa:d4:19:31:ff:
                    4b:c8:6c:6c:71:28:c3:eb:4d:e7:f2:c7:b6:e4:1c:
                    ae:65:de:74:c6:9d:bf:15:32:ac:dc:76:d5:38:b2:
                    35:f8:df:57:b8:52:bf:af:e8:0a:60:d0:8e:85:9f:
                    4f:c5:95:75:22:63:b0:7a:72:27:85:d1:0c:fd:4a:
                    0a:f7:8d:51:a9:ff:f6:fd:bb:b7:43:61:c0:59:4c:
                    6d:76:27:65:1a:92:ae:f4:38:ef:19:49:4c:36:b4:
                    67:e6:8a:e9:9b:23:81:b8:68:c8:2e:69:0a:84:f0:
                    5d:71:3d:a6:bf:f8:e2:03:e5:8a:16:6d:14:22:0a:
                    f8:94:fa:3f:e2:f0:aa:05:22:44:9c:86:77:b6:53:
                    84:1e:19:6b:84:5b:59:d8:6f:9b:99:0e:e1:44:da:
                    46:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D8:ED:F8:10:00:60:3B:5D:C7:CE:6C:D9:F1:C8:83:4C:96:50:53
            X509v3 Authority Key Identifier:
                keyid:81:B1:4F:AE:44:DF:A0:E3:34:91:67:43:3C:92:4C:96:45:73:98:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbFPrkTfoOM0kWdDPJJMlkVzmGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5b1319-b987-4f94-b326-5769019fefb8/1/gbFPrkTfoOM0kWdDPJJMlkVzmGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5b1319-b987-4f94-b326-5769019fefb8/1/gbFPrkTfoOM0kWdDPJJMlkVzmGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:aa:dc:17:e2:1c:76:11:f9:14:61:44:87:7a:40:eb:16:b6:
         4a:9c:7b:e4:e6:75:5a:43:e3:d0:70:1b:fd:5e:3e:9a:9b:7f:
         5f:47:ae:99:6e:4d:43:aa:5c:c8:26:c9:83:86:0d:2f:bf:af:
         a8:1d:3d:a5:92:db:fc:bd:6b:92:61:f9:a0:74:cb:fb:e4:50:
         3f:4b:11:a0:c2:d6:79:97:c1:34:b0:cb:52:40:f9:49:e4:cc:
         e6:35:11:e6:7d:63:55:4c:e1:6d:a6:5d:d7:fd:c4:95:8c:16:
         0d:a6:22:8d:e7:38:7f:b5:81:bc:2b:07:cd:a0:d4:06:b9:6d:
         49:de:0c:46:e9:84:82:9e:42:60:c0:e4:4d:1a:d2:01:36:c4:
         2c:84:f6:fd:25:90:34:fc:13:a1:9f:f9:e0:02:db:75:e0:32:
         81:ad:f1:1d:c1:8a:dd:07:8a:4a:84:66:b7:76:99:33:4a:36:
         56:04:ab:eb:c2:9b:cb:b8:0d:3d:63:bb:e4:25:ac:5b:02:9d:
         9c:34:f7:08:0e:2f:e7:4a:3f:61:be:39:f9:0c:7e:89:21:7b:
         af:50:19:b3:f5:ed:8f:3a:6c:f5:a0:52:a3:93:8d:4a:1b:4e:
         80:a2:14:70:50:a2:ac:3f:b7:73:25:59:31:4a:f0:22:5f:57:
         a1:a5:fb:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAe/Zfo1+sLSrjYCaBqei5gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYjE0ZmFlNDRkZmEwZTMzNDkxNjc0MzNjOTI0Yzk2NDU3
Mzk4NjEwHhcNMjQwNjE2MDMwMDU0WhcNMjQwNjE3MDMwMDU0WjAzMTEwLwYDVQQD
EyhmOGQ4ZWRmODEwMDA2MDNiNWRjN2NlNmNkOWYxYzg4MzRjOTY1MDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7XVi6Mt8PSEOO1SkpO+aQvp39pu
kmoP/kwLDeSaKOeH6z/wa4myVYhjpnZ2ggE4jMRPK7InW1EpBcuPcL9yFNKGFzXV
OluMTWsnKs2Un3cR7LomppS9ZBsIoGrDvizo174G+tQZMf9LyGxscSjD603n8se2
5ByuZd50xp2/FTKs3HbVOLI1+N9XuFK/r+gKYNCOhZ9PxZV1ImOwenInhdEM/UoK
941Rqf/2/bu3Q2HAWUxtdidlGpKu9DjvGUlMNrRn5orpmyOBuGjILmkKhPBdcT2m
v/jiA+WKFm0UIgr4lPo/4vCqBSJEnIZ3tlOEHhlrhFtZ2G+bmQ7hRNpGSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjY7fgQAGA7XcfObNnxyINMllBTMB8GA1UdIwQY
MBaAFIGxT65E36DjNJFnQzySTJZFc5hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2JGUHJrVGZvT00wa1dkRFBKSk1sa1Z6bUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81YjEzMTktYjk4Ny00Zjk0LWIzMjYt
NTc2OTAxOWZlZmI4LzEvZ2JGUHJrVGZvT00wa1dkRFBKSk1sa1Z6bUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy81YjEzMTktYjk4Ny00Zjk0LWIzMjYtNTc2OTAxOWZlZmI4
LzEvZ2JGUHJrVGZvT00wa1dkRFBKSk1sa1Z6bUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZarcF+Ic
dhH5FGFEh3pA6xa2Spx75OZ1WkPj0HAb/V4+mpt/X0eumW5NQ6pcyCbJg4YNL7+v
qB09pZLb/L1rkmH5oHTL++RQP0sRoMLWeZfBNLDLUkD5SeTM5jUR5n1jVUzhbaZd
1/3ElYwWDaYijec4f7WBvCsHzaDUBrltSd4MRumEgp5CYMDkTRrSATbELIT2/SWQ
NPwToZ/54ALbdeAyga3xHcGK3QeKSoRmt3aZM0o2VgSr68Kby7gNPWO75CWsWwKd
nDT3CA4v50o/Yb45+Qx+iSF7r1AZs/Xtjzps9aBSo5ONShtOgKIUcFCirD+3cyVZ
MUrwIl9XoaX7RA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 06:29:13 2024 by rpki-client on console-ams.rpki-client.org