Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
File:                     gCNZN6302riSXVgEWjNxgWyYBTE.mft (raw, json)
Hash identifier:          0HBqlTjGs78/zJGKgt3XVyH5tGYL4sMjy7B4D17QqFQ=
Subject key identifier:   6F:56:57:A2:E9:B1:97:AF:72:FB:9C:A7:8F:E3:FE:7F:BA:16:25:55
Authority key identifier: 80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31
Certificate issuer:       /CN=80235937adf4dab8925d58045a3371816c980531
Certificate serial:       01901DEB48D5538BF41652FFDF1E86F8B2BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
Manifest number:          03AA
Signing time:             Sat 15 Jun 2024 22:01:17 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:17 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:17 +0000
Files and hashes:         1: gCNZN6302riSXVgEWjNxgWyYBTE.crl (hash: HD/Bh9LBwyEbRueOFZHZwloRzktesoOmP52rI6kC1dU=)
                          2: lj8LVt751eRyTmZHHGOfbsnpA84.roa (hash: w7F+TMRe+BYQ+TCt9Vr7tSQY0fM7RQbF/AlSUylDg9o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:48:d5:53:8b:f4:16:52:ff:df:1e:86:f8:b2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80235937adf4dab8925d58045a3371816c980531
        Validity
            Not Before: Jun 15 22:01:17 2024 GMT
            Not After : Jun 16 22:01:17 2024 GMT
        Subject: CN=6f5657a2e9b197af72fb9ca78fe3fe7fba162555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:58:1d:84:1a:af:15:0b:0c:57:4a:66:c1:a9:
                    f9:af:94:f9:d0:bd:6d:cf:06:17:f5:57:3f:0f:82:
                    86:a7:b4:79:16:b2:77:31:75:d3:ad:fd:ac:7f:51:
                    31:9c:52:23:7b:47:33:27:96:7d:a6:3b:70:fa:5d:
                    53:f2:a0:69:12:67:29:b2:16:1a:98:35:59:3c:6f:
                    4b:22:ec:81:d6:8c:8a:97:b2:f3:bb:fc:06:60:9e:
                    44:41:4e:b5:da:48:12:48:78:5e:29:c7:4b:95:90:
                    d1:8d:93:8b:f6:09:a0:89:fd:ed:8c:12:55:6d:85:
                    df:5c:b0:e5:68:ca:f8:0a:16:a0:75:b0:cc:84:fd:
                    3a:0d:9d:16:45:09:eb:d4:a4:e9:a8:55:8d:34:03:
                    c0:b2:77:8b:a9:7c:e1:bf:83:5b:a0:c1:69:e0:ec:
                    06:04:97:44:92:45:c8:1c:cb:0e:2b:10:b3:27:e0:
                    ff:47:e5:98:2e:d8:50:6e:82:78:6c:d3:9c:58:7e:
                    e2:13:77:e0:1f:5c:b9:d4:e9:c6:2c:d5:6a:f5:c9:
                    73:fd:80:26:a5:64:9b:17:2b:5e:4a:f8:d6:a6:0a:
                    bf:b9:c6:22:53:24:d1:3c:6f:33:20:49:8b:ee:4f:
                    ad:0f:25:74:e8:8c:f9:32:b4:6b:f2:9d:2e:fb:87:
                    c7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:56:57:A2:E9:B1:97:AF:72:FB:9C:A7:8F:E3:FE:7F:BA:16:25:55
            X509v3 Authority Key Identifier:
                keyid:80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:dd:4d:c1:ac:8e:16:19:f3:06:f7:2a:43:7e:3c:f8:c8:90:
         71:e5:86:31:81:e1:f4:13:df:52:9d:61:28:0d:9a:27:4b:98:
         f9:82:f0:58:5d:25:82:f9:d3:dc:b8:06:bc:ee:71:16:9c:b6:
         2e:3f:2d:e3:cd:cd:b7:f8:cc:bc:53:66:0a:01:b8:20:e1:45:
         f3:da:9f:55:cd:2f:e9:2b:78:33:0d:23:e0:01:8f:43:c5:43:
         c1:83:72:e4:a6:d0:a3:95:d6:5b:d6:63:b0:21:59:66:7a:fd:
         7f:16:13:d7:12:ae:3a:fe:82:dd:94:34:c4:29:0f:59:fb:a9:
         86:46:00:5d:7b:47:35:06:95:79:02:7f:3e:47:79:35:c4:d9:
         af:c9:ab:0a:64:9c:83:ee:cf:7c:e2:fa:f3:62:9b:28:e4:96:
         44:96:5c:2f:a8:c1:b6:83:22:d2:95:76:44:99:56:04:cc:4b:
         d0:e3:a3:7c:44:d0:f1:c2:ca:9a:bf:9f:a3:49:c4:2c:20:71:
         18:c9:89:54:06:5a:78:bd:47:e8:20:e7:45:ac:06:52:47:22:
         3e:23:b1:10:37:ad:4a:aa:be:f9:71:75:9e:44:2e:d2:e8:21:
         a0:1f:46:80:99:32:35:22:14:6e:e6:e6:2b:d3:c6:3d:66:ab:
         05:fb:2e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:04:15 2024 by rpki-client on console-fra.rpki-client.org