Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File:                     GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier:          mEPlU7cie7jNAkpxm6d8iN/eRQqpOiYg5SZqCw3traA=
Subject key identifier:   22:C8:6C:E0:E3:08:99:9D:B3:2E:12:81:6B:5B:78:61:B3:43:4E:7F
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer:       /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial:       01901C6A3BA4F0E1A2F61C664B786AFB2FD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number:          0359
Signing time:             Sat 15 Jun 2024 15:00:42 +0000
Manifest this update:     Sat 15 Jun 2024 15:00:42 +0000
Manifest next update:     Sun 16 Jun 2024 15:00:42 +0000
Files and hashes:         1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: DVJgal764gy7exHdB8L68Y931FMSr1QV29lyh7dLR3E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:3b:a4:f0:e1:a2:f6:1c:66:4b:78:6a:fb:2f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
        Validity
            Not Before: Jun 15 15:00:42 2024 GMT
            Not After : Jun 16 15:00:42 2024 GMT
        Subject: CN=22c86ce0e308999db32e12816b5b7861b3434e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:07:64:66:0b:ad:da:6c:cd:f5:d0:e0:a0:0c:
                    59:e0:92:8c:35:b0:d4:6b:62:b5:76:f3:08:cc:9f:
                    f9:a3:2e:15:8f:c3:77:bb:39:68:68:1c:e0:39:3f:
                    cb:2c:e3:c4:d4:06:e9:9a:45:3b:5f:ce:3e:93:08:
                    ca:e4:e2:fc:28:4e:c6:36:20:58:98:81:b9:5a:ee:
                    76:61:05:21:fc:d6:90:64:38:e3:41:c7:80:34:f8:
                    1b:16:6f:56:dd:48:d2:1a:7e:72:68:41:0f:c2:31:
                    11:0b:7f:ee:00:a3:fb:df:03:8c:c3:de:94:25:e0:
                    23:c9:d9:db:4a:4e:92:d0:54:27:ac:06:c8:ef:b2:
                    6b:e2:d0:cd:f7:c6:66:7a:38:b3:83:a2:0c:fb:4f:
                    75:05:27:15:aa:18:a9:26:77:00:22:11:b7:4a:2c:
                    25:83:29:60:65:0d:02:85:4c:61:7e:0e:2c:e3:42:
                    68:d8:09:c7:fe:48:55:d8:a2:9b:42:96:14:b7:70:
                    d5:0b:6d:ab:24:fb:9f:00:c0:75:c1:05:45:81:58:
                    1c:33:e5:d2:5e:dd:e4:b3:8f:35:ee:81:df:f2:95:
                    ec:aa:89:74:94:f0:f0:c1:39:fc:24:64:1b:0b:cd:
                    69:00:33:69:a4:53:1b:f3:e6:9d:90:35:15:ea:c3:
                    6a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C8:6C:E0:E3:08:99:9D:B3:2E:12:81:6B:5B:78:61:B3:43:4E:7F
            X509v3 Authority Key Identifier:
                keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:6f:3f:5f:61:fb:47:c4:b3:2d:6a:cd:b3:c6:23:b1:1f:dc:
         c1:3c:b9:2b:53:e3:f5:c6:6d:05:f0:69:2d:67:73:b1:8e:91:
         f9:ca:f6:fb:c2:bd:13:bd:1f:4b:e1:0c:ee:1c:15:1c:31:8d:
         c5:09:3c:4a:cd:0a:09:ce:3f:d2:ba:4d:92:f0:53:4a:f1:1d:
         78:06:7f:4f:08:5c:94:39:b9:1f:88:56:f3:a4:1f:22:59:21:
         c9:3e:3d:e5:5e:cc:f7:64:68:ee:fe:41:a8:34:67:94:6d:c9:
         85:3f:09:f8:c0:34:6c:e5:e0:6b:ab:c4:13:fc:35:fb:77:35:
         e9:d3:9c:9a:f2:68:e1:b7:cb:20:37:c9:d8:c5:c5:d9:9f:9c:
         b6:a0:06:ad:06:12:73:39:3c:80:b9:e7:5d:35:03:87:41:ee:
         7f:27:ee:ec:db:bf:03:06:3e:91:df:f1:49:39:bc:45:1c:db:
         2b:80:26:4f:50:70:1d:e8:7c:c5:51:b9:12:46:f3:78:8d:d1:
         fa:29:81:a6:3b:67:8c:42:28:45:69:b6:e0:b7:a1:90:4b:b0:
         33:6e:4f:3c:f8:e6:91:86:cf:cb:49:07:27:25:a2:b6:35:84:
         0a:09:88:04:d4:dc:7d:da:56:45:d8:29:2a:c7:0d:2b:10:b8:
         3a:9e:9d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:39:29 2024 by rpki-client on console-fra.rpki-client.org