Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
File:                     Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft (raw, json)
Hash identifier:          OC56SmMwN/P88KB7aNknBZqp4Y6OdOXJDYPSSmwDocs=
Subject key identifier:   40:5E:A9:DE:87:07:9D:E5:2F:83:16:1F:89:79:72:9C:C9:E8:99:BF
Authority key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
Certificate issuer:       /CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Certificate serial:       01901F343D61FC0CED4FB8BA96E39D52E89D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
Manifest number:          11C2
Signing time:             Sun 16 Jun 2024 04:00:35 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:35 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:35 +0000
Files and hashes:         1: Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl (hash: PQ8on6s+BcNaHpku73i+npIXWMaePIKSeB3sLrEDxLk=)
                          2: hhkDqbuuVSwre1F0s-728XtuHww.roa (hash: +d91U7AqJKBRbOxE3CCR2UvS/qqd5n0NXSWwZT/VzeU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:3d:61:fc:0c:ed:4f:b8:ba:96:e3:9d:52:e8:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7cafde3135a26bdd4179029eebf7414e9643af
        Validity
            Not Before: Jun 16 04:00:35 2024 GMT
            Not After : Jun 17 04:00:35 2024 GMT
        Subject: CN=405ea9de87079de52f83161f8979729cc9e899bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8f:6c:21:ba:e6:4f:66:26:0a:d2:0f:ac:b2:
                    b2:57:ae:1d:c7:a0:1c:92:3b:64:83:ec:37:4e:80:
                    18:03:77:52:8b:46:d4:a8:e7:35:c9:92:10:a5:6b:
                    fd:3a:34:cc:2e:61:39:f3:f4:1e:17:c4:f2:a7:60:
                    23:c0:a5:1a:43:59:cc:9f:f1:8d:e8:ac:77:4b:1f:
                    14:d2:1a:63:2f:18:37:a9:0e:b7:d9:15:35:54:10:
                    b6:e6:8a:c7:24:7f:9d:51:a4:6c:3f:9c:78:c0:6b:
                    42:04:51:64:9e:bc:cf:27:53:df:98:1d:49:5b:6f:
                    bd:e7:69:74:8c:13:41:8b:a7:67:74:2b:17:87:b8:
                    9e:f4:f6:d1:8b:b1:88:1d:99:85:4e:d4:a7:1b:42:
                    19:b7:0b:48:30:8e:fa:b2:c0:99:6d:5b:95:62:f0:
                    c7:fe:bc:00:80:07:80:4e:53:2d:3b:a7:2f:7b:24:
                    ec:8b:9f:ce:9e:f3:1c:08:a5:02:5a:f4:34:f2:79:
                    55:55:f6:b3:e2:25:dc:bf:ef:4b:9a:fa:c8:aa:6e:
                    aa:35:62:36:67:93:46:4b:6b:22:a3:ad:a8:e1:1b:
                    8e:64:97:f5:07:9d:b0:29:61:ef:40:8e:9b:ff:df:
                    5d:f2:6b:8e:37:13:30:57:2b:86:2f:b3:82:02:e8:
                    3c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5E:A9:DE:87:07:9D:E5:2F:83:16:1F:89:79:72:9C:C9:E8:99:BF
            X509v3 Authority Key Identifier:
                keyid:1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c2:3f:94:77:68:7a:1c:c4:48:8e:94:ab:b1:71:de:58:ec:
         dd:e2:d8:ed:d8:d9:89:c1:d2:88:a3:48:d2:66:16:fc:4b:ed:
         15:33:73:bf:30:5f:80:90:43:5a:12:d7:23:99:a7:a6:10:e8:
         dc:4f:61:de:6d:ed:72:1c:ce:0f:cb:40:02:fa:b5:09:88:e8:
         96:52:4d:65:2d:12:19:e1:b8:84:a4:64:78:39:e0:56:0c:3f:
         ee:3d:7e:6d:81:be:45:14:80:af:d3:fd:9d:cc:97:d3:9c:4f:
         9d:26:bb:07:9c:e8:71:f7:1b:15:5c:ee:4e:a7:e9:86:03:a8:
         55:d6:73:1e:fc:af:17:0d:6c:f6:54:9a:a7:75:d9:75:25:f5:
         89:67:b9:f7:4b:c6:80:23:4e:7e:f2:4a:5a:1f:7f:4d:fd:0d:
         14:72:9a:2d:27:62:16:46:33:ad:98:cc:3c:4c:35:18:fc:57:
         3e:a3:bc:2e:7f:8e:c8:f8:27:6a:24:e4:31:52:1b:58:5a:f6:
         fa:c8:04:4f:a8:7f:30:85:fa:ea:e6:f5:46:63:4b:8f:7d:0c:
         4b:6c:ca:5e:d1:cc:05:cc:c2:2e:7e:e7:e2:3a:b0:c9:b6:b1:
         81:b5:41:68:09:d2:c6:eb:ec:e4:94:3c:4e:d2:90:08:84:55:
         c3:c9:73:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:35:52 2024 by rpki-client on console-ams.rpki-client.org