Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
File:                     GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft (raw, json)
Hash identifier:          uaP40pB1F6LLZfeoWem5m2Ik0ThUFwIxd01y7hj9bkA=
Subject key identifier:   07:20:A7:F8:27:A0:8C:BE:3D:C6:85:6A:94:EC:59:46:E8:A9:28:88
Authority key identifier: 1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48
Certificate issuer:       /CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
Certificate serial:       0190448C6CBE2CB6E9E6ABCE2ABEE6BC0A12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
Manifest number:          053A
Signing time:             Sun 23 Jun 2024 10:02:51 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:51 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:51 +0000
Files and hashes:         1: GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl (hash: ChMm3cCgybfF0pxxs7lXuUDjI/uutEMMjUXRjOEAc5c=)
                          2: pD3IgI3_mLbz8YmCKrf-MeBmewY.roa (hash: OzBBwRQMI5Bmt049hhTZYPUt2pQXTn869SOz3FxU8Zs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:6c:be:2c:b6:e9:e6:ab:ce:2a:be:e6:bc:0a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
        Validity
            Not Before: Jun 23 10:02:51 2024 GMT
            Not After : Jun 24 10:02:51 2024 GMT
        Subject: CN=0720a7f827a08cbe3dc6856a94ec5946e8a92888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:98:f4:67:df:79:6d:7e:bd:da:f1:30:c3:6e:
                    ac:a5:8b:35:fc:ab:e3:ec:ac:b3:d4:29:b0:a6:81:
                    6d:ff:3a:12:e5:e4:e0:51:8c:96:c8:61:84:1f:e4:
                    6d:a0:31:33:29:ae:fe:49:43:9c:7a:c9:df:43:6d:
                    2d:e5:f4:5a:4e:2e:3e:b8:8a:0b:a4:91:c1:ba:5a:
                    15:9d:f7:0b:f2:f2:7d:ac:31:f2:79:79:85:ef:dd:
                    4b:8b:f4:5c:41:50:98:b7:42:d2:dd:75:be:7a:7f:
                    67:43:c9:95:b7:73:d7:b7:06:77:b7:eb:4a:07:c0:
                    c8:81:ac:74:21:90:af:00:70:de:8b:16:97:4a:1b:
                    98:cf:21:f8:54:99:3c:33:46:17:e5:13:eb:d5:a5:
                    4a:e5:4c:ae:d0:66:1f:84:7b:81:72:c9:ed:d0:2c:
                    06:d4:a6:9e:2b:41:6a:84:73:ba:7f:fd:25:25:02:
                    f0:9d:82:40:e4:2a:50:bd:fd:5f:da:5b:e4:6d:88:
                    81:a5:4b:e3:ae:f2:e7:dc:e4:89:36:80:db:7c:16:
                    49:94:d7:95:47:d0:c2:b5:e7:03:58:26:6a:c3:68:
                    ef:b3:93:9d:8d:9d:79:78:9b:de:e6:3d:ab:12:47:
                    7e:e6:2a:51:a6:87:a7:cb:7e:94:d4:69:8f:16:52:
                    c4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:20:A7:F8:27:A0:8C:BE:3D:C6:85:6A:94:EC:59:46:E8:A9:28:88
            X509v3 Authority Key Identifier:
                keyid:1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:38:11:9d:78:2a:14:42:ab:31:40:a8:34:22:d7:e8:d9:20:
         bf:0c:0f:9f:b2:d3:01:6c:79:47:92:e8:d2:c3:b7:af:c8:ff:
         79:c9:df:54:9a:65:be:9f:29:3f:eb:95:6a:61:68:7f:65:e4:
         2b:5e:19:d0:28:e8:ab:79:14:30:ae:f0:9e:cc:d0:38:ee:db:
         90:a1:b5:db:51:fd:5a:f6:71:e5:06:81:99:55:96:37:5f:0a:
         2f:94:2a:4c:3f:25:aa:ea:ba:b1:68:96:ed:5d:f7:e9:3f:3f:
         ec:66:0f:12:30:b8:46:70:02:7b:d5:01:12:5e:e3:56:89:1a:
         e3:3b:22:47:49:29:16:ff:ce:b3:7e:d8:bb:b2:23:7f:65:36:
         28:8f:b1:2b:d8:f8:a0:75:5f:b6:93:27:7e:be:cb:ca:1c:7a:
         e2:51:23:81:47:13:df:bb:bd:7b:02:05:e8:02:62:a7:cd:08:
         bd:6f:6e:3e:2e:85:ee:2a:b3:97:11:79:a9:96:23:e5:50:19:
         6e:11:6c:ba:01:b9:6d:f1:ab:7a:55:88:39:d2:25:ec:14:fe:
         75:53:86:c1:29:4e:e8:82:da:a1:d7:b3:2a:65:2b:24:62:11:
         7c:f8:ac:41:36:3e:0f:59:83:04:5f:21:6a:a1:be:10:ce:f7:
         2d:58:50:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 14:58:52 2024 by rpki-client on console-ams.rpki-client.org