Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.mft
File:                     Ga7XMnKJFnAJuWxA44gK3maACj8.mft (raw, json)
Hash identifier:          yu9YJsiTRAEk/i/YUwxG786d7yWyGznvuB1P87ZlhHg=
Subject key identifier:   29:92:9A:96:0C:BA:17:A0:FE:A8:67:A7:A3:7B:C3:53:2D:F2:3C:5D
Authority key identifier: 19:AE:D7:32:72:89:16:70:09:B9:6C:40:E3:88:0A:DE:66:80:0A:3F
Certificate issuer:       /CN=19aed7327289167009b96c40e3880ade66800a3f
Certificate serial:       01901EC69C00712E38584210D07E9690D74B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ga7XMnKJFnAJuWxA44gK3maACj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.mft
Manifest number:          0859
Signing time:             Sun 16 Jun 2024 02:00:50 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:50 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:50 +0000
Files and hashes:         1: Ga7XMnKJFnAJuWxA44gK3maACj8.crl (hash: nWO+cRCBI2N5ljv5CC3da0rguGda+UGcshhuGoGd/gM=)
                          2: o9Wow6kC1jQPUQ45bI2bbxLFrlY.roa (hash: duJSB3HlrJUcSu+CCQ0txCqS1lnv2uSTuUMJl+oCDD4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ga7XMnKJFnAJuWxA44gK3maACj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:9c:00:71:2e:38:58:42:10:d0:7e:96:90:d7:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19aed7327289167009b96c40e3880ade66800a3f
        Validity
            Not Before: Jun 16 02:00:50 2024 GMT
            Not After : Jun 17 02:00:50 2024 GMT
        Subject: CN=29929a960cba17a0fea867a7a37bc3532df23c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:22:f0:82:af:72:9d:12:b9:49:51:82:07:b6:
                    49:5d:78:aa:a0:0e:9e:2c:6a:2e:f0:5b:8a:7c:61:
                    5d:0b:64:5e:05:31:c4:8c:9d:48:4d:7e:a0:0f:5a:
                    38:b8:36:a4:a1:6f:34:fb:af:15:64:0a:5d:a7:db:
                    99:3a:76:af:12:9f:97:59:ef:ff:1d:cc:c3:bb:5c:
                    38:19:56:b6:f2:f7:8f:22:55:c5:02:2c:29:63:38:
                    1f:1e:97:07:8d:2c:4d:9a:53:20:7d:ab:2e:87:4e:
                    55:4f:74:19:9c:5f:d4:4e:39:61:c1:94:74:26:ca:
                    72:af:7d:35:d3:11:fd:ad:e4:0e:18:5c:ee:14:42:
                    1c:46:41:7f:91:91:56:26:53:ab:53:0d:64:1c:de:
                    8c:ca:c5:68:d2:3e:d9:da:81:87:45:87:a3:67:c7:
                    b9:24:c4:0e:cc:9f:5f:3d:c0:c8:e5:ca:f6:e9:cd:
                    75:95:08:31:60:9a:f2:90:dc:4b:f6:9e:c9:ad:50:
                    f8:23:1f:3e:ce:49:3f:06:27:74:3b:a1:d7:80:cd:
                    fd:19:eb:5b:07:31:a0:07:0d:f0:5d:fa:b4:49:15:
                    42:e8:f0:f1:cd:fb:e4:5b:7d:05:e6:84:ad:cd:d0:
                    5e:1f:fc:47:e0:10:df:06:f4:6c:e9:bf:62:74:90:
                    e4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:92:9A:96:0C:BA:17:A0:FE:A8:67:A7:A3:7B:C3:53:2D:F2:3C:5D
            X509v3 Authority Key Identifier:
                keyid:19:AE:D7:32:72:89:16:70:09:B9:6C:40:E3:88:0A:DE:66:80:0A:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ga7XMnKJFnAJuWxA44gK3maACj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:59:c2:5d:6b:02:5f:5b:32:75:ba:88:30:0f:26:88:4a:77:
         aa:5e:80:ab:dd:c5:62:fa:a0:a8:8a:2c:79:bb:62:8c:8f:84:
         1a:d2:c3:02:2d:bc:72:a3:86:7e:84:b1:19:fe:b9:0c:7c:ae:
         ca:b5:c1:f3:fd:d7:f0:0a:b8:a2:6d:5d:0b:37:79:89:0a:fe:
         f4:ab:6f:d4:84:03:ea:e9:1e:9a:ee:4c:10:76:63:49:9f:47:
         42:78:ad:eb:e4:0c:ca:83:d4:b7:cc:4c:a1:64:0f:36:f6:a5:
         ef:7e:cf:d3:8e:66:8f:15:b5:93:27:99:8b:ff:4b:3a:c5:ba:
         5e:4d:57:90:10:b8:c3:22:5c:45:b9:ea:26:ff:a1:8b:88:5a:
         a1:59:67:5e:28:aa:56:ed:27:27:65:f5:2e:59:2b:41:a0:87:
         b4:d9:a9:65:a3:5e:c7:9d:49:e4:16:fb:ae:a3:2d:26:11:be:
         a4:48:47:dc:ca:40:17:de:ba:eb:83:f3:6e:4e:8b:7d:40:0d:
         86:91:40:29:05:54:f6:6b:1d:4e:0e:57:13:2c:e0:73:3f:e5:
         4d:cd:0e:96:be:99:d5:1a:aa:05:ea:83:7b:4a:8a:0c:23:22:
         14:ab:34:2d:29:bb:9b:5e:4d:4e:79:0a:5c:78:00:34:fa:81:
         8e:7f:d3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:55:33 2024 by rpki-client on console-ams.rpki-client.org