Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
File:                     GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft (raw, json)
Hash identifier:          vL2LyZDIRLPNmwUqvZDetH7P5G4bXXqansKZK2bY9TU=
Subject key identifier:   B7:02:3B:67:26:D6:63:80:92:9F:14:A9:78:55:42:3F:CD:0C:C7:1D
Authority key identifier: 18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
Certificate issuer:       /CN=188fb0985e360c38f8658d56687ca862d9408d90
Certificate serial:       01901EFD658551D234690C438E00E5C6DA4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
Manifest number:          0E38
Signing time:             Sun 16 Jun 2024 03:00:41 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:41 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:41 +0000
Files and hashes:         1: GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl (hash: DzAWIwLxbaMfAHi7cqosJ//UPHzQ1uk6WHztxpb/Q0U=)
                          2: wuhX8oITFzu7BnpahOHbcGXmIS8.roa (hash: cCrTMLFRYSOxlgn5aQy6ZvKllgaNe+m7D1cJYZA5uQg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:65:85:51:d2:34:69:0c:43:8e:00:e5:c6:da:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188fb0985e360c38f8658d56687ca862d9408d90
        Validity
            Not Before: Jun 16 03:00:41 2024 GMT
            Not After : Jun 17 03:00:41 2024 GMT
        Subject: CN=b7023b6726d66380929f14a97855423fcd0cc71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fa:6b:0c:d2:63:e1:03:a9:aa:e6:9a:fc:39:
                    72:d1:d6:e9:08:ac:4c:7c:b4:35:41:d5:f6:72:70:
                    ac:99:7a:ac:3e:6a:7b:b0:56:a5:9b:0e:4f:65:50:
                    06:49:bf:eb:ba:bb:0e:fc:43:fe:a1:5b:50:63:10:
                    a2:7d:c5:ff:63:81:53:a1:9b:3a:ce:9c:8b:ed:ad:
                    1f:3f:6d:96:c8:22:59:ed:33:a9:14:99:e0:29:4d:
                    5a:0b:b8:a2:61:6e:94:75:85:ff:c1:5a:ca:6e:46:
                    aa:c8:d5:3d:d7:92:d3:cf:a0:c0:98:18:4b:3d:fe:
                    0c:92:05:d3:7b:dc:50:9f:07:33:cf:c0:2e:e8:d0:
                    ac:2a:11:64:3a:68:c5:8b:de:5b:67:da:00:b9:c1:
                    0d:f2:93:32:9c:30:97:a0:33:bd:60:1d:8b:6c:4b:
                    38:62:0a:d9:f1:70:49:0e:ab:20:de:03:07:2e:c1:
                    d4:40:8d:19:54:d1:9b:d6:f0:9d:cf:24:de:96:f2:
                    9e:a5:7c:9a:94:27:45:c0:79:d3:2f:1f:ba:a8:56:
                    c6:0e:b7:a5:52:25:c5:98:7c:8e:35:21:b3:9e:3b:
                    51:a8:52:1d:99:36:ca:92:a1:3a:02:8d:cb:a4:3a:
                    05:9c:4f:8a:7d:76:16:75:30:e7:c4:50:74:bc:28:
                    27:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:02:3B:67:26:D6:63:80:92:9F:14:A9:78:55:42:3F:CD:0C:C7:1D
            X509v3 Authority Key Identifier:
                keyid:18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:98:33:d9:81:a6:fc:4a:67:4c:41:c3:8e:62:5c:45:98:bd:
         af:9c:2d:e8:f3:e9:6e:f5:71:47:1d:81:a1:ea:f1:8e:2f:07:
         89:9b:00:7f:0c:a2:36:0a:84:9a:73:d2:1e:b6:55:80:9e:a4:
         9a:f2:94:1a:d8:0c:b8:dc:96:d6:3e:2c:25:1a:6d:b6:0c:66:
         d5:25:dd:7a:85:26:1a:08:53:95:a9:d5:ee:d7:40:a6:c2:cd:
         f1:72:db:7b:27:79:6a:4b:05:13:e5:a9:dc:13:f7:d4:a7:e1:
         8f:4d:45:54:94:16:3f:e0:9f:00:7a:f7:a1:20:e8:24:25:67:
         0f:33:9e:20:7a:2e:66:d8:22:6a:43:2f:d8:58:35:2a:aa:4a:
         c1:eb:71:1e:e1:23:74:b4:b6:95:05:f6:f7:4d:ed:8f:21:3e:
         e7:29:fc:d3:bf:75:96:f6:93:99:22:08:01:21:07:a1:92:16:
         ad:e1:29:49:26:e2:58:71:29:e9:89:fa:06:94:cf:9a:39:f1:
         c6:1b:bf:b9:83:0c:d7:3f:6b:62:a2:09:e4:30:fe:07:3e:e6:
         90:e6:9d:e0:6d:c6:8c:cc:40:e3:dc:af:f6:54:95:26:75:e9:
         71:a8:fd:f9:ab:bf:14:47:f8:ed:06:c5:6f:b1:ce:05:92:1d:
         a3:0f:72:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:46:39 2024 by rpki-client on console-fra.rpki-client.org