Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
File:                     G2njMjeIqhYaYpcgauPnsZqf_GE.mft (raw, json)
Hash identifier:          EmcsTwgXHLvVipCgpRwNxYrDjyaqJyiya4lmwNKDQHw=
Subject key identifier:   24:AF:7F:0C:B6:9C:98:A7:5F:E3:68:CA:E1:8A:E6:CA:48:94:74:8B
Authority key identifier: 1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61
Certificate issuer:       /CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
Certificate serial:       01901F34B883BB8EEF1A55E3FAC95556BED8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
Manifest number:          11C3
Signing time:             Sun 16 Jun 2024 04:01:07 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:07 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:07 +0000
Files and hashes:         1: G2njMjeIqhYaYpcgauPnsZqf_GE.crl (hash: lzJ6C4u+1GDHhFVMN0gTiOoG6Zd5GDDKHJ+BncM+7NY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:b8:83:bb:8e:ef:1a:55:e3:fa:c9:55:56:be:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
        Validity
            Not Before: Jun 16 04:01:07 2024 GMT
            Not After : Jun 17 04:01:07 2024 GMT
        Subject: CN=24af7f0cb69c98a75fe368cae18ae6ca4894748b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:4f:48:c2:92:2d:45:62:b5:15:b1:b2:af:
                    ed:9b:d0:19:da:08:ec:10:d7:76:b1:9b:6b:93:6a:
                    08:45:61:ec:d1:7c:9e:2c:ea:e1:2e:e4:bb:63:0e:
                    53:86:bb:80:5f:6c:10:ba:4e:b8:08:99:cc:f0:07:
                    99:68:d0:94:34:9e:3e:1d:3b:97:57:fc:32:c4:27:
                    94:29:8b:4a:99:e0:7f:05:1e:33:5b:de:ab:a5:8f:
                    f1:6f:10:77:d0:33:91:1b:43:08:98:a1:f0:fb:2d:
                    c8:d7:58:46:d1:65:35:d2:ea:40:f3:3a:7c:63:76:
                    13:76:ed:59:02:86:ca:8d:82:8f:5d:79:f8:89:95:
                    f2:a3:16:2d:b2:e3:e9:fc:a9:7f:5f:cf:f8:64:2a:
                    13:ae:f8:12:5a:4f:79:3a:88:35:63:b3:7c:f4:96:
                    ce:6b:20:cd:d1:70:6a:83:2c:ab:99:8d:43:22:59:
                    7d:81:bf:99:c2:34:c6:5d:ec:61:eb:d6:f4:4a:f6:
                    f7:bb:f8:16:78:e8:2c:77:87:6b:1a:aa:b1:2b:32:
                    5d:b9:73:f6:fc:90:b8:86:76:48:3b:db:cf:9b:6e:
                    cc:1e:ab:b1:63:c8:d0:4f:4f:8a:e3:32:e4:c3:2e:
                    7d:b0:54:c0:65:24:d0:2f:4c:a7:1c:bc:7e:ef:ad:
                    b4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AF:7F:0C:B6:9C:98:A7:5F:E3:68:CA:E1:8A:E6:CA:48:94:74:8B
            X509v3 Authority Key Identifier:
                keyid:1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:68:a2:79:23:4b:29:4e:d2:b7:6c:3a:4f:74:c4:ec:be:9e:
         0c:66:25:29:0f:9a:28:92:73:46:34:fd:67:e9:03:d0:45:b8:
         ba:dd:ed:ca:f7:7e:8e:3f:1c:60:34:18:30:9c:09:05:ec:0a:
         c5:77:26:20:7b:0e:49:e1:6d:7f:34:17:b0:85:1b:4f:f3:0c:
         b8:6a:23:0b:8d:d8:e7:f2:fc:c0:b6:81:c0:97:82:bb:83:50:
         0a:74:f9:94:d0:7a:4c:0c:97:97:47:7e:7b:b6:1e:39:f3:d3:
         bf:10:8f:6f:f0:5a:0b:a5:56:47:18:67:25:e0:80:4b:5d:34:
         9c:24:a7:1f:1f:35:cc:4c:cc:cb:88:33:ba:73:9a:6e:c3:c4:
         60:d5:7e:3d:65:6c:99:a4:f8:58:4b:2a:74:f6:c1:b8:6e:17:
         8a:8c:11:6a:3b:5e:98:fd:9c:00:4f:6c:17:99:81:ee:4e:f7:
         fe:7d:53:8f:90:c1:a5:3a:78:42:2b:1d:01:ad:b6:a2:57:4c:
         97:e6:50:f0:6e:1a:fd:df:85:ea:f6:3f:a1:8e:94:31:6a:f3:
         1d:97:67:cc:a7:dd:f5:ec:ff:fb:08:cd:af:d2:57:a3:05:79:
         aa:da:b2:71:60:a8:8f:e5:38:da:34:7b:b9:b0:63:a8:37:4d:
         9d:5e:85:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAfNLiDu47vGlXj+slVVr7YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjllMzMyMzc4OGFhMTYxYTYyOTcyMDZhZTNlN2IxOWE5
ZmZjNjEwHhcNMjQwNjE2MDQwMTA3WhcNMjQwNjE3MDQwMTA3WjAzMTEwLwYDVQQD
EygyNGFmN2YwY2I2OWM5OGE3NWZlMzY4Y2FlMThhZTZjYTQ4OTQ3NDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubtPSMKSLUVitRWxsq/tm9AZ2gjs
ENd2sZtrk2oIRWHs0XyeLOrhLuS7Yw5ThruAX2wQuk64CJnM8AeZaNCUNJ4+HTuX
V/wyxCeUKYtKmeB/BR4zW96rpY/xbxB30DORG0MImKHw+y3I11hG0WU10upA8zp8
Y3YTdu1ZAobKjYKPXXn4iZXyoxYtsuPp/Kl/X8/4ZCoTrvgSWk95Oog1Y7N89JbO
ayDN0XBqgyyrmY1DIll9gb+ZwjTGXexh69b0Svb3u/gWeOgsd4drGqqxKzJduXP2
/JC4hnZIO9vPm27MHquxY8jQT0+K4zLkwy59sFTAZSTQL0ynHLx+7620KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSvfwy2nJinX+NoyuGK5spIlHSLMB8GA1UdIwQY
MBaAFBtp4zI3iKoWGmKXIGrj57Gan/xhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJuak1qZUlxaFlhWXBjZ2F1UG5zWnFmX0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hODhhNzctMWUyYy00ZjA0LThiOGYt
YjBkMjk2NTIwZDMyLzEvRzJuak1qZUlxaFlhWXBjZ2F1UG5zWnFmX0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9hODhhNzctMWUyYy00ZjA0LThiOGYtYjBkMjk2NTIwZDMy
LzEvRzJuak1qZUlxaFlhWXBjZ2F1UG5zWnFmX0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvWiieSNL
KU7St2w6T3TE7L6eDGYlKQ+aKJJzRjT9Z+kD0EW4ut3tyvd+jj8cYDQYMJwJBewK
xXcmIHsOSeFtfzQXsIUbT/MMuGojC43Y5/L8wLaBwJeCu4NQCnT5lNB6TAyXl0d+
e7YeOfPTvxCPb/BaC6VWRxhnJeCAS100nCSnHx81zEzMy4gzunOabsPEYNV+PWVs
maT4WEsqdPbBuG4XiowRajtemP2cAE9sF5mB7k73/n1Tj5DBpTp4QisdAa22oldM
l+ZQ8G4a/d+F6vY/oY6UMWrzHZdnzKfd9ez/+wjNr9JXowV5qtqycWCoj+U42jR7
ubBjqDdNnV6F0g==
-----END CERTIFICATE-----
Generated at Sun Jun 16 06:38:02 2024 by rpki-client on console-ams.rpki-client.org