Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
File:                     GMpt4aSKToxbivHq6bXoC_z5LEU.mft (raw, json)
Hash identifier:          TYvI+ZhD/yEcg/t6PFnZXUhcHa95liLQcfbq0Ia0uGo=
Subject key identifier:   BE:D5:D3:95:AE:67:D5:70:86:64:71:D4:48:BA:A4:63:39:EC:F2:BD
Authority key identifier: 18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
Certificate issuer:       /CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Certificate serial:       01903B874418161F7998D9F155D28BEE18DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
Manifest number:          C8
Signing time:             Fri 21 Jun 2024 16:00:38 +0000
Manifest this update:     Fri 21 Jun 2024 16:00:38 +0000
Manifest next update:     Sat 22 Jun 2024 16:00:38 +0000
Files and hashes:         1: GMpt4aSKToxbivHq6bXoC_z5LEU.crl (hash: JmOK1Zug5iBGHBHI7nQXcmPAGd+TQQr+MTvUNA6qLdo=)
                          2: gmZoT1EPV4SR2Fd--nJL7uelNKg.roa (hash: NaJa6hHPNinXi6tpeIA16S3mXciiWQLk4rZCAL8R5oI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 13:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3b:87:44:18:16:1f:79:98:d9:f1:55:d2:8b:ee:18:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
        Validity
            Not Before: Jun 21 16:00:38 2024 GMT
            Not After : Jun 22 16:00:38 2024 GMT
        Subject: CN=bed5d395ae67d570866471d448baa46339ecf2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cb:0d:a7:24:4f:9a:96:bb:26:4b:89:3c:dd:
                    43:f3:c8:3e:87:b9:20:0e:58:7c:38:12:86:1b:fa:
                    1d:7d:e1:34:99:2d:78:a8:1e:16:88:bc:db:51:90:
                    1d:b6:e9:8b:48:a5:dc:ae:17:87:3b:20:55:26:4e:
                    5c:33:db:59:6a:6c:1b:03:8c:f2:f9:c2:63:e6:9c:
                    46:6f:51:23:84:eb:16:d7:17:52:4f:8f:63:41:e3:
                    a8:f7:76:16:93:b7:bb:0e:1f:34:4a:ca:3c:f0:9d:
                    7f:48:8d:50:fe:c9:6f:29:05:bd:90:4f:f2:e0:ae:
                    09:56:d2:0c:32:26:bc:39:cd:b5:61:22:7b:2a:45:
                    24:f4:73:c9:37:81:2e:3e:5d:c7:04:fa:fe:be:38:
                    bd:1a:96:27:f5:d0:18:88:0f:01:8e:da:a2:5e:7c:
                    99:22:32:43:ca:49:08:e1:35:d7:1c:2a:e5:fd:7a:
                    7f:7e:69:be:60:93:3a:60:6e:ce:df:12:d6:c8:83:
                    f5:aa:81:a7:44:56:38:28:fc:55:27:8a:89:1b:aa:
                    59:16:a8:07:9c:4f:d9:62:9f:a2:e4:f8:cc:84:bb:
                    5b:f0:a3:20:de:c0:b4:7d:fb:71:b0:5e:ff:de:87:
                    3a:2e:62:7e:22:24:ab:25:ea:ed:1e:73:1d:73:fe:
                    d6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D5:D3:95:AE:67:D5:70:86:64:71:D4:48:BA:A4:63:39:EC:F2:BD
            X509v3 Authority Key Identifier:
                keyid:18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:9f:ad:1d:c1:0f:d5:28:c3:3b:5e:f7:46:3e:83:69:c5:39:
         3e:e5:e6:49:cb:43:8c:19:50:2c:fb:66:ce:ac:0e:72:5a:2b:
         d0:14:a0:1f:a5:a8:fd:69:8b:0f:6a:3d:ea:72:95:7f:b0:94:
         04:10:d4:4c:28:ae:ec:a4:1d:2a:df:54:5a:d3:ce:db:9b:7d:
         2d:c0:d1:62:6d:e0:84:98:cd:db:6a:6f:d3:e4:85:f8:20:32:
         bc:99:a2:3a:25:75:2f:23:27:52:fe:b4:5a:f2:b6:e4:ff:af:
         b2:78:b6:59:6c:b8:20:3a:32:15:64:35:d7:12:47:2d:ac:df:
         9b:85:63:3a:04:23:e8:96:e8:a9:c5:1a:d4:62:50:f8:fc:c6:
         94:13:9e:58:e4:56:aa:b4:80:1d:f3:d1:bb:1f:2c:3d:41:f4:
         59:da:11:fe:da:7a:fd:89:6f:60:3c:95:8d:24:fa:e7:0b:31:
         ae:db:e6:c9:0d:a8:07:2f:6a:12:7f:0e:c9:1c:78:f0:fd:f2:
         5f:85:50:cd:99:ad:04:24:e7:d4:e5:05:45:2a:73:c4:af:a8:
         5e:51:2a:41:fa:31:8e:ff:92:dd:98:c0:c5:a4:18:a2:d6:ab:
         6c:34:71:71:6f:73:e5:b8:f1:05:55:09:18:ec:15:cc:ed:91:
         98:d1:71:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 20:07:42 2024 by rpki-client on console-ams.rpki-client.org