Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
File:                     G_GA7KTkQF6Heotjkjp1iNd-OdI.mft (raw, json)
Hash identifier:          PxCRRvPhbM5+x+Qb+s5MndoXeuhrt6eofLH10MzIsN4=
Subject key identifier:   90:F2:98:A6:B6:89:37:FA:45:8C:C1:CC:F7:FD:A0:C4:EC:A3:2F:1D
Authority key identifier: 1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2
Certificate issuer:       /CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
Certificate serial:       019067162C989D09A98404CA2363CDDA696B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
Manifest number:          0141
Signing time:             Sun 30 Jun 2024 03:00:24 +0000
Manifest this update:     Sun 30 Jun 2024 03:00:24 +0000
Manifest next update:     Mon 01 Jul 2024 03:00:24 +0000
Files and hashes:         1: G_GA7KTkQF6Heotjkjp1iNd-OdI.crl (hash: lJnY+eKzNttMdK7g84G+FTGrDcIdNInlLV8GssMl/HY=)
                          2: NUcZgRpwb_fFXQrte9Oe2FBeaG8.roa (hash: nLhgCTC7vNdcye8I2Oj4B+m9PSwLlHWnVTk7zVuOmkc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 03:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:67:16:2c:98:9d:09:a9:84:04:ca:23:63:cd:da:69:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
        Validity
            Not Before: Jun 30 03:00:24 2024 GMT
            Not After : Jul  1 03:00:24 2024 GMT
        Subject: CN=90f298a6b68937fa458cc1ccf7fda0c4eca32f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0d:c9:f6:02:d4:51:43:c6:0b:b8:af:70:42:
                    99:e0:df:7d:c0:71:cd:8f:a3:b8:09:6b:d8:b5:bb:
                    e1:21:3f:d5:b9:40:7c:f9:b1:f6:48:02:f0:76:80:
                    b3:9f:fc:27:1d:36:a8:f1:a1:5d:8b:cb:fd:f6:ca:
                    d0:4d:7e:05:22:9d:a6:e1:ba:ec:98:a0:19:c2:9b:
                    af:b1:83:36:af:15:be:95:cf:a8:d5:d2:f2:ca:10:
                    3d:54:41:22:29:13:f5:40:97:cf:22:b1:15:68:40:
                    05:ee:88:f8:5d:75:3c:98:71:06:d7:01:e0:77:5e:
                    6e:5b:3f:9e:75:c3:1e:1f:10:14:92:73:30:25:de:
                    bb:61:26:65:5d:43:04:22:82:3c:25:7b:84:e1:fd:
                    c6:01:35:71:fa:f4:92:f9:9c:97:09:4e:63:2c:b5:
                    31:18:cc:4c:cc:c5:7d:01:7f:21:af:ce:d4:5d:94:
                    35:ae:23:b7:c4:70:95:a0:f3:41:5a:66:73:2b:3b:
                    08:5a:7d:43:b8:52:44:5e:16:a7:07:65:d9:59:4d:
                    67:5f:b9:b2:9f:95:60:ce:e6:c0:e5:6b:da:73:d7:
                    e2:6f:99:85:40:40:f8:11:8d:8c:79:23:24:78:22:
                    db:ce:c5:b8:8f:8f:cc:cf:a9:d8:3a:1e:c8:56:99:
                    cf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F2:98:A6:B6:89:37:FA:45:8C:C1:CC:F7:FD:A0:C4:EC:A3:2F:1D
            X509v3 Authority Key Identifier:
                keyid:1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:09:d4:64:6e:41:ca:71:0c:b7:be:63:1c:fc:ae:5c:c2:ba:
         3c:ee:23:d6:c1:51:c0:83:94:bd:94:35:05:74:a8:76:09:e8:
         cd:85:e9:14:11:75:55:74:2e:a7:d6:4a:35:f4:35:ec:49:4d:
         12:65:ef:50:64:46:20:df:ad:3d:89:97:fc:9d:d3:2d:fb:36:
         0c:4d:82:46:0d:2c:58:e7:5d:7d:15:e2:ce:1b:e6:f0:5e:ff:
         e8:d5:ce:a7:4e:be:c7:03:66:cd:24:57:d4:54:6c:28:2e:43:
         0c:31:48:cd:1f:b2:30:99:60:12:d1:43:ca:02:b7:e6:29:19:
         ed:c4:56:31:67:50:64:72:8b:e5:27:f7:c3:83:0d:32:6f:ae:
         e7:4c:7c:e1:0a:60:64:0c:9a:be:0a:e1:63:2d:5e:de:82:cf:
         b9:74:a0:10:61:75:64:e2:b0:00:eb:f8:5e:d7:fb:c9:9c:2c:
         1b:19:1a:23:5c:99:27:88:33:94:92:c5:e9:c4:5b:32:c9:55:
         f8:a6:be:b0:2f:2a:0b:d8:85:51:b2:d8:26:ed:bf:52:41:22:
         e8:7a:77:7a:bd:aa:63:38:28:f1:58:de:7f:fc:13:7b:6a:82:
         a7:fc:11:bc:b2:eb:3c:8d:a1:fe:e4:05:63:7a:36:52:38:d0:
         7b:f2:90:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 09:15:33 2024 by rpki-client on console-ams.rpki-client.org