Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
File:                     1GL5scD2-pylMXZOJtOu0hG_7YE.mft (raw, json)
Hash identifier:          ppDwvUz1wCMd6t7cYm6LCQU6BeGUf3msr2DKH/uEJw0=
Subject key identifier:   27:37:F5:CD:19:92:9A:76:2B:60:F5:0F:E4:71:15:86:69:CD:B8:32
Authority key identifier: D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
Certificate issuer:       /CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Certificate serial:       01901E8FA4E2670C146CBFDEB9C458729145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
Manifest number:          07E4
Signing time:             Sun 16 Jun 2024 01:00:48 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:48 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:48 +0000
Files and hashes:         1: 0gh8bAabW9O1VVGGlZkd3NPBbq4.roa (hash: kzTZe+V+rjaIXF6QxgbYAJ7Ie3vSIYF+ifvPtd8gc7c=)
                          2: 1GL5scD2-pylMXZOJtOu0hG_7YE.crl (hash: eL84cohBmJh0AHXUJRV8Rh40BKy74qblSR6hxDvoDD4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:a4:e2:67:0c:14:6c:bf:de:b9:c4:58:72:91:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
        Validity
            Not Before: Jun 16 01:00:48 2024 GMT
            Not After : Jun 17 01:00:48 2024 GMT
        Subject: CN=2737f5cd19929a762b60f50fe471158669cdb832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7b:fa:06:e8:70:b1:06:67:9e:45:90:a8:51:
                    ac:19:0f:c0:41:ea:c8:aa:82:bc:ac:e7:94:10:01:
                    68:9a:0e:d6:7d:80:18:da:2f:3a:c5:e0:f1:8d:b3:
                    e3:d8:25:87:e4:fd:46:89:dd:a4:48:e1:e5:23:45:
                    4d:22:32:a2:b3:4a:72:bb:58:6c:de:8c:65:76:b7:
                    5b:cd:e5:96:b9:d0:c1:c7:c3:ac:1a:d6:ea:fe:03:
                    9d:ad:30:8a:2f:cb:b2:49:73:c1:be:a0:74:32:d2:
                    d0:d8:83:02:18:c7:9c:b3:40:66:b6:2e:78:f4:65:
                    ef:f0:bd:56:f1:c7:a4:fc:f2:10:17:fb:eb:38:96:
                    75:47:a6:cf:64:0e:dd:27:51:c2:a2:f7:05:1c:da:
                    22:78:ac:66:17:bd:d9:23:5c:82:e7:c1:79:c5:12:
                    37:c1:ec:85:4c:aa:1d:ca:20:ee:59:e5:9b:a7:b8:
                    6a:93:14:38:c5:be:c9:26:89:58:b5:f2:16:f6:24:
                    21:7b:fe:e3:2b:b7:16:46:89:72:1d:6e:08:e7:aa:
                    53:1c:f1:37:2b:05:27:a0:c4:5c:3d:03:b5:f4:ea:
                    ac:ed:f4:22:67:cf:43:39:eb:c9:b9:32:34:f6:5e:
                    94:d7:3d:ed:38:98:e4:ff:cd:27:75:f2:8e:f5:62:
                    67:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:37:F5:CD:19:92:9A:76:2B:60:F5:0F:E4:71:15:86:69:CD:B8:32
            X509v3 Authority Key Identifier:
                keyid:D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:79:95:01:0d:c7:62:ca:ca:b6:05:f4:5a:23:c6:6b:70:8a:
         15:31:68:37:fd:5d:56:9a:ac:57:29:db:57:f9:c8:f6:25:b0:
         c8:1b:f8:a6:d7:29:79:96:8f:52:6f:e8:86:b1:a1:36:e0:1e:
         4c:25:da:ef:2e:b8:7a:07:05:3d:2f:2a:9f:60:e0:60:5e:91:
         a6:99:f5:f5:22:7f:e0:1f:62:b4:8e:23:1a:91:88:f0:be:84:
         85:55:1e:9f:07:25:af:36:7e:65:5e:fa:a3:38:bf:8a:2a:19:
         64:b7:17:a0:6f:bf:3c:94:48:29:3b:a8:34:fd:6c:28:84:77:
         8c:39:44:25:9b:de:66:17:cb:fa:09:5f:e4:95:22:f8:59:70:
         6b:9a:53:92:cf:5b:c4:1b:78:3a:90:dc:44:ea:7c:93:a1:5b:
         32:45:43:b6:e8:e0:80:aa:6c:bf:b4:b1:56:3b:27:d7:df:fd:
         f3:56:97:ae:6f:61:c7:91:b2:ad:d8:e8:a2:fd:d6:08:31:85:
         66:14:3b:da:80:02:12:ea:31:25:ec:7f:f7:3c:c5:26:5a:a2:
         67:0d:47:d2:49:28:56:59:73:b8:cb:33:02:ca:0d:9d:ff:a5:
         2b:39:5b:d9:3a:a9:31:a3:f0:de:06:6f:07:70:39:9b:b8:51:
         f3:0f:e6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:52:45 2024 by rpki-client on console-ams.rpki-client.org