Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
File:                     GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json)
Hash identifier:          Lru5sW1egklgOQS/q1inDsryU1Zg5+ACrepGqVq5sfs=
Subject key identifier:   1D:7A:AA:73:94:2A:86:74:E8:2B:50:FC:1A:23:45:61:C9:E5:E5:BC
Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
Certificate issuer:       /CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Certificate serial:       01901DEACD21FE5FC9F67CE08DED8522A09A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
Manifest number:          0B08
Signing time:             Sat 15 Jun 2024 22:00:45 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:45 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:45 +0000
Files and hashes:         1: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: gMz1d7ixHxfbJTohoH4BZu807AKuVKxzaTOBFK8h2c0=)
                          2: QNvbTipJFPvz-I-sjTVYQeYfp7Q.roa (hash: CNrmRGqFkubNK7Ta61SWFfjTHb+dZY3gHKbFjlpFnjg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:cd:21:fe:5f:c9:f6:7c:e0:8d:ed:85:22:a0:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d
        Validity
            Not Before: Jun 15 22:00:45 2024 GMT
            Not After : Jun 16 22:00:45 2024 GMT
        Subject: CN=1d7aaa73942a8674e82b50fc1a234561c9e5e5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d1:3e:ab:65:32:0a:f0:ed:29:b1:aa:6f:5b:
                    8d:81:d5:5c:9c:cd:5d:e1:cd:b3:07:3c:ee:02:08:
                    3f:7c:85:16:fa:75:38:fa:2d:ea:f8:fb:20:82:02:
                    20:8f:29:d8:5a:ae:3e:00:6a:42:0d:09:06:b9:38:
                    4e:00:dd:a6:10:39:fc:22:c8:1e:84:81:20:7a:50:
                    32:19:d2:1e:c4:52:2e:31:d2:72:54:e6:65:64:09:
                    53:0d:30:67:a3:bf:9d:6a:5f:88:19:39:5b:8d:6a:
                    a6:3b:c8:51:0c:a4:71:7e:07:98:18:a5:75:2e:53:
                    67:6f:3a:a8:fe:15:0f:b1:4e:25:af:1c:8e:0b:3f:
                    69:8a:69:ba:4f:f2:01:22:bc:20:77:e9:e9:88:2c:
                    6c:41:d3:00:0f:73:42:71:67:db:0c:a1:c1:5e:ee:
                    08:07:f7:65:5c:1e:6c:e8:be:95:ab:17:8a:f4:51:
                    b6:0a:5e:a2:93:1b:3b:36:ea:46:c5:da:4e:42:66:
                    fd:9e:18:2e:5b:19:af:c4:27:37:bf:c9:09:99:99:
                    6c:87:31:91:f4:ea:a4:b2:fe:e1:e4:5f:6f:c7:59:
                    38:b9:9c:e1:68:aa:68:ef:a0:05:39:ca:72:69:87:
                    5e:73:45:a7:5c:ed:f3:db:e8:c4:48:ec:e5:81:87:
                    e8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7A:AA:73:94:2A:86:74:E8:2B:50:FC:1A:23:45:61:C9:E5:E5:BC
            X509v3 Authority Key Identifier:
                keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ca:60:7a:f4:ee:69:64:c6:5a:82:aa:ee:51:92:fb:b8:f2:
         55:0a:8e:25:90:7d:1c:87:14:dc:c1:45:07:e1:7d:ef:66:80:
         7e:da:0c:9d:2d:9d:b6:81:c4:10:34:af:da:b9:61:05:7e:60:
         9f:6d:3c:1f:0d:6a:1e:32:e3:0e:bb:9c:bd:66:91:08:27:fa:
         ac:e0:51:e7:5d:1e:29:e2:8c:7d:10:8b:92:17:2c:86:ca:0b:
         a5:42:58:e3:2a:1f:02:68:54:9a:8e:99:29:16:a5:95:e1:11:
         34:38:0d:26:a2:50:ac:62:bb:22:60:47:f1:fe:c9:6a:43:eb:
         ae:e0:ab:9a:0d:65:88:e9:a6:73:3b:1c:09:a5:3b:07:55:18:
         79:57:bf:05:a6:2a:35:03:03:67:71:4c:52:3e:2e:79:1c:b3:
         f8:56:64:da:83:9f:61:46:0b:8a:61:94:ce:2f:c8:6f:c2:d6:
         9c:96:f2:97:66:b0:d8:d4:2a:68:cd:f3:d5:e9:7b:f6:54:71:
         45:fb:74:d2:96:94:2a:cf:58:92:bf:2a:1e:9a:c4:a4:e2:63:
         b8:d8:73:4a:3e:b3:04:8c:cc:4e:58:a8:5b:ce:6d:ab:a1:49:
         d4:0e:77:a0:c2:fe:af:d5:16:20:7c:f5:ec:8f:80:d6:d7:78:
         08:63:1d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:37:26 2024 by rpki-client on console-fra.rpki-client.org