Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
File:                     GMpt4aSKToxbivHq6bXoC_z5LEU.mft (raw, json)
Hash identifier:          rTg1i1NaWuUm8iI8cK2hMSFy/gTc4NTYeJ3o7sfYsIo=
Subject key identifier:   A0:53:7C:4E:40:0E:23:6F:50:9C:03:00:D3:C3:FE:B1:75:9D:D9:70
Authority key identifier: 18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
Certificate issuer:       /CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Certificate serial:       01901CA121A02D52DA711FAC0CCF2DF04E0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
Manifest number:          B8
Signing time:             Sat 15 Jun 2024 16:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:40 +0000
Files and hashes:         1: GMpt4aSKToxbivHq6bXoC_z5LEU.crl (hash: v4IEnLqmBSUIu0pxLzZ7iAgtBjCmeA9YS+VooT0+wDU=)
                          2: gmZoT1EPV4SR2Fd--nJL7uelNKg.roa (hash: NaJa6hHPNinXi6tpeIA16S3mXciiWQLk4rZCAL8R5oI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:21:a0:2d:52:da:71:1f:ac:0c:cf:2d:f0:4e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
        Validity
            Not Before: Jun 15 16:00:40 2024 GMT
            Not After : Jun 16 16:00:40 2024 GMT
        Subject: CN=a0537c4e400e236f509c0300d3c3feb1759dd970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8e:a3:0e:b7:4f:29:15:02:45:0f:84:cb:a5:
                    3b:7f:ff:9e:4a:20:a6:df:8f:7e:92:82:a1:ec:d3:
                    16:82:d0:1a:e5:cd:86:13:59:03:4c:21:38:46:68:
                    b1:ee:6b:33:9c:21:1a:e5:0b:0a:b5:88:53:66:b0:
                    1b:48:99:e6:e0:0d:bd:2f:ba:0c:64:a4:55:5f:f0:
                    b8:4c:a9:99:66:55:0f:ac:4e:48:bf:9b:32:0b:a1:
                    37:fd:88:83:05:da:e9:06:29:bb:24:87:6c:82:d5:
                    56:8b:3f:0d:11:b2:19:e6:c9:75:16:bd:89:95:76:
                    ef:32:73:61:a5:23:fd:40:4b:b3:0b:d3:c1:ac:88:
                    e1:f4:c8:29:a9:2f:81:25:f4:e3:ec:a5:62:13:b8:
                    a0:53:b3:79:10:90:5a:a6:20:da:73:3e:ac:6e:bd:
                    17:eb:d3:90:e2:2c:de:df:4f:ee:b9:62:cb:38:6a:
                    a9:bd:63:ff:62:fb:9d:48:83:05:d3:b8:83:97:0c:
                    28:e1:01:5a:64:46:a1:89:4b:b8:ad:46:13:43:55:
                    c7:51:27:b2:40:ff:40:c1:c0:58:c1:e2:1b:ba:d1:
                    55:89:f9:ff:08:81:7c:44:5b:2b:65:71:d4:b5:4e:
                    66:39:25:b5:05:0f:0a:b7:36:1a:68:f1:99:64:f9:
                    74:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:53:7C:4E:40:0E:23:6F:50:9C:03:00:D3:C3:FE:B1:75:9D:D9:70
            X509v3 Authority Key Identifier:
                keyid:18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:11:33:e1:4e:75:5c:04:5d:dd:c5:96:42:cf:bd:ff:20:9c:
         4b:9a:43:36:b1:1c:5a:07:56:ad:95:a7:46:93:80:87:12:62:
         a9:be:8e:4f:8f:85:d6:f8:b7:b8:fb:d0:64:7b:05:5e:99:d7:
         ab:6c:24:d2:e3:fb:44:e6:be:5d:cd:f5:85:7e:11:54:be:69:
         f7:f1:c3:ed:c8:f0:46:80:40:91:08:33:f0:3d:86:66:5e:bd:
         bf:e0:f7:b1:dd:98:f4:25:7c:df:b5:da:a3:61:48:4e:42:53:
         d2:5e:51:a6:19:c3:6f:46:a4:1e:54:be:b8:14:59:97:12:fa:
         43:48:db:4b:21:13:22:8c:6f:5b:16:09:31:73:f8:0f:ee:a3:
         ba:05:aa:c5:54:00:a0:af:52:4b:c0:7b:3f:7f:7e:cd:49:41:
         f1:cc:c3:56:43:ba:e2:59:71:62:8f:fc:0b:9d:7c:8f:74:4e:
         3c:e1:ae:5c:ff:eb:bd:38:9a:a1:ef:6a:a5:18:02:ed:50:86:
         9d:1e:6a:61:28:fd:d3:ba:58:0d:0a:49:d9:aa:29:8f:b4:3f:
         cc:f3:18:95:2e:49:5a:0b:89:91:6a:e7:0c:3f:76:3d:60:50:
         fe:d4:ca:d3:5c:d1:a3:f2:18:f2:77:31:6f:5c:81:dc:ba:ca:
         19:b6:95:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:56:10 2024 by rpki-client on console-fra.rpki-client.org