Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
File:                     GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json)
Hash identifier:          3dp4t8Ac7EuNTPsjWl2O3WQhWPYWx3LjIJfzlexD4T4=
Subject key identifier:   74:A3:5F:2E:A7:93:C4:BD:6A:D1:0A:72:EB:E5:BF:E6:D2:CA:21:DF
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Certificate issuer:       /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial:       01904189C74174EBE21229191549B91D77F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
Manifest number:          11DB
Signing time:             Sat 22 Jun 2024 20:01:06 +0000
Manifest this update:     Sat 22 Jun 2024 20:01:06 +0000
Manifest next update:     Sun 23 Jun 2024 20:01:06 +0000
Files and hashes:         1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: e/XMmp6AqdSuYWicJEzT/MkaUlZZ+WDc/cpfb6euzlE=)
                          2: v-lyzaf_xA5Tumq8lg1Ei7EzQfI.roa (hash: cyO2gFZSO/KcvLI20z1qxd7D5XluK8buyz9GgBc7Kg8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 20:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:89:c7:41:74:eb:e2:12:29:19:15:49:b9:1d:77:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
        Validity
            Not Before: Jun 22 20:01:06 2024 GMT
            Not After : Jun 23 20:01:06 2024 GMT
        Subject: CN=74a35f2ea793c4bd6ad10a72ebe5bfe6d2ca21df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7a:8d:aa:f8:dd:c8:c0:b4:b7:43:8f:59:83:
                    1e:28:f5:5a:84:3a:7b:2c:d0:3e:60:c5:51:2a:2b:
                    86:18:b1:7b:1b:55:a1:68:d4:3e:ed:79:a4:d0:08:
                    70:47:42:4e:fb:e0:94:2a:98:24:84:c7:e4:53:90:
                    74:61:86:35:f3:27:22:c3:3a:76:86:3f:aa:00:d5:
                    6c:d4:fc:5b:33:4a:9e:94:5f:b3:24:e2:96:f3:79:
                    5b:df:30:e4:2c:50:46:62:b0:2e:d1:7b:fb:4d:c9:
                    33:e4:12:8f:b0:1d:a9:0f:98:ba:ac:88:21:36:a3:
                    24:35:0a:bd:eb:5f:a4:88:8a:77:6b:e9:7b:44:ce:
                    8c:a7:2b:c2:da:a6:45:0f:25:19:04:5a:a9:0e:9a:
                    ee:bb:bf:d2:c4:3d:4f:4c:e7:45:67:dd:1c:a2:6e:
                    d1:6e:b6:0d:42:76:19:6c:81:4b:a0:2e:0a:21:cc:
                    4e:76:62:af:d5:66:1e:bf:9c:57:8f:9e:5f:cb:87:
                    90:6c:11:3e:c1:8e:36:af:d4:46:5b:5b:2f:f9:dc:
                    d7:b3:28:2b:7f:9c:e5:d2:07:7e:3d:5f:4b:e4:bf:
                    e7:8d:36:22:68:ec:42:55:d3:ad:bc:e0:1f:8b:68:
                    4e:e4:c3:8a:a0:fe:52:40:2e:4c:34:da:8e:63:6a:
                    b9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A3:5F:2E:A7:93:C4:BD:6A:D1:0A:72:EB:E5:BF:E6:D2:CA:21:DF
            X509v3 Authority Key Identifier:
                keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:9b:3c:64:e2:50:ce:5f:49:5b:46:9e:ae:3a:a5:25:af:80:
         74:2f:ad:b0:a1:d1:2f:74:3c:5c:b7:fd:fb:ae:4f:08:66:80:
         10:45:20:b2:67:97:81:3b:ca:33:58:a0:0a:cb:bf:65:17:12:
         72:06:e6:da:2c:02:a0:80:48:1e:7f:6c:b6:7e:26:92:c3:c0:
         d1:92:1e:ce:f9:fb:da:fb:db:92:9b:ae:0a:ae:5f:91:fd:01:
         da:79:52:7f:4d:7c:b8:7f:15:89:8e:3a:dc:4e:8c:12:84:14:
         8f:1b:ae:16:32:c8:66:c0:0c:94:b7:2c:0b:30:59:15:d6:d7:
         91:1d:75:93:08:49:da:94:d0:4e:51:b5:46:43:f7:a7:5a:7a:
         6b:75:07:a9:38:06:2b:48:d6:98:bc:45:e9:cf:b5:36:fd:b4:
         47:af:1c:68:8f:42:e6:38:b6:97:39:df:92:58:2c:88:b1:14:
         33:51:88:42:ae:a4:6c:6d:0f:c0:f1:7a:eb:65:8a:00:c7:aa:
         dc:32:ff:cb:47:d5:bd:57:d3:2f:48:b2:f4:26:e9:aa:40:53:
         71:bd:f3:14:d1:d5:53:64:6c:f8:90:d4:09:3d:65:61:51:75:
         63:f3:61:5d:1c:3d:2d:db:83:89:d6:18:4a:25:45:d7:dc:20:
         86:0e:c4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:03:24 2024 by rpki-client on console-fra.rpki-client.org