Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
File:                     GRGmWD3HmkFVGxeutDFNspMRy-s.mft (raw, json)
Hash identifier:          eilhwXndLLKGqyLNwKJhp8x+G0NhOOKQwk+d9BqQ/Po=
Subject key identifier:   C4:DF:B1:3A:4A:DB:11:EE:3C:AB:FF:12:49:65:77:87:81:23:96:8F
Authority key identifier: 19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
Certificate issuer:       /CN=1911a6583dc79a41551b17aeb4314db29311cbeb
Certificate serial:       01901CA1A67A0D4A375AF373F8784EC3928D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
Manifest number:          10DB
Signing time:             Sat 15 Jun 2024 16:01:14 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:14 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:14 +0000
Files and hashes:         1: GRGmWD3HmkFVGxeutDFNspMRy-s.crl (hash: ovBvUdJQlJToeXNtSQPOPGrX/gVQ7m+bd53T+IUxtHU=)
                          2: U-39f0iUUQP3QDyeb8YSslHfsaQ.roa (hash: LgtSZ3SVYAkBZpsRcEB12Jix6bi0apLYKyw4hYDeD34=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:a6:7a:0d:4a:37:5a:f3:73:f8:78:4e:c3:92:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1911a6583dc79a41551b17aeb4314db29311cbeb
        Validity
            Not Before: Jun 15 16:01:14 2024 GMT
            Not After : Jun 16 16:01:14 2024 GMT
        Subject: CN=c4dfb13a4adb11ee3cabff12496577878123968f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8c:fc:05:4c:a3:f2:e0:4d:03:a7:2e:56:33:
                    9d:c6:38:9f:39:e0:8f:1e:9b:a6:09:8d:a8:3a:0a:
                    28:6b:6d:89:31:c3:2a:4b:7e:17:d3:e8:0e:24:e1:
                    de:e0:87:57:df:e9:07:a9:f3:ac:e2:2d:a8:ef:e0:
                    f5:55:f4:d1:15:33:db:69:f6:4d:07:54:93:85:ee:
                    b9:ce:36:54:c4:b4:68:60:e4:f3:c1:06:68:5c:23:
                    0a:1a:29:26:6c:5b:19:b5:1c:ae:2d:e1:de:17:85:
                    d1:f1:e0:91:a3:6a:cf:4e:85:7f:50:88:8f:13:3d:
                    2b:ed:95:5e:be:ab:24:4f:34:8c:3e:73:30:4f:a5:
                    4d:43:cd:a5:79:ec:7d:23:a8:a8:95:22:bd:1f:aa:
                    dd:30:b6:54:e3:95:0c:b8:c2:e4:db:72:0a:cf:de:
                    bd:da:3a:4b:f1:13:a3:da:85:0d:6b:08:80:b9:bb:
                    07:ae:e1:ff:3c:16:8c:d3:fb:05:75:04:f9:d9:2b:
                    22:01:c9:4b:a8:08:3e:64:fa:21:d6:03:46:a3:40:
                    11:99:a4:cf:b1:cb:44:b7:57:db:eb:2a:fe:d6:4a:
                    8a:5a:1c:2e:50:f7:af:2e:46:56:27:35:f3:fa:43:
                    28:b1:94:d9:be:9d:c2:9d:86:cd:63:ff:2b:41:9d:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DF:B1:3A:4A:DB:11:EE:3C:AB:FF:12:49:65:77:87:81:23:96:8F
            X509v3 Authority Key Identifier:
                keyid:19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:cd:47:93:70:3e:9c:76:c7:3c:8b:92:21:d8:6f:89:f2:a0:
         3a:97:22:0f:f0:6a:2d:01:0e:ea:63:2a:0e:ec:55:f8:fd:b3:
         05:e0:51:3a:fb:6a:db:5d:f0:1a:ff:ea:66:20:0d:c3:45:dc:
         40:d4:5d:b5:fe:7b:f1:e6:ed:4f:08:4e:48:35:03:26:75:4d:
         74:cb:3a:7c:7a:44:48:f8:af:aa:11:cd:b3:a8:86:63:3d:ba:
         9f:38:a7:bc:91:f2:11:3f:1c:1c:2a:41:e4:6b:e0:b1:8c:38:
         5e:48:92:08:86:cb:ee:b7:8e:b5:a4:f8:34:33:40:5e:d0:22:
         67:90:1c:3f:5e:93:5b:e6:37:9e:08:33:40:a4:4f:ae:1f:77:
         07:cb:09:79:df:92:b0:7d:18:0d:c4:f1:92:74:0c:93:98:82:
         4d:76:26:22:cb:f5:bd:a1:73:15:88:a8:df:a0:db:ae:7b:23:
         41:e9:5e:50:3f:bc:8b:ea:7d:05:d8:8e:e0:bd:c2:f8:5f:79:
         a8:bd:a4:ba:d1:41:45:fc:20:4b:fc:59:89:5a:13:a1:ad:21:
         21:fa:f5:7d:5e:40:ed:92:d5:07:ee:66:84:ca:f2:1e:34:34:
         f7:9a:d3:c9:b3:90:4e:92:2c:1a:d9:e9:77:f9:d0:41:5d:44:
         85:98:e8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:43:10 2024 by rpki-client on console-fra.rpki-client.org