Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
File:                     gqo-xYuoRtJ6eXERxVhRUwANug4.mft (raw, json)
Hash identifier:          0xEYePc+NK2sovMJ0jvENbTuHBltQX6OdXgBiQLlHoo=
Subject key identifier:   34:08:2F:F7:65:CA:DD:7E:00:72:93:65:82:1D:5C:DD:3D:7E:90:6C
Authority key identifier: 82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E
Certificate issuer:       /CN=82aa3ec58ba846d27a797111c5585153000dba0e
Certificate serial:       01901BFE0B746F5CA6E04D643D137869B2CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 13:02:32 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:32 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:32 +0000
Files and hashes:         1: gqo-xYuoRtJ6eXERxVhRUwANug4.crl (hash: V+qsIUiWPB/eUR100AnSkShQCsEbEM2hf04r+/bPY+U=)
                          2: wSuzBERApYUl4E8G_7_FFLuPPFQ.roa (hash: NndnvYylUz/Y8YMv1lU2J6lhSvuw76vkQx8WWnIrPcc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:0b:74:6f:5c:a6:e0:4d:64:3d:13:78:69:b2:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82aa3ec58ba846d27a797111c5585153000dba0e
        Validity
            Not Before: Jun 15 13:02:32 2024 GMT
            Not After : Jun 16 13:02:32 2024 GMT
        Subject: CN=34082ff765cadd7e00729365821d5cdd3d7e906c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:61:98:e0:4b:f4:56:0c:8b:e2:36:ad:ce:48:
                    2b:cc:49:2e:b5:78:84:f1:fb:00:08:4e:98:59:5c:
                    e5:d1:b0:2a:bc:5e:6a:ec:09:f7:97:74:f5:d3:51:
                    af:4e:ed:88:16:3f:8f:7c:30:51:92:ba:92:c8:d6:
                    04:9d:31:9e:19:31:00:ed:c0:cd:1f:8a:2f:7a:8a:
                    9c:b1:20:9f:60:8f:e0:a4:8f:c2:00:e4:1c:0b:bf:
                    cf:6d:62:05:80:a2:ea:3f:57:a3:f5:58:53:b3:6b:
                    be:1a:bd:6d:cb:69:25:b2:04:ad:af:5a:39:4f:60:
                    65:f7:8f:64:f1:3c:c4:10:9f:ec:68:21:c2:a1:ae:
                    12:a2:a7:44:b5:80:aa:f3:01:c9:15:06:db:36:d5:
                    f4:77:b8:b6:9f:40:5c:1a:66:86:bc:71:23:5e:30:
                    d7:49:07:65:59:22:ba:01:16:98:d9:70:fc:88:f8:
                    de:e6:76:76:ab:3b:fd:b8:74:22:d0:8e:bc:36:de:
                    94:94:d5:2d:51:3e:b9:9b:f3:ed:7d:aa:ec:6a:af:
                    2e:cd:6d:aa:32:25:ad:09:8a:3c:a6:7a:e9:dc:be:
                    7d:68:b6:dd:c8:65:5e:b1:bd:26:56:ba:dd:23:33:
                    bb:6c:2b:f9:74:5e:79:6c:6e:ab:aa:c3:cf:2b:9d:
                    61:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:08:2F:F7:65:CA:DD:7E:00:72:93:65:82:1D:5C:DD:3D:7E:90:6C
            X509v3 Authority Key Identifier:
                keyid:82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:13:d9:c8:35:9a:17:dc:a5:1c:56:a1:1e:e1:7d:9e:6e:f1:
         05:18:ed:40:c2:8b:79:47:e2:52:4d:36:61:22:68:4b:28:ef:
         7b:be:e7:6f:d6:da:97:8c:63:29:73:b7:c1:68:16:35:f7:68:
         74:99:0c:25:da:d7:e7:44:d0:ca:14:d5:74:df:a6:52:5f:8c:
         a4:3b:4a:82:b8:20:05:d9:bc:ac:67:c0:61:f8:01:1c:71:2f:
         21:91:81:5e:d4:af:5a:6d:e2:52:7b:23:71:5d:09:05:5d:37:
         94:3c:a1:de:d7:57:1c:fc:67:9c:4c:dd:d9:4d:ad:e5:17:b3:
         e3:27:62:76:c4:00:02:27:70:02:cf:07:71:1d:4c:b2:e6:7d:
         3a:89:c2:1d:d0:44:0c:54:52:32:d1:e7:0a:f9:a8:89:ae:40:
         83:4a:87:f7:cf:3d:d2:17:f2:a0:09:43:43:12:47:83:a5:a7:
         c9:67:64:21:26:eb:c8:af:86:e9:85:28:aa:f4:68:67:a9:5a:
         14:db:02:d2:f4:91:b6:f2:b6:9e:ff:18:42:8b:5e:45:0a:33:
         72:1c:64:08:b8:0d:d6:a6:3f:47:2e:bb:4c:b6:0a:81:5b:37:
         36:57:99:79:ca:f4:dc:6b:d1:28:92:6c:00:6f:50:aa:44:c7:
         76:2e:5c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:24:47 2024 by rpki-client on console-ams.rpki-client.org