Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
File:                     GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft (raw, json)
Hash identifier:          Q5FoG1rtcgRyR5EFuQU4hAA9TsoodpUzfH00NY/78Pc=
Subject key identifier:   4B:31:25:AD:FF:30:E8:5A:DD:EC:AC:37:46:7A:26:E0:E2:4E:07:69
Authority key identifier: 1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48
Certificate issuer:       /CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
Certificate serial:       01901DED414DB73EFC77FAA83D7730AB0B30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
Manifest number:          0526
Signing time:             Sat 15 Jun 2024 22:03:26 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:26 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:26 +0000
Files and hashes:         1: GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl (hash: RybWVmqu7Q6lTc+J0z9+i7GT8Wm8wK1o/clgq+YOEgE=)
                          2: pD3IgI3_mLbz8YmCKrf-MeBmewY.roa (hash: OzBBwRQMI5Bmt049hhTZYPUt2pQXTn869SOz3FxU8Zs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:41:4d:b7:3e:fc:77:fa:a8:3d:77:30:ab:0b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
        Validity
            Not Before: Jun 15 22:03:26 2024 GMT
            Not After : Jun 16 22:03:26 2024 GMT
        Subject: CN=4b3125adff30e85addecac37467a26e0e24e0769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e9:1b:04:6d:0a:a3:d9:e9:69:69:78:90:a2:
                    c3:0c:7b:9e:41:5c:54:be:41:26:44:31:db:79:cf:
                    75:42:ce:71:b5:f3:a7:0c:86:56:ed:fb:c2:b7:4f:
                    53:4a:58:b3:20:50:fe:f7:51:e9:be:1c:9a:92:46:
                    fd:e7:c3:10:f0:c8:6b:e3:75:76:4d:4c:5e:b3:7f:
                    45:8d:fa:18:47:82:22:e2:2b:10:75:ad:ab:cb:97:
                    aa:ba:04:82:39:d6:76:cd:a0:6f:3f:ac:6f:ed:4a:
                    67:e3:3d:a3:f8:e3:6f:90:8c:8e:3b:c8:75:cc:40:
                    32:e5:0d:cd:cb:64:68:76:32:e4:77:0b:a4:8d:40:
                    a7:55:cb:98:fd:14:24:02:7e:38:d0:9a:eb:ef:8b:
                    cc:fd:0d:30:c0:53:19:6f:33:21:d8:43:c4:22:fb:
                    c8:2a:05:0c:12:a5:b7:79:8a:eb:41:4e:f0:1d:30:
                    65:30:e6:6f:f2:e4:15:87:e5:73:a4:f1:75:0d:85:
                    5c:67:f8:82:56:a6:d4:3a:6c:af:77:ce:e6:a6:91:
                    e0:ab:5f:cc:7e:06:be:7e:68:1b:c8:78:de:bf:3f:
                    5f:0f:2d:cc:47:41:75:fb:3a:80:48:51:6e:a5:1d:
                    ab:d2:06:02:31:73:19:dd:79:e7:5e:d8:d1:53:69:
                    ec:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:31:25:AD:FF:30:E8:5A:DD:EC:AC:37:46:7A:26:E0:E2:4E:07:69
            X509v3 Authority Key Identifier:
                keyid:1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a9:66:d7:ec:e5:52:bb:26:f8:a8:07:89:61:29:49:bb:fe:
         78:53:ae:73:28:ae:34:1e:7a:b9:a4:08:bb:49:d4:03:c4:f5:
         28:6f:8b:7a:c0:b9:f9:17:9c:49:08:18:36:89:ca:de:d4:31:
         43:83:e5:38:ab:73:bc:71:d1:b4:ba:19:3d:fe:ec:3f:64:4d:
         cf:28:72:be:20:78:cd:0e:1c:bb:ba:8c:be:48:c1:8a:79:f2:
         f1:e0:c7:d8:00:ac:6a:f0:6d:eb:a2:42:5c:c2:cb:88:47:43:
         92:e0:b1:c0:71:3a:e2:a8:a7:50:c2:c0:69:23:ce:cb:58:d7:
         7b:de:a9:74:37:eb:cd:35:da:76:8d:2d:e5:1f:cb:21:c6:ec:
         ff:e1:65:d2:33:39:f0:26:63:9c:d9:76:fd:06:d7:48:23:2e:
         90:6d:47:a8:ca:cb:e1:d9:41:7f:93:0a:af:27:cb:4a:2e:7e:
         ca:0e:d7:9a:bc:c6:1d:d1:26:db:90:c5:5a:08:aa:59:e1:89:
         70:fc:42:86:3e:b7:46:5c:a3:51:9c:86:83:ce:fe:a6:59:4f:
         6f:2d:f7:fe:fc:53:d2:59:5c:78:29:b1:15:a8:9f:27:e4:13:
         e3:59:00:fb:fa:c4:0b:1b:d2:72:16:c7:9f:85:72:39:88:df:
         95:60:b6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:48:42 2024 by rpki-client on console-ams.rpki-client.org