Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
File:                     GzApY06o7VRoG6hNFJkLALhk3bg.mft (raw, json)
Hash identifier:          JZ3kLVL8BN6eTeR2kxLBNsu5WwTuQHoA8kLKAccx6AM=
Subject key identifier:   B9:25:2F:40:8E:2C:C1:72:DB:AF:71:A7:9D:17:2B:46:D0:45:67:63
Authority key identifier: 1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
Certificate issuer:       /CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Certificate serial:       01901BFC50414298330AF83B556984DE4A37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
Manifest number:          0EFA
Signing time:             Sat 15 Jun 2024 13:00:38 +0000
Manifest this update:     Sat 15 Jun 2024 13:00:38 +0000
Manifest next update:     Sun 16 Jun 2024 13:00:38 +0000
Files and hashes:         1: GzApY06o7VRoG6hNFJkLALhk3bg.crl (hash: IfKiWcXwug1g9dcG8EpWn18tlSqDW1gfcyQI2kgykVc=)
                          2: dj9XU0MEYgwNilblywbn_13okts.roa (hash: iKCPeWpoeoguzcFc9iWFSgt8zkbVErLpat5x7wUVOwQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:50:41:42:98:33:0a:f8:3b:55:69:84:de:4a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
        Validity
            Not Before: Jun 15 13:00:38 2024 GMT
            Not After : Jun 16 13:00:38 2024 GMT
        Subject: CN=b9252f408e2cc172dbaf71a79d172b46d0456763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:67:9a:63:8f:b0:09:cf:52:f6:71:06:68:85:
                    44:b5:27:61:fb:9f:70:55:4e:74:74:d4:00:73:f0:
                    a8:f0:e0:56:3b:2c:d9:20:98:24:cf:d7:54:0d:5c:
                    da:7c:ab:c7:77:e4:db:c5:f1:00:8b:b8:61:98:83:
                    d7:48:82:96:c6:55:32:74:7d:dc:18:eb:a1:33:2e:
                    d9:45:9f:da:ea:26:c7:f3:71:8d:cf:78:6e:f9:51:
                    f6:69:fb:5b:f1:5d:d6:0a:94:cf:0f:95:5b:fe:bd:
                    77:64:b9:3b:58:9f:2e:ce:ed:e5:ca:ec:12:63:d5:
                    b3:c7:2d:2b:94:5a:26:25:25:1c:b3:37:b7:95:16:
                    43:db:4d:56:2d:a2:f7:a4:44:ee:7b:88:ba:6f:cc:
                    3a:40:e4:77:f5:8a:50:4e:6b:96:26:16:43:f0:94:
                    c4:cc:1c:2a:19:14:83:8f:f8:ae:e7:53:e2:8e:eb:
                    ee:1d:a4:e0:29:6b:5a:f6:88:4f:06:5c:4a:1f:8f:
                    f9:cc:c3:9b:4d:aa:53:e6:32:52:27:7d:83:a6:23:
                    c4:72:88:54:85:a1:c3:8b:ba:98:41:8a:5b:fa:80:
                    f7:3e:78:b2:13:0d:cc:85:59:48:d5:82:c1:f3:48:
                    cf:80:35:1a:2a:62:ce:e6:1d:11:6e:19:9d:09:27:
                    c8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:25:2F:40:8E:2C:C1:72:DB:AF:71:A7:9D:17:2B:46:D0:45:67:63
            X509v3 Authority Key Identifier:
                keyid:1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ae:36:54:6b:d7:f2:3f:fd:78:bc:c1:2f:82:8d:3a:2f:e6:
         2c:ca:39:66:a2:1c:ff:94:b7:dc:27:79:af:7d:6f:6f:05:e3:
         30:cf:cd:51:a5:7b:9f:43:06:6b:c5:5e:63:f3:a7:91:2c:93:
         28:d6:01:2c:44:4e:64:57:4b:3b:36:92:16:13:b6:b5:58:2a:
         21:c9:00:ee:68:c6:2d:29:6e:fc:ca:39:26:9b:c6:d8:60:8e:
         5b:5e:67:d6:1f:d1:ab:57:65:0a:5c:2a:04:5b:77:22:ef:dc:
         00:7d:f0:fe:f3:ec:43:c5:3a:60:c6:c9:b0:62:97:df:37:28:
         e1:33:d8:d8:9c:74:75:70:e5:48:80:8c:82:a3:6c:cc:57:c8:
         b1:15:31:a9:c7:49:c4:1c:9f:67:29:4b:b4:dd:9d:28:56:a3:
         cb:9b:c3:b5:7c:d9:18:df:f8:fc:93:b1:fe:04:39:5e:50:2c:
         ae:76:40:30:bf:7b:2a:2e:09:88:6c:a0:89:1d:e9:3b:a3:48:
         eb:8d:45:75:0e:ad:76:e4:fa:e9:9e:fa:39:ce:96:ee:39:b9:
         b7:5a:53:87:65:c6:e4:60:8b:da:43:03:d6:ba:2c:f3:cd:03:
         20:85:ff:00:cc:f7:1d:c0:d1:43:38:4e:fa:ff:c5:ce:1f:87:
         bd:10:1b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:07:30 2024 by rpki-client on console-fra.rpki-client.org