Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
File:                     GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft (raw, json)
Hash identifier:          ZvSYpfGV0dDNzwdcj/IGvRkF2F+Ik0Wkq8tgcUbLPLo=
Subject key identifier:   77:5E:E9:84:6F:53:64:94:20:34:2F:DB:A9:D1:16:8A:89:D2:03:6D
Authority key identifier: 19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
Certificate issuer:       /CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Certificate serial:       01901E59195F7EE82B20CC7223A1B2720F6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
Manifest number:          0670
Signing time:             Sun 16 Jun 2024 00:01:13 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:13 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:13 +0000
Files and hashes:         1: GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl (hash: uayaIS8zKRvvBqWczqm7g65FPZ6e0zRtNh3/gyu5Q9A=)
                          2: _a_jPhLDN1pRmnSFNzWOvlpK6Fo.roa (hash: x8r2Y7xWKWRFMK4aLQvUaBGoed76QzS/T+Kmjc/tHz4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:19:5f:7e:e8:2b:20:cc:72:23:a1:b2:72:0f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
        Validity
            Not Before: Jun 16 00:01:13 2024 GMT
            Not After : Jun 17 00:01:13 2024 GMT
        Subject: CN=775ee9846f53649420342fdba9d1168a89d2036d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d6:4b:8a:3c:8f:9d:08:27:50:aa:cf:d4:3b:
                    8a:39:02:e0:f2:ad:30:24:3e:03:69:7d:ad:d1:22:
                    a8:03:6a:08:0d:bb:68:65:2e:30:d4:bb:a4:12:3f:
                    1f:28:b2:44:14:58:b3:bf:b7:9c:11:c0:f8:78:06:
                    1d:be:c5:f6:95:32:98:5b:3c:22:69:49:46:e2:6d:
                    73:7d:d0:a8:7d:eb:ca:07:d7:4e:02:1f:e2:3c:f6:
                    6c:f1:17:27:13:55:02:a1:7d:4e:43:65:24:99:7a:
                    cb:81:98:bc:7f:23:f8:b8:da:d2:46:fb:e9:12:b9:
                    ba:8c:89:3e:c6:41:ab:c2:5d:1b:07:48:21:16:9f:
                    bb:be:cb:7e:88:e1:23:b0:42:86:40:86:ea:ba:d5:
                    89:62:f4:bf:fc:40:ea:da:62:28:76:f7:da:f5:31:
                    d5:03:fe:eb:83:ce:3b:f1:96:84:d5:ee:0d:86:2f:
                    0a:6a:4a:b1:53:1d:69:ee:bb:54:fb:35:3f:c7:e5:
                    de:1c:eb:72:e3:24:38:5a:ac:c5:e5:5b:96:c5:0f:
                    60:47:6e:48:06:7d:cf:ce:46:80:a0:02:59:10:6b:
                    1e:6b:95:3e:b0:8f:bf:a1:00:75:56:1d:d2:0a:fa:
                    ea:d9:0f:76:08:fb:8e:1f:0d:a3:2b:a8:7b:f0:af:
                    d7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5E:E9:84:6F:53:64:94:20:34:2F:DB:A9:D1:16:8A:89:D2:03:6D
            X509v3 Authority Key Identifier:
                keyid:19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f6:fe:75:3d:45:67:bc:19:d2:db:a0:a5:63:fc:03:99:bb:
         97:25:8e:3b:45:a2:ed:02:47:63:6e:8a:65:ae:84:cb:fd:0c:
         6c:43:8a:5b:fe:ad:af:10:a6:88:f0:bf:27:97:1b:db:b0:41:
         a8:9d:6b:74:30:4a:ff:3a:61:3f:67:c2:f8:1b:ea:c0:61:da:
         ad:52:02:1f:19:75:3f:a2:ab:81:ad:8e:dc:6f:71:96:2a:d7:
         d3:e5:f4:b4:03:36:d2:b4:20:f9:f5:3c:e6:a7:2d:b0:bb:d7:
         df:e1:c6:26:39:d9:d1:03:a9:a5:c9:27:8d:2d:bc:2d:39:6f:
         e7:51:80:2c:04:ea:06:37:ff:b8:dc:c5:3f:66:43:ce:22:c6:
         bc:f5:b7:80:0f:7d:99:2c:fb:00:b3:0e:e6:bf:21:67:83:f3:
         45:1c:82:51:9e:2d:88:a3:b2:d7:6c:f6:9a:f5:d2:8d:93:dc:
         73:91:4a:75:58:7f:df:9b:6c:58:fd:4d:08:fa:c4:2c:c5:99:
         60:27:91:66:b2:09:af:ff:ed:77:73:50:c5:5a:1f:46:f8:92:
         24:b9:df:28:ca:cf:31:3a:f2:df:ce:ea:64:a3:7f:f0:29:77:
         4b:8a:7e:13:ed:66:f8:6d:a8:68:2b:c4:1d:21:4b:97:9d:a9:
         63:23:42:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:39:33 2024 by rpki-client on console-fra.rpki-client.org