Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File:                     GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier:          gaXiw4Ha191fgHgUBwqNydqwdzXMxy2ujIcXaTbcxUQ=
Subject key identifier:   4E:56:DA:79:E7:5E:0F:C1:A7:3B:56:65:D1:DE:D4:B2:EA:3C:BE:FD
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer:       /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial:       01901A7C883289A11CC7535BC0CFEA1C189D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number:          0358
Signing time:             Sat 15 Jun 2024 06:01:27 +0000
Manifest this update:     Sat 15 Jun 2024 06:01:27 +0000
Manifest next update:     Sun 16 Jun 2024 06:01:27 +0000
Files and hashes:         1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: HUV2shxuh1wfU3v17GRfJx15NEWqaTQ/sOMON4evc2w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1a:7c:88:32:89:a1:1c:c7:53:5b:c0:cf:ea:1c:18:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
        Validity
            Not Before: Jun 15 06:01:27 2024 GMT
            Not After : Jun 16 06:01:27 2024 GMT
        Subject: CN=4e56da79e75e0fc1a73b5665d1ded4b2ea3cbefd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:ac:1f:ed:bf:a0:c7:26:80:00:d9:f6:2d:
                    6f:03:a3:14:49:c3:9a:6b:41:a4:3a:0a:d3:6e:7b:
                    40:d5:a9:e2:03:b3:3b:f5:0a:7f:44:13:93:54:ee:
                    6e:94:88:c8:16:5f:ed:63:4e:34:1b:f2:e5:34:31:
                    dd:a4:31:dc:b3:76:24:eb:3e:a5:dc:23:67:46:61:
                    0b:f7:54:3b:a0:1c:56:a2:8f:67:9c:dc:d2:1c:29:
                    fc:62:19:3d:f9:09:5d:e2:e5:1e:28:89:46:e4:ee:
                    24:3d:45:ae:cd:90:00:74:79:5c:7f:4a:ed:17:2c:
                    39:e4:86:99:52:cc:16:06:be:e3:78:39:de:80:89:
                    30:79:bd:85:1d:12:ce:d6:d0:c0:4b:dc:63:b7:76:
                    b8:cc:eb:76:eb:fe:b9:1e:96:08:d7:d2:63:b1:c3:
                    a8:34:e0:fb:5c:ad:c4:8d:0a:b5:9b:c5:41:2a:7b:
                    a6:79:3f:1d:42:96:5e:9d:3a:c1:29:8e:77:46:97:
                    0d:92:79:02:28:85:6f:a0:76:7c:6a:38:7a:bb:1f:
                    86:b7:1b:59:54:5b:7b:88:37:8d:4f:f0:ea:d7:9d:
                    f3:30:6d:b0:f7:3b:14:7f:de:20:aa:6c:c9:86:ce:
                    17:2f:74:81:72:8e:41:04:d1:eb:a4:29:f4:20:af:
                    39:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:56:DA:79:E7:5E:0F:C1:A7:3B:56:65:D1:DE:D4:B2:EA:3C:BE:FD
            X509v3 Authority Key Identifier:
                keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:77:20:a2:bd:06:c1:24:fd:00:b7:e5:51:dc:2a:b1:14:d0:
         8e:42:d5:d1:5e:17:68:fa:7d:26:ad:f7:4b:cd:50:be:60:35:
         19:c0:a1:81:b7:f4:9d:bf:63:47:61:bb:89:4d:6b:25:2d:35:
         00:3a:84:db:40:06:d7:34:e6:31:0b:44:59:0c:9e:d6:d6:16:
         05:da:48:03:f4:a8:a5:0b:67:76:92:35:2a:4c:46:70:84:bb:
         e3:55:9e:05:bb:59:20:51:f3:d9:ee:87:09:cf:22:50:d5:04:
         e3:a5:fb:f3:02:a7:55:80:8e:59:08:28:1e:8b:d9:26:5e:fc:
         64:02:e0:57:0c:08:d1:17:69:b2:75:b7:95:05:78:5b:ae:76:
         2c:53:ba:5b:0f:6a:b3:66:f5:53:36:af:c6:be:2e:7c:d6:79:
         d7:04:bc:4a:5c:e0:c6:3a:6d:1a:f9:90:bb:2b:2a:0c:f9:de:
         26:26:63:a5:d9:4b:6b:d3:66:28:b0:d3:2a:86:41:d8:bb:26:
         7e:88:4c:99:20:15:22:29:0a:7d:7d:89:72:ab:62:db:5c:a2:
         61:9c:63:e7:db:c8:3a:fc:c5:db:14:d3:8c:51:e7:18:1d:2d:
         51:5b:f9:5b:0e:81:9d:ae:64:c7:37:40:17:5d:4a:bb:56:00:
         b9:11:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:24:18 2024 by rpki-client on console-fra.rpki-client.org