Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
File:                     GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft (raw, json)
Hash identifier:          qp64TIlLXsKzEb93uxvj5lKty8qMFUJ02aTe7SUWMeA=
Subject key identifier:   63:2B:ED:E1:B3:84:B4:C4:21:38:3C:63:7A:31:1E:8B:1D:06:42:BA
Authority key identifier: 18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8
Certificate issuer:       /CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
Certificate serial:       01901E58F6D0C32936F095F848FAE7B07201
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
Manifest number:          054A
Signing time:             Sun 16 Jun 2024 00:01:05 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:05 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:05 +0000
Files and hashes:         1: GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl (hash: nX4/qRf4Hjk3Mrt4TZYbCGB0ctFeZ4J7QZaGA2u2E3A=)
                          2: ap1vGv5FVFouLBwR3lU3wRaFRr8.roa (hash: IeRhZyyx3cb9PDsJdoDR7nsv4A+HyzPxPVumv4EZXrE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:f6:d0:c3:29:36:f0:95:f8:48:fa:e7:b0:72:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
        Validity
            Not Before: Jun 16 00:01:05 2024 GMT
            Not After : Jun 17 00:01:05 2024 GMT
        Subject: CN=632bede1b384b4c421383c637a311e8b1d0642ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8d:ca:fc:ee:f0:62:32:b2:60:e9:d1:31:84:
                    9a:21:97:11:96:d8:bd:73:5a:76:92:eb:79:d9:59:
                    ee:87:2f:f7:c2:04:3a:0c:d0:34:9b:89:3c:92:3d:
                    d6:df:e8:84:8c:83:e0:32:31:b7:73:31:f0:da:26:
                    55:60:7c:08:e1:9c:2b:52:f7:0e:be:87:c7:79:ee:
                    74:a6:c7:43:93:b0:82:2d:77:31:75:99:80:e5:41:
                    33:6a:c5:ef:ac:32:da:9f:9b:04:90:ee:04:17:ce:
                    1c:21:c0:c0:d7:71:e7:de:b0:98:71:63:e7:e8:22:
                    36:57:15:1c:cd:5e:6a:78:3e:69:84:0e:62:d2:07:
                    95:05:52:04:27:cb:16:b0:e9:66:55:55:fe:74:a6:
                    49:d2:1f:e6:9c:28:e3:95:cb:46:da:ee:83:ac:39:
                    07:47:51:70:a6:83:d8:a7:63:35:e6:e3:ab:16:a6:
                    02:1c:83:3c:db:b1:9f:a4:59:bb:13:c1:42:ce:d2:
                    37:95:9f:4f:34:d3:2e:21:89:01:b8:97:fb:24:11:
                    c9:03:46:43:2f:18:8f:8a:f7:af:17:13:ee:2c:c6:
                    76:d3:dd:7e:52:83:79:00:89:d1:13:c5:7f:5a:9c:
                    b1:35:79:22:60:79:99:a4:32:ef:78:cc:58:33:92:
                    ca:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2B:ED:E1:B3:84:B4:C4:21:38:3C:63:7A:31:1E:8B:1D:06:42:BA
            X509v3 Authority Key Identifier:
                keyid:18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:00:37:81:8c:ae:a9:04:cf:b7:36:a6:e7:67:9d:19:01:31:
         c9:0d:00:05:04:13:fb:58:a4:a5:1d:9b:b1:01:9e:70:bf:9b:
         74:61:b7:6e:23:02:3a:6b:b5:8d:24:bd:8d:55:30:af:90:7e:
         6d:00:6f:49:7d:f8:c9:c5:21:b8:b8:88:15:6d:12:91:24:fd:
         49:3b:6d:93:54:34:91:99:ec:7c:87:bb:eb:1e:83:8f:a4:8f:
         b2:4f:45:a5:1a:5d:e8:ed:3d:3a:34:7f:54:98:7f:fc:3e:e9:
         cf:0b:49:46:b7:d6:eb:2f:74:28:e2:f5:b6:be:ef:ef:d7:18:
         c4:e9:25:f6:f7:85:67:bf:aa:ca:16:8c:62:84:ec:9c:22:2f:
         c4:dc:65:0a:ec:f2:0c:16:24:f5:78:70:c2:cb:78:3d:7d:0c:
         d6:d1:7e:a4:86:ab:86:53:8f:38:ed:4f:81:0b:6c:85:9c:3b:
         9f:4f:f2:e1:74:b0:68:57:e4:5f:fe:68:69:24:b7:07:cc:d8:
         52:2a:18:53:a8:7c:5f:1d:c0:c3:01:f7:e6:f5:6b:4c:6b:18:
         c1:09:0f:25:3e:e4:42:73:79:db:33:36:9c:e5:d9:3c:cb:66:
         22:db:5e:ae:3e:01:2a:be:ef:d7:26:da:d5:48:d9:27:2c:2c:
         4f:b1:aa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:19:01 2024 by rpki-client on console-ams.rpki-client.org