Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
File:                     gmAVLt1HazFwhARFKVhhW2Xdywo.mft (raw, json)
Hash identifier:          tZm4oyMllp8GWMIBQLQOFJEPlAsKXW8Q+58Ls15n1QI=
Subject key identifier:   8F:9C:D9:B9:96:FA:5B:5F:C7:80:41:5D:21:CC:5F:72:C5:30:58:0B
Authority key identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
Certificate issuer:       /CN=8260152edd476b31708404452958615b65ddcb0a
Certificate serial:       01901A7C71E830B05246AD51109B59069752
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 06:01:21 +0000
Manifest this update:     Sat 15 Jun 2024 06:01:21 +0000
Manifest next update:     Sun 16 Jun 2024 06:01:21 +0000
Files and hashes:         1: ZFaK1DrwSxLpkr1JrwVRwkzhor4.roa (hash: 0k+Mzq/cOPCr6/pXSxHPs52VFLR7kRctdtSogHIznKQ=)
                          2: gmAVLt1HazFwhARFKVhhW2Xdywo.crl (hash: 6H1xwKyn6GEVuN6pTch2lTcxogc0gqYKGLTwd8WaRqs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1a:7c:71:e8:30:b0:52:46:ad:51:10:9b:59:06:97:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8260152edd476b31708404452958615b65ddcb0a
        Validity
            Not Before: Jun 15 06:01:21 2024 GMT
            Not After : Jun 16 06:01:21 2024 GMT
        Subject: CN=8f9cd9b996fa5b5fc780415d21cc5f72c530580b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3b:20:c7:75:56:52:69:53:72:e4:26:87:c2:
                    bc:87:29:19:75:c7:bf:56:90:1b:3d:bb:ba:2d:4d:
                    db:b7:6d:4c:e2:ae:52:31:92:28:31:76:da:d8:75:
                    95:43:b1:69:4b:ac:02:4e:19:41:34:91:81:c8:bb:
                    8c:57:e1:88:96:92:3f:8d:b8:b3:4b:f5:1b:88:9c:
                    93:7b:07:2a:dc:8c:e2:a1:2b:81:cf:30:0c:ee:f1:
                    01:1c:72:37:1c:2c:b4:4f:e2:75:9b:d1:4e:bc:0c:
                    7c:b6:23:03:f7:06:05:d9:ee:e2:5e:11:17:91:2e:
                    b4:c7:6c:b1:53:16:78:56:e2:4d:8b:de:09:a1:60:
                    f0:ad:26:7e:90:2e:5a:ae:2d:76:0d:81:bd:2d:d4:
                    29:21:d4:b6:a4:86:a4:f9:20:b7:3c:4a:87:a0:4f:
                    85:ac:9e:3d:69:1b:9d:f2:9a:e4:d3:a9:81:61:c3:
                    ae:22:70:46:51:45:39:a2:d0:ef:da:f4:36:0d:50:
                    14:eb:e2:dc:5a:a3:ce:f2:e9:a3:03:69:4c:52:96:
                    e9:8f:21:84:0f:bb:ba:6c:1c:ad:3a:c8:59:59:70:
                    75:1a:18:9f:ae:10:c6:9e:23:b0:35:ae:91:a6:81:
                    64:0d:0e:58:6f:cf:46:6c:a4:7e:1f:33:90:f5:76:
                    7f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9C:D9:B9:96:FA:5B:5F:C7:80:41:5D:21:CC:5F:72:C5:30:58:0B
            X509v3 Authority Key Identifier:
                keyid:82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:31:0f:62:33:5a:9c:ab:b3:43:84:dd:00:2b:c8:b2:e8:e5:
         e3:23:31:c5:c8:7b:0b:25:bb:bb:9d:79:aa:77:b2:59:78:b0:
         f1:b2:ee:0c:b8:c9:c3:b8:3a:fe:56:9b:90:6b:af:6d:f6:b5:
         fd:2a:46:b8:91:f2:30:39:c0:08:02:14:65:df:03:e5:49:15:
         a7:98:03:23:86:41:23:b6:9a:bc:f9:08:ed:7b:e9:72:b6:59:
         0f:5a:77:6b:c1:7b:04:b0:df:c1:a2:27:2e:d0:ac:cc:f5:97:
         1b:e3:b3:b3:74:7a:21:e9:21:5b:68:94:c6:c7:3f:32:4b:c8:
         ba:11:e7:d6:8b:72:ff:20:57:75:96:61:f6:6f:8e:1b:cd:15:
         23:ac:dd:a7:6b:08:84:1c:04:38:04:14:3e:d4:2e:74:ee:af:
         10:cb:da:b9:3f:f6:26:cb:c0:8e:99:f7:f0:56:31:1c:62:00:
         5f:eb:4d:52:4e:5c:79:22:30:0f:9e:df:15:82:40:27:d6:68:
         e4:0a:1e:c1:79:92:1d:96:72:1e:8a:19:51:e2:e6:f0:36:05:
         87:ec:67:27:a1:66:a2:a6:e2:44:2a:8a:4d:5f:d0:75:8d:f2:
         cb:61:d7:86:e9:95:0c:5e:09:b9:cf:28:3a:58:41:5f:7a:37:
         36:b3:cb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:06:13 2024 by rpki-client on console-ams.rpki-client.org