Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
File:                     gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft (raw, json)
Hash identifier:          qkhu1Vis2qOsbWBqjXtCqqlQy+zjEEpd7lPvum9FKa8=
Subject key identifier:   AC:8D:B5:BE:DF:9A:25:F1:F8:7E:33:36:67:4D:AA:08:4A:03:5F:14
Authority key identifier: 82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13
Certificate issuer:       /CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
Certificate serial:       018FC5162ACBB05EFF6290BB8F072B052646
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
Manifest number:          0869
Signing time:             Wed 29 May 2024 16:01:55 +0000
Manifest this update:     Wed 29 May 2024 16:01:55 +0000
Manifest next update:     Thu 30 May 2024 16:01:55 +0000
Files and hashes:         1: gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl (hash: OeH7NjPdxTH6PZawlZSw/iC3W1Z+4x1uR00AUqCpi60=)
                          2: hAfbQOX5TITFcttqIul2Xgit7Wc.roa (hash: 0Eb6W8xJTJm4DqH7xVOV0U3FrbtfkdB1sFAnG7qW3fg=)
                          3: yCvmEb_k9jqfpmxKScsdu0ukXQo.roa (hash: STE6R8LxRHdLstxqSGEOZBWnOgMySPMmqMZCSShLv8g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 May 2024 13:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:c5:16:2a:cb:b0:5e:ff:62:90:bb:8f:07:2b:05:26:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
        Validity
            Not Before: May 29 16:01:55 2024 GMT
            Not After : May 30 16:01:55 2024 GMT
        Subject: CN=ac8db5bedf9a25f1f87e3336674daa084a035f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0d:e5:a4:8d:f4:ac:c2:a2:5a:c4:c0:09:b6:
                    f2:c6:a9:85:c7:eb:5c:e9:ac:19:b2:df:eb:0b:43:
                    99:66:e1:d8:a3:4e:34:f1:81:9f:10:ca:c7:66:58:
                    61:09:1b:f0:84:37:73:48:1b:83:76:42:67:3b:1b:
                    29:ba:eb:27:c4:c8:95:d0:87:4f:2a:0e:a9:bd:bb:
                    1a:c3:a1:91:44:d8:4d:71:06:77:12:94:73:f0:de:
                    a7:7e:96:14:8b:81:90:09:96:89:2a:af:d9:89:e8:
                    9d:6e:f9:c0:4a:6f:43:d3:d8:03:56:b9:3f:d5:71:
                    06:46:5f:1d:e5:fe:fa:dc:46:89:ac:30:0f:39:06:
                    4a:58:a4:47:38:37:a2:22:5f:71:bc:a9:5c:ff:ec:
                    d1:cb:96:0e:c1:2a:bc:a9:99:94:2a:d3:d3:16:d7:
                    38:1b:0b:46:ca:34:a9:ab:7c:10:58:4e:0f:f5:a3:
                    f5:c5:32:dc:8f:74:e6:bd:06:0a:43:68:4f:f2:f8:
                    c1:40:15:93:b6:6c:1a:cb:36:c4:84:b4:fa:7f:7d:
                    89:9d:37:78:6c:6c:f5:2f:60:8b:9b:72:fb:fb:af:
                    da:51:0b:6b:14:ab:1e:ca:2a:b8:ae:4d:c9:2b:15:
                    12:85:b3:86:d1:95:0a:44:4c:16:c2:27:b1:67:7e:
                    09:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8D:B5:BE:DF:9A:25:F1:F8:7E:33:36:67:4D:AA:08:4A:03:5F:14
            X509v3 Authority Key Identifier:
                keyid:82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:be:31:53:38:d5:17:bd:9e:4d:0e:69:39:78:f5:3d:c9:f7:
         13:5a:ad:1f:b7:ea:9d:62:b0:aa:b1:88:42:d7:c3:9b:29:b2:
         f1:14:7d:e2:e5:c8:a5:4e:5f:0a:59:8d:b1:ef:9f:b9:50:5c:
         6b:1e:d5:ea:83:85:f4:29:e2:bb:2b:4f:b4:66:15:ab:31:a5:
         c4:95:2a:2f:c0:90:34:d7:b2:f0:cc:85:68:22:40:81:8d:fb:
         0d:7c:80:de:db:0e:ef:8e:3d:94:2d:88:92:d0:d3:36:2f:b7:
         5e:41:3b:bb:df:ef:9c:f1:43:0b:a7:c3:2c:d3:c9:a8:0f:6c:
         54:b6:b2:8b:e9:6f:a0:26:1d:d3:e4:38:c0:c3:fd:16:24:44:
         94:02:02:e2:19:32:ea:86:c1:69:3d:e8:34:d7:01:2f:31:ca:
         e3:30:32:96:f4:78:ca:95:42:16:04:50:c5:01:82:d5:26:8b:
         45:00:4c:97:e6:08:bd:97:90:a0:d8:bb:3d:8c:58:95:7f:f8:
         21:8c:12:5c:6e:fb:b2:31:2a:75:e4:14:f1:35:a9:54:2b:7b:
         53:54:b2:9f:1c:6e:aa:be:5d:bb:78:6f:e5:a3:15:84:25:95:
         1f:4f:03:6f:4a:d1:60:d6:d0:a8:84:c5:81:fd:1f:dd:77:50:
         ef:fd:ed:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 19:26:31 2024 by rpki-client on console-fra.rpki-client.org