Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
File:                     gci3Ore963b_SLLKCZYW7b5xxCY.mft (raw, json)
Hash identifier:          5nW7hOOnjP17SdftLf3cj1pG1BgLMBvkuLPXBYWyRoY=
Subject key identifier:   26:72:5D:44:97:2D:9E:EE:75:27:0D:15:1E:46:9C:38:34:94:22:9E
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Certificate issuer:       /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial:       018F893697439845E0BE48E3F8CE29C61513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
Manifest number:          10D5
Signing time:             Sat 18 May 2024 01:00:07 +0000
Manifest this update:     Sat 18 May 2024 01:00:07 +0000
Manifest next update:     Sun 19 May 2024 01:00:07 +0000
Files and hashes:         1: 0RC56n3YxWEH58GaRxBvTzhWebE.roa (hash: EVlL9FrPbmGNXu2uN0RpEU9cAIuDCssogPFx/SbXS0A=)
                          2: 6kXj5ixkeJ3U69k56YH86NLfx3o.roa (hash: qNV/Fuv6vNBgklBhEG2F+oWbv0+Fz2HAMdCwKwQd1r0=)
                          3: 8_DpQr3yiPMpeJKSrxYNXItJAQo.roa (hash: kst4BMjyVRU59WGuf3R074SXLR2bAAt6Pnw4Kt2cdck=)
                          4: CJjtDknBtjbNz-epTQP8N54VybI.roa (hash: RoSNWKFjqcnnOUqJ39cHjrGaX1P23mrtLA2oIUG8YOA=)
                          5: Ge5blTQF-ymuD8krUrsyS3HGb74.roa (hash: xRAWp1ydjGVB3kFWy9sN2YH8sarrdDg97QQoTnv6uZo=)
                          6: LtgIZEC7Bw-5FA45JnyyT3zvaNQ.roa (hash: Z2MABy0J94wvLPv/W+TrzEustuU2QAlHhZsN9mAqMfc=)
                          7: R-Yyk1OU76vHDeB77jI3OMNNcy8.roa (hash: 7PPA5CdDlBNdpP9/wtj2o0d70TlTHcLmM/BDgHYtZw4=)
                          8: biZyxYdgoVGH9XPjOzQkKNh3wcI.roa (hash: zhzpE1a7Yjw6F5aAhofOvrLZLOST2Y0F0kL01D3rApM=)
                          9: fSCcVufyOhoxd5R5yqq2Ry2RLz8.roa (hash: VnjguIwRNIApcKwVf1xDtCirmTjmJhgTFL/tvjIewc8=)
                          10: gci3Ore963b_SLLKCZYW7b5xxCY.crl (hash: UBfIA5rPuBOuUQRhvTY+5GogGPSRu8F3Y8JhNcjmn4s=)
                          11: j8VzlWKdUZdIo36C6FM84fkk3N4.roa (hash: 8bxWGaKFazxniYDG6JWbUXnHTZDJeCvLfRca/8wWcEo=)
                          12: v3352m4m6XAGYoiaBUFoa_bLWn0.roa (hash: dvpsWqvxPQcicc0Z93L6whIJ3F/9fxGwqpYrGlyLVu8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:97:43:98:45:e0:be:48:e3:f8:ce:29:c6:15:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
        Validity
            Not Before: May 18 01:00:07 2024 GMT
            Not After : May 19 01:00:07 2024 GMT
        Subject: CN=26725d44972d9eee75270d151e469c383494229e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:d0:12:d3:a4:51:bd:ef:2e:f4:f7:2b:c3:
                    9d:11:02:e6:1a:36:68:3d:10:a6:ea:13:60:a4:dd:
                    05:4a:c4:ee:93:7c:1f:d9:23:ad:e5:2e:1e:73:a1:
                    1a:83:e0:7d:26:47:0f:6d:ed:0c:82:7c:98:5f:7c:
                    51:2d:89:fe:f2:ef:c5:21:ba:db:e0:dc:00:19:b8:
                    a6:5e:ff:50:0d:d0:e9:88:d7:c8:f9:07:19:a4:e3:
                    ef:8e:10:55:5b:ab:31:73:52:76:93:99:da:39:28:
                    f7:66:37:e3:73:44:a5:88:fa:1c:60:58:62:f7:83:
                    1a:03:b4:13:e3:8f:46:a7:a2:47:77:b2:1d:00:43:
                    37:c0:04:6a:6a:b2:b7:a2:8f:c1:de:ec:56:bb:22:
                    18:66:72:4c:8a:a7:71:85:4a:40:8d:ec:5d:0f:5b:
                    93:44:ef:95:31:40:c6:07:d5:50:ac:42:02:25:9d:
                    51:1d:6b:9f:94:24:ae:6e:75:0f:a0:e1:bf:01:90:
                    4e:34:d6:b9:ae:ea:62:38:93:ae:7a:74:28:00:f8:
                    44:36:2d:46:51:1c:0e:fd:3e:98:fc:9b:5b:e5:64:
                    82:43:a7:2f:6f:ed:9c:cc:f8:e4:3d:52:db:44:60:
                    cb:f9:36:0e:dc:6b:0d:db:a7:41:f0:4d:6d:5a:b5:
                    2e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:72:5D:44:97:2D:9E:EE:75:27:0D:15:1E:46:9C:38:34:94:22:9E
            X509v3 Authority Key Identifier:
                keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:73:03:0d:e3:33:35:96:63:52:ca:a0:3c:e9:a0:01:c4:b4:
         94:1a:aa:5b:94:bf:2b:9c:d9:75:a3:33:84:10:19:8c:57:0a:
         2f:72:73:67:68:87:90:2c:4e:fb:f7:7d:b7:80:20:77:f6:85:
         e3:e2:bb:d8:e1:61:ab:6b:35:59:b8:90:ea:bc:ac:5a:19:86:
         e2:a9:49:a6:c5:f8:eb:fb:5a:61:59:43:5a:33:67:1f:68:eb:
         83:43:3d:75:ac:d3:d0:16:5f:cb:c6:70:2a:5e:8a:d3:87:b8:
         f3:75:ac:a2:d9:dc:e4:8f:dc:10:fa:9d:50:39:b3:80:3c:83:
         22:e1:d0:51:d3:1a:f4:d5:01:d9:1d:5f:a5:44:40:da:6b:a4:
         d6:a8:b8:e1:46:9a:8e:72:7a:02:82:f0:24:18:46:c8:c4:f9:
         4c:1e:a9:33:be:82:a9:d7:49:be:52:22:df:21:8c:a9:c0:ee:
         56:7a:66:de:c6:16:e0:d9:64:fe:dd:89:48:aa:7d:92:f5:2b:
         b5:b2:eb:a1:5a:9a:02:de:dc:83:dd:e7:ea:c9:9a:f9:b6:be:
         4f:a6:0c:3c:9e:1f:e1:84:f4:13:03:ce:f6:64:8d:df:d6:db:
         36:4e:5e:83:4d:c9:a5:b3:03:36:db:bb:bb:5f:a5:d5:3c:fb:
         67:0b:4a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:08:38 2024 by rpki-client on console-ams.rpki-client.org