Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File:                     GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier:          OmkJBVyBpMEqLMPjWM9cP2A9L3NqKLcSvwoUeL6JyDI=
Subject key identifier:   38:5E:02:3A:DD:4E:56:9D:7F:0A:CB:B9:E4:1B:2F:56:37:5E:02:2C
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer:       /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial:       01903AE50B04FB383CDC3DE2558FB787FD55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number:          11D5
Signing time:             Fri 21 Jun 2024 13:03:27 +0000
Manifest this update:     Fri 21 Jun 2024 13:03:27 +0000
Manifest next update:     Sat 22 Jun 2024 13:03:27 +0000
Files and hashes:         1: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: NHwu/V94d2a4rTd4M6w167GCQK6OTaAjik8dYXH9Qcg=)
                          2: aAngZjfH7SvAWnI09UzjduTubA8.roa (hash: Tb3YsE5lv5Y6iE1dK/NHEuAVRwG9FRv9IL7U+4pGqTs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e5:0b:04:fb:38:3c:dc:3d:e2:55:8f:b7:87:fd:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
        Validity
            Not Before: Jun 21 13:03:27 2024 GMT
            Not After : Jun 22 13:03:27 2024 GMT
        Subject: CN=385e023add4e569d7f0acbb9e41b2f56375e022c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3e:01:cf:7b:70:f3:99:de:83:67:51:f1:02:
                    a1:04:f6:7f:3a:82:16:54:db:1e:40:54:fa:71:41:
                    48:63:6f:ba:28:0e:f6:5c:f5:dd:ac:0c:98:72:51:
                    f5:29:7d:a9:18:9c:fb:c2:f5:8c:84:b3:55:cc:b8:
                    90:cb:a1:8b:91:01:d1:c5:e3:0b:9c:06:e7:df:46:
                    c2:7e:c1:a7:28:85:4b:b2:67:2d:4f:9a:fe:dc:63:
                    9c:2d:6c:2a:75:4e:0b:d6:e4:97:f9:ca:29:15:4c:
                    3a:ab:8b:22:8f:0b:f7:d6:4e:ee:8b:bf:8c:aa:f1:
                    5c:7c:8a:85:14:43:42:05:a1:ee:dc:a1:99:57:fc:
                    b8:d1:f0:3c:10:d5:51:42:41:6f:3d:0a:21:b1:3b:
                    03:b1:60:cc:7f:8b:ee:89:40:9e:c1:ee:db:28:48:
                    cb:4c:29:a6:51:e8:7e:29:5e:f7:dc:34:23:a1:a1:
                    97:5f:b8:11:f5:f0:ae:54:ec:52:1c:5b:76:8b:3e:
                    f6:e0:8a:96:71:08:d0:b5:25:71:ca:45:8e:c6:b0:
                    2b:c6:d0:ec:1e:13:df:1a:d2:eb:88:ce:45:41:32:
                    cf:51:6d:9c:b8:12:38:c8:5a:a3:3b:03:6b:96:d0:
                    83:c5:83:5e:e9:3a:cf:7e:a3:b3:a1:0d:ed:03:f3:
                    f8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5E:02:3A:DD:4E:56:9D:7F:0A:CB:B9:E4:1B:2F:56:37:5E:02:2C
            X509v3 Authority Key Identifier:
                keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:fe:42:fa:21:c0:2c:96:a9:41:ea:84:8c:45:b9:74:52:cd:
         e9:66:66:50:07:a2:2c:84:46:95:5b:5e:b0:b6:73:b0:e0:78:
         ec:66:02:ee:76:c0:7e:54:3a:07:a7:db:93:e1:0d:a2:e5:83:
         3e:00:5f:fe:26:bc:b2:65:30:00:82:0a:2e:fc:cb:ef:5f:c6:
         ab:08:4b:cc:ea:f1:11:46:ea:99:3e:7a:b0:9d:d3:09:a5:34:
         1a:c7:be:f4:70:8c:a2:b2:f1:01:56:53:dc:57:f3:09:0f:6f:
         a4:90:e0:35:30:ca:43:72:2b:4a:b3:14:2a:95:64:3f:1c:14:
         6c:e2:e0:61:2a:c4:a1:3d:83:cf:c3:05:25:24:50:f6:e2:ae:
         7a:a5:f1:b8:cf:20:eb:2e:f5:b3:64:1d:9b:3b:c6:de:14:1f:
         a2:8f:d6:37:08:c3:28:2f:7e:af:ac:1f:1f:9a:44:65:59:67:
         b9:11:c9:79:71:2d:c7:d1:0f:f4:b6:ac:78:b8:55:6e:3d:89:
         b7:c2:67:4b:a4:38:0b:f5:46:d0:27:63:e7:c4:6f:80:83:b0:
         b4:ec:21:0a:63:21:b0:02:e6:d6:4e:13:79:18:c3:a1:e1:95:
         ac:e6:60:2f:db:59:ff:ff:4e:e4:c4:92:ec:84:ee:52:58:c8:
         cc:78:61:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA65QsE+zg83D3iVY+3h/1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NjM3OTc2OWM1N2NhNWIyNmEyYzYxZmE1ZDlhY2M1Mjdi
ZWE3ODkwHhcNMjQwNjIxMTMwMzI3WhcNMjQwNjIyMTMwMzI3WjAzMTEwLwYDVQQD
EygzODVlMDIzYWRkNGU1NjlkN2YwYWNiYjllNDFiMmY1NjM3NWUwMjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz4Bz3tw85neg2dR8QKhBPZ/OoIW
VNseQFT6cUFIY2+6KA72XPXdrAyYclH1KX2pGJz7wvWMhLNVzLiQy6GLkQHRxeML
nAbn30bCfsGnKIVLsmctT5r+3GOcLWwqdU4L1uSX+copFUw6q4sijwv31k7ui7+M
qvFcfIqFFENCBaHu3KGZV/y40fA8ENVRQkFvPQohsTsDsWDMf4vuiUCewe7bKEjL
TCmmUeh+KV733DQjoaGXX7gR9fCuVOxSHFt2iz724IqWcQjQtSVxykWOxrArxtDs
HhPfGtLriM5FQTLPUW2cuBI4yFqjOwNrltCDxYNe6TrPfqOzoQ3tA/P4+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDheAjrdTladfwrLueQbL1Y3XgIsMB8GA1UdIwQY
MBaAFBljeXacV8pbJqLGH6XZrMUnvqeJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1dONWRweFh5bHNtb3NZZnBkbXN4U2UtcDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lYTM3NmQtOGVmYy00NDQwLThmNTQt
OTQ5YWE1Yjc1YTQ1LzEvR1dONWRweFh5bHNtb3NZZnBkbXN4U2UtcDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9lYTM3NmQtOGVmYy00NDQwLThmNTQtOTQ5YWE1Yjc1YTQ1
LzEvR1dONWRweFh5bHNtb3NZZnBkbXN4U2UtcDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlf5C+iHA
LJapQeqEjEW5dFLN6WZmUAeiLIRGlVtesLZzsOB47GYC7nbAflQ6B6fbk+ENouWD
PgBf/ia8smUwAIIKLvzL71/GqwhLzOrxEUbqmT56sJ3TCaU0Gse+9HCMorLxAVZT
3FfzCQ9vpJDgNTDKQ3IrSrMUKpVkPxwUbOLgYSrEoT2Dz8MFJSRQ9uKueqXxuM8g
6y71s2QdmzvG3hQfoo/WNwjDKC9+r6wfH5pEZVlnuRHJeXEtx9EP9LaseLhVbj2J
t8JnS6Q4C/VG0Cdj58RvgIOwtOwhCmMhsALm1k4TeRjDoeGVrOZgL9tZ//9O5MSS
7ITuUljIzHhh/Q==
-----END CERTIFICATE-----
Generated at Fri Jun 21 17:35:27 2024 by rpki-client on console-ams.rpki-client.org