Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File:                     gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier:          sdsYqmntvo7oT+i0wM+/Ja0OflXY1HJr67IwdOnnFi0=
Subject key identifier:   E4:67:C7:CA:B2:A6:4D:2B:39:BF:AB:00:A3:F7:82:8D:C2:A2:E9:D5
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer:       /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial:       01901DEB17A923ABE6199A7B8F146496C820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number:          0506
Signing time:             Sat 15 Jun 2024 22:01:04 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:04 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:04 +0000
Files and hashes:         1: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: ASNLB5a+uoIq5p5nUj6dDwd1QeX3kyzFejgWa+XsI4I=)
                          2: qclYjs_OPDa0soOTfsgsg_rud1k.roa (hash: QDGxVWR8+aLLPvEnSxArlHjoc8/Uja8MGaLQfqM7yU0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:17:a9:23:ab:e6:19:9a:7b:8f:14:64:96:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
        Validity
            Not Before: Jun 15 22:01:04 2024 GMT
            Not After : Jun 16 22:01:04 2024 GMT
        Subject: CN=e467c7cab2a64d2b39bfab00a3f7828dc2a2e9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:82:d6:43:a5:63:71:de:88:69:64:70:2d:4a:
                    10:47:ef:26:98:2f:55:7a:71:f0:73:48:94:9e:e2:
                    73:5b:d7:d6:6f:20:5c:27:01:40:98:7d:ea:27:04:
                    93:9b:32:35:42:85:af:ab:57:64:9d:10:84:1d:c8:
                    a5:35:86:34:42:b6:63:9b:86:0b:57:1b:1d:18:c5:
                    aa:aa:a5:3f:a2:e7:18:9b:45:76:45:a7:31:c1:04:
                    32:12:b2:cb:7a:af:e3:7f:a2:cc:fc:36:c5:d6:c5:
                    69:52:5f:e3:a2:5b:0c:bc:fb:41:b9:67:d2:91:25:
                    6c:a4:86:0e:48:70:56:47:af:37:03:07:81:9a:3d:
                    f3:65:ec:24:30:2e:4d:48:19:83:04:51:6f:a9:53:
                    20:aa:d4:d5:2a:30:0a:68:35:ef:cc:cc:7e:cf:0b:
                    7f:ad:bb:57:49:3d:22:c7:54:51:d4:fa:ad:8d:ff:
                    26:1a:4e:41:50:e2:8b:d8:c4:e7:c0:88:0e:cd:93:
                    75:86:3e:8a:1e:aa:19:fa:2d:cb:c4:39:a5:7d:3e:
                    20:6a:6b:e0:e0:4e:80:fd:0f:72:e8:9f:e6:0e:91:
                    11:33:fe:4b:51:2f:32:97:31:4e:ff:68:81:f0:e5:
                    0e:d2:16:58:88:6a:0e:ff:b1:83:f6:30:06:99:eb:
                    89:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:67:C7:CA:B2:A6:4D:2B:39:BF:AB:00:A3:F7:82:8D:C2:A2:E9:D5
            X509v3 Authority Key Identifier:
                keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:0d:7f:f9:08:f7:b1:fb:8f:90:d7:ea:04:d7:9d:b7:3b:44:
         af:27:c0:f6:a6:09:86:0e:a3:97:80:ad:19:35:8b:c0:84:f7:
         7f:8b:a2:6b:90:0a:28:a9:70:9c:35:66:db:db:36:65:b0:6c:
         c3:2c:ab:38:d7:c2:6c:1b:86:ce:d7:00:79:bf:21:e0:ce:21:
         b5:47:bc:46:f1:4b:09:0b:54:68:88:93:12:16:8e:ce:a3:52:
         89:5a:06:53:a7:63:71:e7:f4:6f:c0:b1:0f:07:a0:e9:6b:d6:
         d1:c0:0c:3d:2d:ff:0e:43:e0:1e:46:5b:06:a4:bf:29:4a:86:
         a4:4d:d3:a0:f6:89:30:48:8a:46:25:4c:09:27:e9:b8:c6:cc:
         5b:a1:6d:d0:9c:3b:51:7f:5f:12:43:73:b2:48:8f:3e:5f:5c:
         51:1b:68:99:79:57:be:3c:44:be:86:64:1a:c7:22:d6:e4:0f:
         db:b4:7c:18:a8:48:50:d0:b3:2a:e1:63:b7:7a:59:da:80:08:
         8d:11:87:56:6a:61:d5:be:89:07:49:31:46:63:9a:ea:4c:c5:
         50:80:98:f5:fb:8f:c4:ba:e8:e8:5a:f9:c0:bf:94:ee:32:43:
         b8:40:9d:d9:14:22:25:32:b2:9c:14:c4:81:32:50:47:21:75:
         c5:ef:37:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:01:35 2024 by rpki-client on console-ams.rpki-client.org