Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File:                     GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier:          VwQUf98ZcTHObhfKsUmcin9dmk+EysOGlaiqmbC+7LE=
Subject key identifier:   1D:E6:BB:F9:40:16:A5:4D:AF:F6:52:BD:9B:58:B1:4A:C1:D5:D9:76
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer:       /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial:       01901BFEEDFB3C10CD65C2E13FF10A5D31FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 13:03:30 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:30 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:30 +0000
Files and hashes:         1: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: QJVPIjTUbqmDjXfX5v4vlxyZ3yBLCJhKLr/KTOt1vsw=)
                          2: aAngZjfH7SvAWnI09UzjduTubA8.roa (hash: Tb3YsE5lv5Y6iE1dK/NHEuAVRwG9FRv9IL7U+4pGqTs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:ed:fb:3c:10:cd:65:c2:e1:3f:f1:0a:5d:31:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
        Validity
            Not Before: Jun 15 13:03:30 2024 GMT
            Not After : Jun 16 13:03:30 2024 GMT
        Subject: CN=1de6bbf94016a54daff652bd9b58b14ac1d5d976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8c:4c:b3:32:aa:65:95:40:1b:c3:da:9e:19:
                    69:cb:e3:86:ee:5f:5c:b6:97:00:09:de:08:4e:51:
                    25:8d:74:f8:92:61:f3:bb:47:15:0b:55:b3:ad:85:
                    0e:a0:8e:e3:47:7d:f7:16:4c:50:16:45:f5:71:23:
                    ba:e6:75:0b:39:ef:3c:80:24:27:e3:12:60:e1:9a:
                    21:4d:14:1e:ad:84:d3:6b:88:5a:b4:ad:ca:c4:06:
                    62:c5:2a:dc:a1:86:4a:af:d9:dd:c0:de:2b:a4:88:
                    8b:d0:72:e9:5b:47:e4:bd:34:58:86:ba:fa:1f:78:
                    ed:1b:07:02:3a:d1:07:5e:ca:b5:0a:62:81:59:12:
                    fe:35:4d:21:4d:48:29:72:5c:59:e2:81:9e:71:1f:
                    c2:3a:38:ee:7f:7f:95:e5:58:c0:48:c8:11:a3:7c:
                    98:50:1e:c9:52:fd:11:43:ed:f6:00:b5:87:e4:07:
                    30:9e:c1:1a:da:7d:a7:8b:ff:d0:83:a3:a5:06:47:
                    68:c6:24:7b:b3:0a:9b:a7:3c:73:8e:af:9e:49:9c:
                    3a:07:0c:ad:66:de:d1:e6:cb:58:01:f7:7e:f7:ac:
                    c2:ba:03:b8:c4:7b:e3:c8:e7:2e:92:de:9c:2c:a7:
                    55:a0:4f:38:22:17:b5:6f:0c:c6:b6:d9:cf:4e:8d:
                    5e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E6:BB:F9:40:16:A5:4D:AF:F6:52:BD:9B:58:B1:4A:C1:D5:D9:76
            X509v3 Authority Key Identifier:
                keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:42:3b:47:e7:f6:ad:98:84:ba:ad:9a:14:63:fe:58:49:7c:
         7d:77:f9:71:a2:70:f8:50:7b:4f:2f:80:4c:bf:5a:cf:0e:00:
         7f:7f:03:e5:0f:ad:7d:c2:b0:57:0e:f0:a0:e1:e3:be:44:3c:
         b4:c2:53:e6:b5:f0:dd:0c:e1:18:99:b2:92:de:4f:cb:58:05:
         89:56:b1:4b:34:f2:1e:b0:26:81:be:0a:a4:8e:32:db:1a:5b:
         b1:5d:b6:08:b5:60:47:af:fe:95:df:4e:51:c6:e5:cd:3c:48:
         8b:48:38:9a:26:69:a5:7a:b9:84:75:38:a9:09:f2:ff:76:19:
         1a:51:98:f7:3e:cb:aa:d2:85:09:72:08:60:6d:09:6c:ca:9a:
         00:b1:0a:78:32:0a:12:a5:9b:a4:8e:af:bc:ee:d3:8a:30:42:
         dd:5b:0e:72:96:bc:a0:fb:b2:c7:3e:c5:aa:ef:77:4c:de:e4:
         14:c1:f8:6c:98:23:a3:6b:56:c0:b1:bf:31:1e:72:1a:b7:0b:
         27:e7:ab:da:ac:9a:dd:20:a5:d9:34:db:41:78:8e:98:43:10:
         9c:69:d1:12:b2:7f:c2:e1:60:40:8e:1b:bf:c1:e2:4c:03:08:
         93:13:b6:8d:b2:31:07:10:0d:20:f2:7e:03:56:37:b3:e7:90:
         97:9f:c4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:28:17 2024 by rpki-client on console-fra.rpki-client.org