Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
File:                     GpFU4cVXiw_virt3n4EX5k6ITRg.mft (raw, json)
Hash identifier:          JO56deXPi4D27NATcBJP4kj/jDy7+W3EYlCL67VxAIQ=
Subject key identifier:   58:EF:5C:72:CB:92:67:BA:92:E4:59:DB:BF:E2:99:50:8F:DC:84:CE
Authority key identifier: 1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
Certificate issuer:       /CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Certificate serial:       01901DED4868452E76D8DE85A529C68BD943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
Manifest number:          0872
Signing time:             Sat 15 Jun 2024 22:03:28 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:28 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:28 +0000
Files and hashes:         1: Ea6G-eyIhEcbKmxyk8VRdGzmas4.roa (hash: jcxtWAcbYPZCmnYReMbR+idxBTxflnlz2e6fG5LJ0Do=)
                          2: GpFU4cVXiw_virt3n4EX5k6ITRg.crl (hash: SdgeUd6vclYtJieeG/AJkK2Xf6OJFC3zHIoGIjQYyTA=)
                          3: amVsCmFqRtNrGMSP_WwvCzZ5wso.roa (hash: 9MwvWWx6Lt4DMt7asN6YOaULEhj15jXqmbx/Iy77ccU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:48:68:45:2e:76:d8:de:85:a5:29:c6:8b:d9:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
        Validity
            Not Before: Jun 15 22:03:28 2024 GMT
            Not After : Jun 16 22:03:28 2024 GMT
        Subject: CN=58ef5c72cb9267ba92e459dbbfe299508fdc84ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d4:1e:e1:ff:de:9f:fc:6f:94:8e:09:4c:6c:
                    61:ab:07:5d:33:1a:46:5d:7b:41:05:96:c9:c4:3a:
                    67:c7:08:7f:d9:d8:36:5c:55:89:7c:ed:1b:40:7b:
                    9c:6b:48:6f:43:94:99:84:62:59:fc:90:f9:02:35:
                    0b:a6:a2:b3:47:cd:1c:ba:3b:15:4d:8f:e7:9e:7f:
                    17:e3:5e:3b:f9:65:d6:63:7f:66:8f:44:cc:d3:24:
                    b4:2c:ec:0b:33:91:19:33:5a:4f:95:17:73:a5:ee:
                    1d:99:40:ee:45:a0:72:3e:9e:c7:8f:0c:69:38:33:
                    04:6c:2d:6d:b3:7c:7c:bd:0c:03:41:14:55:db:e4:
                    d0:dd:21:bd:28:37:58:b9:c1:e5:45:e5:6e:e1:db:
                    44:1d:ad:44:a8:6e:11:18:7b:38:a2:68:be:f8:fb:
                    d2:17:3b:09:8d:4d:57:e0:e9:72:b3:1d:d8:a1:cc:
                    ac:3a:ea:0d:53:0d:83:4b:2b:96:50:85:3a:f2:db:
                    35:ea:e1:1b:90:d9:f8:ff:d6:4f:78:9c:cd:19:67:
                    1d:90:88:46:ab:41:30:0e:bd:48:8f:d3:4f:b3:f6:
                    cc:d6:b1:0d:8f:ec:e4:3c:4e:69:c3:97:4a:8f:ff:
                    e9:6e:85:b4:0e:bb:17:7e:8d:b8:2f:f9:c2:2c:81:
                    df:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EF:5C:72:CB:92:67:BA:92:E4:59:DB:BF:E2:99:50:8F:DC:84:CE
            X509v3 Authority Key Identifier:
                keyid:1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:3b:db:a9:2b:48:bd:f4:a9:06:28:e5:11:8d:54:7a:bc:1c:
         d8:4d:6e:60:b3:65:13:c0:bb:82:94:9e:b3:1a:7d:c9:7e:b9:
         a7:d1:be:b4:25:fc:77:2e:a5:c8:ca:a3:9f:8e:7e:e2:b6:0e:
         c0:97:27:0b:09:1a:45:4e:c5:93:7e:cc:23:63:66:1d:e0:7a:
         a1:03:0e:d1:6b:18:ec:a9:54:0a:0e:0a:79:15:9d:ce:fd:ad:
         be:e9:3d:a5:c8:c2:fb:84:ee:f9:a1:28:71:25:78:bf:dd:02:
         c3:c7:69:8e:27:51:f3:bc:8b:40:f3:7f:e9:ea:3d:67:ea:80:
         c5:67:64:9e:fd:1c:57:e4:08:b9:63:be:2b:9d:01:5b:36:d7:
         31:0a:2a:3a:8a:91:5c:ea:12:ac:2d:2a:9b:85:92:2c:5b:9d:
         6f:87:63:b6:9f:34:d2:b2:3c:f7:d9:ca:d7:09:5c:25:b7:b9:
         95:7c:38:19:3d:6e:9b:fe:cc:ba:c2:ef:8c:15:3c:b2:b7:40:
         6b:0d:38:14:12:60:a5:c5:eb:f4:f6:4b:1c:9a:69:b3:a0:a4:
         97:f8:9a:9e:b3:b9:78:01:aa:5a:fb:76:4d:0e:0a:d9:37:cf:
         81:18:d3:a0:b4:71:92:9e:94:96:2d:c1:84:3b:29:46:9b:8a:
         9e:c9:00:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:15:27 2024 by rpki-client on console-ams.rpki-client.org