Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
File:                     Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft (raw, json)
Hash identifier:          FX1KuR+ba7FY8sjQth3DuHumQNxFdEXKkXEfUYDXaAU=
Subject key identifier:   AF:35:7C:DA:45:7D:81:76:D1:38:D7:C9:9F:E6:95:BA:2E:04:7B:AD
Authority key identifier: 19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4
Certificate issuer:       /CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4
Certificate serial:       019048D4F98E7694E35CD98BEEB46B002A1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
Manifest number:          0625
Signing time:             Mon 24 Jun 2024 06:00:35 +0000
Manifest this update:     Mon 24 Jun 2024 06:00:35 +0000
Manifest next update:     Tue 25 Jun 2024 06:00:35 +0000
Files and hashes:         1: Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl (hash: /ex/R1yeqBl7q684NAY42p6cYLtA3eR84Q2IYXFVpiU=)
                          2: fsqP-fO42J3wloUEpGscB-KU7to.roa (hash: vIsFJPaqGVVTM/xKMeyO9ayvtdmKmtrV9rDgTi4xrkE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:d4:f9:8e:76:94:e3:5c:d9:8b:ee:b4:6b:00:2a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4
        Validity
            Not Before: Jun 24 06:00:35 2024 GMT
            Not After : Jun 25 06:00:35 2024 GMT
        Subject: CN=af357cda457d8176d138d7c99fe695ba2e047bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fe:f6:d1:a6:a1:24:1c:d4:e7:b0:55:05:03:
                    62:a7:1c:f0:fd:94:c0:38:4d:ce:32:24:4a:8b:1d:
                    05:64:bc:3d:a9:34:18:cc:b4:c0:d0:19:65:c5:a2:
                    46:1b:b5:fa:48:7f:35:d6:3e:e7:13:a8:37:c0:ed:
                    f0:bd:be:ee:b7:1b:27:47:8d:95:39:15:55:b1:77:
                    c6:24:96:01:12:19:32:19:93:1a:3a:36:25:8c:dc:
                    97:26:50:7f:d8:f8:18:ad:7a:6f:aa:ae:67:87:3f:
                    20:64:93:7f:87:91:df:1f:15:6e:53:46:b0:38:e1:
                    4d:43:37:f3:6a:94:d5:00:81:ee:68:58:a0:0c:b9:
                    55:3f:e6:5c:08:21:7b:fb:85:06:28:aa:ef:a5:26:
                    18:f7:da:e3:10:bc:3f:2d:46:04:57:cf:f5:9a:4c:
                    1d:97:27:4b:f7:53:38:c2:a2:47:74:33:91:1b:bd:
                    d5:41:95:0e:e9:86:08:c8:dd:69:11:1f:ad:e8:18:
                    84:7e:d7:96:f4:a2:c0:e3:10:da:12:b8:18:8b:37:
                    1d:5c:d5:46:c4:8c:02:b0:59:a8:57:ef:44:9b:aa:
                    9d:a0:27:3b:5e:c3:96:96:51:43:d3:a6:01:2e:75:
                    0b:ff:4a:7c:03:04:29:52:67:ec:6c:96:8a:f2:6d:
                    fc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:35:7C:DA:45:7D:81:76:D1:38:D7:C9:9F:E6:95:BA:2E:04:7B:AD
            X509v3 Authority Key Identifier:
                keyid:19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:6b:3b:20:4a:22:7c:0b:d8:6b:76:e5:77:a5:fb:e6:bb:ad:
         9e:83:3e:64:bb:bf:24:eb:a3:55:fc:75:a5:94:8b:b9:2b:47:
         81:9a:80:d9:8a:ea:b0:26:24:90:d4:12:3b:7c:b0:76:82:88:
         8f:86:d6:08:ae:7c:02:d5:9e:90:60:02:08:7c:a6:38:17:f0:
         c9:2b:f2:7e:2a:8a:ad:49:4c:cd:48:0c:06:1c:c7:f8:52:69:
         73:d5:77:93:cc:f7:3a:75:ba:86:00:6d:46:6e:d9:c3:34:d3:
         6b:dc:9d:c1:69:44:27:69:8f:27:b6:1f:d1:88:99:43:5c:54:
         53:c0:59:9f:48:b9:c5:0b:0f:87:11:70:1b:3e:fb:47:e5:5e:
         b3:87:22:ab:29:46:f7:f5:7f:24:38:b4:5e:d8:72:47:af:24:
         61:52:0b:12:72:11:72:2d:bb:f8:40:f3:30:e8:78:d4:b1:ab:
         1e:de:42:81:fe:69:6a:7d:e5:9b:f0:b2:56:6c:85:52:6d:86:
         ae:91:ed:37:1d:06:e7:f4:1d:f1:15:9a:86:03:66:8a:d6:76:
         ab:14:f9:de:50:27:e5:14:bc:f6:7f:10:be:0a:be:93:b4:37:
         b2:40:69:00:76:fc:d3:36:87:71:45:d2:71:22:b6:53:dd:b9:
         18:c5:79:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:19:08 2024 by rpki-client on console-ams.rpki-client.org