Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
File:                     GrXCK_U7cFx6K7JzunPj8MBZW3s.mft (raw, json)
Hash identifier:          N25UnJ61R8AnqWlE9Fbfv6JNmvnoAE+idScWcL6xDZc=
Subject key identifier:   FD:42:4F:6B:61:F6:60:C2:26:D1:AE:C6:C0:1D:AC:54:45:4D:6A:1A
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Certificate issuer:       /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial:       01901E901A89EDE3F6AA773190A0844387CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
Manifest number:          11CC
Signing time:             Sun 16 Jun 2024 01:01:18 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:18 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:18 +0000
Files and hashes:         1: CkIHK0wA0UJm0dYjOPQNNyFVzsU.roa (hash: sAnhKZ0A/ayG/Eb2hV/3xCgSIsCbOguMXddp2081HdM=)
                          2: GrXCK_U7cFx6K7JzunPj8MBZW3s.crl (hash: eatppGB2AC5zmkPlZ2fOILrNaGYE67XpII1CgUcOfAw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:1a:89:ed:e3:f6:aa:77:31:90:a0:84:43:87:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
        Validity
            Not Before: Jun 16 01:01:18 2024 GMT
            Not After : Jun 17 01:01:18 2024 GMT
        Subject: CN=fd424f6b61f660c226d1aec6c01dac54454d6a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6a:ac:41:65:ef:dd:49:7f:01:06:57:82:91:
                    6d:6e:96:de:fb:c3:8c:de:74:12:86:e3:32:a0:6e:
                    5b:31:be:b7:8b:fd:ac:f0:d3:37:06:19:c3:df:54:
                    ce:ca:52:b4:3c:f9:61:85:e5:8f:10:f5:62:03:64:
                    53:16:a1:4e:e4:45:ab:9b:00:c0:0d:ca:94:93:51:
                    bc:3e:51:a7:ce:1e:e4:87:fe:5b:1e:29:36:79:01:
                    cc:32:e3:cc:b2:5e:2d:7f:8e:53:1d:56:0a:1a:ad:
                    b7:9a:ea:1a:ff:e1:4b:7a:4d:7f:60:a1:8b:bd:2a:
                    94:47:9f:18:c9:a3:ab:24:05:ba:85:ad:e7:69:1b:
                    65:8c:fd:d8:31:a7:2f:a5:71:6a:05:3a:aa:44:57:
                    99:9d:b8:d2:0e:72:6f:17:3e:bf:10:92:5f:6d:6b:
                    54:f3:48:88:7b:db:5f:1f:92:f4:37:91:81:67:0d:
                    60:64:9c:92:3b:26:f4:52:10:ac:66:b4:62:48:f0:
                    4c:aa:7d:50:b8:37:ac:af:ce:4d:37:d8:6b:f2:3d:
                    4b:12:79:19:46:e9:db:ff:6b:31:bd:51:0c:47:b0:
                    be:b8:e6:a3:16:42:4f:cf:96:a7:8e:8c:a6:77:a8:
                    e7:00:f4:0d:c4:c9:49:a3:5a:91:ba:bf:aa:89:da:
                    cb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:42:4F:6B:61:F6:60:C2:26:D1:AE:C6:C0:1D:AC:54:45:4D:6A:1A
            X509v3 Authority Key Identifier:
                keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:61:f4:09:f5:62:f9:44:3a:9c:b7:7f:cf:0f:18:59:71:51:
         92:1b:0d:b6:3f:9d:15:25:fb:17:47:62:78:fd:4c:60:4a:f8:
         32:36:e8:f5:3a:7f:f8:5d:81:0e:ce:5f:d3:79:1a:15:2c:1b:
         3f:1c:7f:8a:76:47:ff:da:b5:f8:ba:c6:96:82:ac:c6:b2:ec:
         11:c7:5c:f8:bb:4a:df:59:ea:94:f1:dd:dc:15:ab:b0:80:8d:
         d4:23:49:6c:d2:f5:6b:cc:b7:48:42:b8:cd:75:5d:17:8f:3e:
         ad:11:c6:82:72:71:24:f9:8e:17:3b:de:21:81:8e:f3:68:f0:
         e2:7f:3b:43:b3:1d:64:bc:0c:62:5b:bc:58:1f:69:3a:14:f3:
         0b:01:e7:6e:a4:d0:12:b2:34:ad:cd:f9:ae:03:03:9d:33:2b:
         21:82:1c:e9:fd:76:85:56:22:98:15:d5:96:04:9e:d3:4a:fd:
         c5:e3:a7:98:0c:23:74:31:d5:6b:e2:50:b1:1c:0f:c0:f4:f3:
         1c:a4:56:84:60:c1:66:f6:59:99:c1:78:99:c4:08:0c:7a:6f:
         61:92:8d:1c:9f:cd:77:ac:c1:79:0d:94:56:31:cd:43:94:63:
         c7:6d:58:33:4b:db:fe:eb:ce:af:c6:af:83:d9:58:b0:66:ae:
         79:57:b2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:58:25 2024 by rpki-client on console-fra.rpki-client.org