Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
File:                     gRncpg1HvWA7jpzF3r2WxcS6FFs.mft (raw, json)
Hash identifier:          XVstHEGSJ1sQCAYMvKhmjqY4ERGz6dHXTQxhwO1d41A=
Subject key identifier:   E0:C2:A2:FE:5F:5B:6B:C7:18:C5:A7:B6:06:DD:EE:F7:61:8C:DF:48
Authority key identifier: 81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
Certificate issuer:       /CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Certificate serial:       0190448C6B545C29675856D9BC50CDAB8044
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
Manifest number:          0148
Signing time:             Sun 23 Jun 2024 10:02:51 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:51 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:51 +0000
Files and hashes:         1: gRncpg1HvWA7jpzF3r2WxcS6FFs.crl (hash: uvWltHG3FwyGVWMkSXJpUSNWxlVTJwcuW4fa6MUAAeg=)
                          2: oSpWfFOU3aRKp0HFQ0dRBAdEHFk.roa (hash: V/JRVxnvnfuYl2qN2GBtmCBFKMwjN6VGYG92xm3oo88=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:6b:54:5c:29:67:58:56:d9:bc:50:cd:ab:80:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
        Validity
            Not Before: Jun 23 10:02:51 2024 GMT
            Not After : Jun 24 10:02:51 2024 GMT
        Subject: CN=e0c2a2fe5f5b6bc718c5a7b606ddeef7618cdf48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dc:26:e3:38:42:33:8b:6c:f8:ba:94:34:35:
                    67:23:e1:63:dd:05:27:03:4b:21:55:89:cb:77:fd:
                    ce:35:78:86:6b:43:da:ab:ae:ed:d5:26:1c:f6:aa:
                    c3:bb:87:c6:53:0e:d5:f6:e9:52:a6:a7:43:1d:b4:
                    24:fc:e2:bb:b0:af:84:cb:e4:6e:5a:bc:56:54:94:
                    b4:ac:6d:22:99:dc:a3:41:d3:b0:89:59:ce:d8:5c:
                    5e:2d:82:e4:e3:09:80:e5:f0:fa:dc:85:98:7f:ad:
                    f2:4e:68:19:c8:ea:b7:42:4f:19:ae:b2:12:e4:43:
                    ad:33:2a:d9:e4:99:91:1a:83:6c:1e:5a:b0:9b:e6:
                    f0:e1:af:aa:1c:a6:ee:c4:8d:6d:f9:e4:d6:88:29:
                    48:ae:92:f1:58:26:76:9e:ab:47:33:df:48:45:03:
                    15:05:33:27:63:c7:3d:a4:29:86:6f:f4:90:fb:65:
                    63:94:61:d5:0a:91:e6:cc:c4:dd:73:85:6f:5e:53:
                    3d:54:62:0f:1f:ae:a6:19:cb:48:9c:f9:fa:0f:d7:
                    11:58:c0:dd:b6:41:0e:b9:d7:48:5a:84:5f:c1:2c:
                    1a:14:54:89:06:05:8d:85:86:3a:ea:80:47:20:53:
                    a4:b2:db:10:3a:c0:f1:31:7f:a2:c4:53:5a:1f:02:
                    8b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C2:A2:FE:5F:5B:6B:C7:18:C5:A7:B6:06:DD:EE:F7:61:8C:DF:48
            X509v3 Authority Key Identifier:
                keyid:81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:b6:d5:03:61:01:33:3e:5a:a1:2d:bc:6c:66:c8:09:23:ef:
         4f:d3:70:69:e7:a2:4d:62:40:36:a2:b7:f5:b0:2f:61:79:9e:
         62:58:46:1c:b9:58:fd:02:a2:ed:aa:f0:1f:88:08:86:59:9d:
         ce:b6:4f:51:81:9b:2e:f1:ff:d7:19:60:5b:be:c8:2d:09:1e:
         cc:db:d9:71:6f:fa:97:07:9e:55:0b:f6:22:c7:4a:ac:6d:fa:
         fb:41:54:13:1a:fe:d9:6b:f2:b3:64:80:36:ae:a3:e0:27:1c:
         8d:38:62:54:1c:6b:8d:ff:c3:aa:29:5d:77:6a:9e:40:f3:95:
         dc:c6:3c:92:50:44:25:c5:e7:ef:9a:81:5c:c8:4e:6e:d9:64:
         de:8c:67:b3:ff:71:76:2c:a3:c3:e2:cb:fd:4a:ff:0e:bc:cd:
         80:d1:0b:fe:c2:e7:fe:e3:50:69:53:22:10:75:86:32:a4:d9:
         f8:09:54:3f:d0:d2:2f:c9:d3:18:b2:2e:f1:ce:ad:08:99:0d:
         1e:f4:99:f5:3c:a5:f8:88:bf:68:52:79:9b:df:c4:bc:5f:6d:
         0b:ac:ee:10:8c:5b:a0:2d:07:84:c8:a7:36:45:48:ae:b5:d4:
         ba:a5:b8:bc:ea:b9:ab:6e:93:c0:ca:72:b9:f3:d2:8c:c8:2a:
         57:68:a5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:32:14 2024 by rpki-client on console-fra.rpki-client.org