Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
File:                     G02ANz4-NNAKhbhBKNQFOZvPikU.mft (raw, json)
Hash identifier:          75SXK6u7O3rBmd31Hwn93vjxCPmBozg9i6FwhpNzD0E=
Subject key identifier:   D6:18:DD:FF:89:B1:FB:21:7C:59:95:10:06:7D:D0:F4:A6:1D:B6:C6
Authority key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
Certificate issuer:       /CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Certificate serial:       01901DEBD56B17DBB52822795BF15FA6B56A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
Manifest number:          0198
Signing time:             Sat 15 Jun 2024 22:01:53 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:53 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:53 +0000
Files and hashes:         1: G02ANz4-NNAKhbhBKNQFOZvPikU.crl (hash: sk4uyI8GfEO0LIFYvFGq1KiRy9tACl4zWZPJDZ11q+E=)
                          2: YcQVJAJ7RQcDxHkFcm0NnsK-zeA.roa (hash: R+Au9rvYtTsYBXdOfFaLDnyD2zSxBaAeIC6V1SToUnE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:d5:6b:17:db:b5:28:22:79:5b:f1:5f:a6:b5:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
        Validity
            Not Before: Jun 15 22:01:53 2024 GMT
            Not After : Jun 16 22:01:53 2024 GMT
        Subject: CN=d618ddff89b1fb217c599510067dd0f4a61db6c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:2b:d8:75:4b:85:11:85:27:1c:57:94:bf:
                    cf:fe:29:2e:b3:3b:eb:22:f3:32:4f:0b:a0:d5:35:
                    49:16:70:3a:e0:45:77:43:8f:bc:5a:76:8c:b7:88:
                    ae:33:63:cc:d2:74:16:f1:5f:27:7f:2f:5a:01:7c:
                    2a:91:92:a8:27:23:cd:75:03:68:3f:de:59:99:e7:
                    4d:3a:ad:7d:1f:b1:8b:e7:c8:4e:d9:8b:9e:b8:7d:
                    d6:1e:85:a3:2d:d8:37:ec:9a:79:98:80:09:bc:84:
                    be:34:8e:15:8c:c9:22:f1:90:ac:10:0a:0a:20:eb:
                    7c:b0:ae:15:94:e6:0d:0b:81:93:31:d4:24:b5:3f:
                    03:69:e2:30:8f:2e:46:f0:16:04:4f:09:78:d5:b4:
                    83:f0:8f:69:b3:dd:e5:7c:1a:66:84:0a:2a:07:34:
                    1c:31:99:b8:c2:be:cb:c2:07:ba:33:53:9a:b7:fd:
                    e3:1f:8b:7b:a4:67:dd:fc:c1:df:c6:74:d8:e5:9e:
                    7e:3d:b5:d7:e4:ea:65:d6:68:2e:04:15:7e:b7:a7:
                    6a:f3:63:a7:15:c2:c2:ba:9b:d9:e3:3b:50:c0:49:
                    3b:67:63:67:7f:c3:14:64:46:01:b1:0d:06:17:e1:
                    21:54:2d:62:09:9d:95:33:f2:a0:82:d8:88:ae:5b:
                    13:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:18:DD:FF:89:B1:FB:21:7C:59:95:10:06:7D:D0:F4:A6:1D:B6:C6
            X509v3 Authority Key Identifier:
                keyid:1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f3:54:f3:e7:1e:7f:ee:77:8d:c1:8d:4f:dc:54:aa:44:46:
         b8:6f:73:ec:8f:05:c6:06:fa:81:fb:a8:4e:2b:69:e8:1e:d7:
         67:f5:03:64:a1:1d:ad:b1:4c:b2:41:bc:a2:39:91:3b:80:4d:
         f0:b1:ec:be:44:02:64:be:e0:35:39:45:19:0e:52:21:9c:41:
         f3:80:23:43:fa:f7:a1:e8:5b:a3:23:d2:3a:27:a4:ee:5b:ff:
         bb:ad:98:e2:75:b5:6f:0e:5f:03:85:ec:6a:ca:7e:e2:d1:ef:
         9e:b1:6e:c3:d5:6d:79:d0:e7:a0:db:24:eb:80:8f:0f:28:2b:
         99:1a:6e:65:d4:71:4e:cf:ab:33:0e:9a:ec:b8:3d:e0:2a:c8:
         3f:52:e8:a2:55:1f:43:ca:4d:20:24:20:02:ad:1a:f0:1e:28:
         be:71:4d:ea:15:bd:b1:68:08:63:0c:7b:e4:9f:79:6a:4c:f9:
         df:2d:33:dc:92:fe:d0:a6:e2:47:2f:d5:b3:94:13:92:00:a8:
         c7:0e:a0:31:e6:cc:3a:24:30:9f:b1:56:76:39:c6:5f:bd:de:
         ed:44:59:11:ca:76:aa:ca:46:b9:c8:f7:46:b3:d2:67:61:4d:
         f7:c8:30:0d:60:fe:2c:a8:82:c7:df:f4:57:07:ec:54:42:44:
         02:5d:1b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:34:59 2024 by rpki-client on console-ams.rpki-client.org