Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
File:                     gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json)
Hash identifier:          YUpLbsmIJL4bXz/3CQXRuuER4lO/PGAz4IS+TUqFzGA=
Subject key identifier:   B9:AD:B1:57:3D:87:85:87:FF:C7:6F:A0:7C:F2:08:A1:14:1C:FF:5E
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Certificate issuer:       /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial:       018FB722869A76E9365540869405CDAA1FD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
Manifest number:          1190
Signing time:             Sun 26 May 2024 23:00:44 +0000
Manifest this update:     Sun 26 May 2024 23:00:44 +0000
Manifest next update:     Mon 27 May 2024 23:00:44 +0000
Files and hashes:         1: 4gbHIbsbFjWQ-7Dvo5_frXWwo0M.roa (hash: hqfnHuvbuE4K/iGHUxtD0YaUrwaso8ohwXTqTzTlddI=)
                          2: 6qGM5zz-AcgVrO6uVnTPy_APO_Q.roa (hash: jCHqf17fi+l7Ulh5HMUuF33PUkYcL0W9jTH/YEFEtU0=)
                          3: 8yGLkmK87eRhMHKtXe9vzvHjv2o.roa (hash: IgO7/eQbV7AtyHgkTa0trzo7kvUj1LliKC4r6D+m9wE=)
                          4: GzylZC_tHN63u1EQcv2JbrCIpLk.roa (hash: LJw4axbWP0zy9DqaJc7ue8kzTxOV57gcXDdVcJb0X2I=)
                          5: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: DReoC7HO2zWU4raEM+jbfHnqvSNIWdg3gTYpYvslX+0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 23:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b7:22:86:9a:76:e9:36:55:40:86:94:05:cd:aa:1f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
        Validity
            Not Before: May 26 23:00:44 2024 GMT
            Not After : May 27 23:00:44 2024 GMT
        Subject: CN=b9adb1573d878587ffc76fa07cf208a1141cff5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f7:2f:f3:e9:93:f7:71:bc:69:03:1b:9f:cb:
                    9d:51:0b:b7:c7:96:e3:fe:41:5f:ec:27:99:6b:d3:
                    40:f1:cb:61:a2:a9:71:b5:c3:d9:b6:32:ea:82:91:
                    b2:c0:d3:4f:1e:46:9e:0b:b3:90:ca:df:89:c1:4a:
                    40:04:70:b4:6b:d7:f9:cf:a0:a2:72:e6:c8:4c:df:
                    eb:de:80:d8:ea:79:5f:cd:03:ff:64:a9:dc:de:58:
                    50:3f:57:98:f7:8f:c7:9c:91:c8:50:c7:38:c0:a2:
                    3f:36:f6:97:db:f6:ba:1e:57:b3:2d:39:3d:de:6b:
                    7d:87:01:97:3e:d9:e8:bc:08:01:51:37:0a:93:d6:
                    fc:e1:dc:95:6b:28:a4:9f:8d:04:f5:98:0d:ff:3b:
                    b2:5c:e2:35:cf:36:c6:e3:15:bc:f7:5a:85:2f:0f:
                    3e:3a:95:b3:fe:75:ca:5b:01:f9:ea:b2:e7:0b:37:
                    e4:30:e3:b1:57:c3:ff:91:c0:24:05:d8:b9:5f:66:
                    76:b7:f3:e1:e6:5c:b4:5a:e3:cc:a6:87:7c:3d:c4:
                    5b:e5:fa:fc:d3:c1:14:a9:47:b9:20:70:32:4b:10:
                    b9:7a:4b:ff:91:76:b3:87:24:a1:e6:06:9d:c5:e7:
                    34:9f:3c:36:fd:06:58:a6:c6:28:b3:3a:99:f1:04:
                    59:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AD:B1:57:3D:87:85:87:FF:C7:6F:A0:7C:F2:08:A1:14:1C:FF:5E
            X509v3 Authority Key Identifier:
                keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:da:05:7c:48:b7:53:af:b2:cd:f1:1f:88:0e:d4:8c:50:e2:
         c6:69:81:ef:8f:3a:87:ab:aa:0a:46:c8:c5:36:bd:1e:c6:b8:
         25:a1:58:39:a0:4c:14:02:63:a0:b5:02:d4:f4:14:a2:b7:04:
         ad:95:bc:f8:ef:82:28:88:68:7e:4f:43:6b:a5:74:a6:f3:89:
         4b:40:53:a6:bc:06:e9:e2:ba:38:98:7a:c1:98:f0:07:6f:6e:
         81:13:90:2c:24:51:be:cc:b4:9c:53:b9:b3:05:60:57:2a:92:
         a9:5c:28:a4:3d:86:c8:b1:27:fe:ef:fd:38:87:49:e4:7b:33:
         cb:0c:ed:9c:4f:22:f6:6f:cd:d2:11:15:d1:f2:b8:6e:eb:73:
         9b:8b:f7:c6:99:c7:c5:15:dd:f8:1b:a4:6c:06:6e:23:24:e3:
         c1:77:d4:fa:58:b7:98:b7:6b:28:07:5f:42:a2:07:b0:d9:26:
         32:33:78:f1:de:88:76:39:9c:84:2d:82:df:f2:1c:e3:4a:5d:
         32:04:0c:7b:b2:16:24:48:db:94:75:5f:88:9a:8b:86:a9:cb:
         75:8c:4e:d7:28:cd:09:4c:30:d3:6c:04:f4:bd:71:89:5b:22:
         6a:a9:3b:0b:dc:8e:8f:48:28:31:5a:8e:76:10:89:6c:e3:9e:
         75:52:7f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 08:16:10 2024 by rpki-client on console-ams.rpki-client.org