Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
File:                     GKhKjkdfZgbnoS-SszDWPY-IC-A.mft (raw, json)
Hash identifier:          wHLQhSWTGdHhzMk5QtnJv8ImNvu78s57minIo2haezU=
Subject key identifier:   48:8A:F4:58:DF:86:37:27:5F:A8:34:F7:A1:17:03:D5:D4:A6:9F:0A
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Certificate issuer:       /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial:       018F855AA5201B9D8E4336FDE21C58865660
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
Manifest number:          09CF
Signing time:             Fri 17 May 2024 07:01:01 +0000
Manifest this update:     Fri 17 May 2024 07:01:01 +0000
Manifest next update:     Sat 18 May 2024 07:01:01 +0000
Files and hashes:         1: GKhKjkdfZgbnoS-SszDWPY-IC-A.crl (hash: zRW3I225BH6bPRcgYluBUEZQvAA+EOgtjv5/g8zTL4w=)
                          2: JBKZBh61F0zxICWg3iLuJQ2dPiE.roa (hash: 3BiwAxZrJ3LoTklXWNQnYuG+OtnQehCMIIksZyP3Ky8=)
                          3: XaXP-5zt19E-3mFwub8yCz7YQDw.roa (hash: trFZTtlTJvUUnhtCRoloMjMFeZLLPMAhFZQZRqFmZRs=)
                          4: lCQgGsc2M_wcfNZvAAgSmg1J-vA.roa (hash: iHxFIqem6L0881lUjATCMsom3+kS582GKI+oAwgSOeA=)
                          5: mZHkjVtrlDFyQjfO3aiXX_L1UTo.roa (hash: 8FGCvZDsEo+NPqMtTajX3H72bTgkFjQemV0d8dQLBYI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5a:a5:20:1b:9d:8e:43:36:fd:e2:1c:58:86:56:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
        Validity
            Not Before: May 17 07:01:01 2024 GMT
            Not After : May 18 07:01:01 2024 GMT
        Subject: CN=488af458df8637275fa834f7a11703d5d4a69f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bf:97:8c:5d:f2:93:06:8b:29:29:0f:45:59:
                    2d:09:60:b3:b8:61:2b:ad:88:ed:31:a1:3f:c6:e2:
                    81:ca:1e:f8:33:66:43:58:25:f7:64:fd:69:20:01:
                    38:3f:a6:8b:b8:b8:2f:83:1e:a0:8f:5e:8e:3e:d5:
                    c4:13:63:5f:04:9c:da:39:21:bd:86:d8:10:75:60:
                    9a:a4:1b:6e:2a:53:96:cb:5c:51:3e:4d:e9:d4:d4:
                    10:d0:ac:18:8e:e2:2d:3c:56:67:b9:d0:dc:69:89:
                    57:e4:5e:fe:d5:e5:bb:71:b0:18:60:de:cf:b2:96:
                    c2:cf:52:ea:9d:0a:97:7b:25:fa:ca:3c:0a:69:fc:
                    b0:05:24:e3:c9:8f:f7:aa:0a:71:22:ee:b7:5f:6f:
                    7d:26:b5:40:13:ca:01:57:22:84:bb:82:fa:49:6c:
                    81:4b:03:57:50:f1:fd:1d:4c:0a:9e:4b:72:35:ac:
                    08:00:d2:2b:fe:9b:1b:62:bd:fe:5d:f9:44:21:5c:
                    b4:86:2d:68:b1:74:3e:94:30:43:f2:a1:36:21:12:
                    90:2d:97:45:f8:81:a2:72:b0:17:4c:e9:6e:26:62:
                    1f:92:2d:3a:ea:b5:a9:12:0f:e8:14:81:9f:b7:e7:
                    3e:5a:37:26:79:b8:44:79:d3:e1:9f:67:53:3c:e0:
                    ab:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8A:F4:58:DF:86:37:27:5F:A8:34:F7:A1:17:03:D5:D4:A6:9F:0A
            X509v3 Authority Key Identifier:
                keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:93:d8:a7:f8:ad:b7:c3:08:95:e9:1b:6b:14:b9:fe:d3:27:
         62:28:0d:c3:cd:6c:5a:3a:59:0d:7a:af:0f:da:dc:da:21:10:
         af:59:26:1c:d1:37:5c:2e:19:1a:ac:fa:37:c1:9e:1a:9a:50:
         c3:93:9b:35:05:9c:75:f6:db:59:09:fd:e7:f4:79:2e:b9:b0:
         0e:52:87:d7:b2:44:2f:03:40:c7:53:b6:12:61:91:27:da:2d:
         11:7e:e6:f2:6d:fa:c8:47:64:91:8e:a5:35:31:29:11:63:33:
         fc:52:39:68:28:0b:12:ef:d3:43:c5:a6:86:c3:cd:8d:fa:c3:
         ba:bf:e2:d0:cd:5f:0a:d3:5d:f5:44:5e:c1:a4:c8:34:b6:4b:
         73:2c:2f:fe:21:4b:e2:2a:ea:11:5a:ae:91:64:95:64:ef:e0:
         f4:95:e6:bd:ab:89:e5:0f:dd:c5:45:50:82:dc:88:19:cd:5f:
         b3:99:f6:5f:dd:42:29:57:d8:e6:22:fb:7a:c3:c3:c2:b9:54:
         e1:8d:70:27:56:40:22:5f:28:de:5e:29:ea:3f:86:d1:74:d4:
         63:1c:56:4e:d6:84:5d:37:24:63:88:40:99:07:8a:64:5f:7d:
         0a:90:7e:37:2e:eb:1a:57:39:16:5c:16:ed:e7:78:ae:e9:84:
         e0:15:74:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:11:51 2024 by rpki-client on console-fra.rpki-client.org