Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
File:                     GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft (raw, json)
Hash identifier:          /ZRf5MutaNn+L0qG1riZspCJBAm952y/H2Cg4PiihAk=
Subject key identifier:   1C:84:56:C2:80:0C:D6:1D:65:83:71:A9:61:2E:15:9C:F3:F5:D5:52
Authority key identifier: 1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
Certificate issuer:       /CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Certificate serial:       01901D0F6DDB13244556D4353B1BC7240388
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
Manifest number:          0FF2
Signing time:             Sat 15 Jun 2024 18:01:08 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:08 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:08 +0000
Files and hashes:         1: GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl (hash: 8BZBmgqItZw4ed19OpoGUIejNdpoJF75xTSBRUjxUBs=)
                          2: kZYJ81QGoNR3KIT-L8jKOyTKOUw.roa (hash: 2ay0q2Mp0qxDnRzAGJbJVXlPHjAIoSZ1YGvcEdmIecY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:6d:db:13:24:45:56:d4:35:3b:1b:c7:24:03:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
        Validity
            Not Before: Jun 15 18:01:08 2024 GMT
            Not After : Jun 16 18:01:08 2024 GMT
        Subject: CN=1c8456c2800cd61d658371a9612e159cf3f5d552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b2:6f:82:98:41:b3:0d:81:a3:64:a7:ce:02:
                    93:68:50:2a:c8:f7:99:33:1f:6d:75:95:b2:5c:2f:
                    91:ab:b1:38:3c:23:95:71:4b:53:1d:57:25:0b:a5:
                    f5:9a:a4:56:ee:24:5e:ca:db:ba:69:c3:df:c0:d1:
                    cb:59:31:71:9b:8d:92:d5:90:c2:ad:a0:f8:5c:75:
                    2c:f5:ed:34:04:95:9d:54:0a:2b:c0:71:89:08:9a:
                    d8:1d:84:60:76:b2:b3:cd:df:f6:03:21:6b:8d:05:
                    2f:38:6c:ec:75:08:b3:ad:50:58:00:0c:b8:bd:86:
                    7b:37:9d:13:c4:48:1a:b3:80:4e:d6:2b:24:b6:43:
                    c5:61:97:d4:03:74:de:5c:a0:66:b6:b3:de:a9:0c:
                    07:59:3b:a4:1a:b0:f2:d0:69:c6:2c:34:90:89:30:
                    60:d5:12:08:5a:89:ec:42:7e:07:a8:4d:49:2c:de:
                    6e:81:94:bb:13:2e:f2:da:83:7a:f3:66:89:cf:c3:
                    7f:86:7d:af:65:31:21:77:1f:6a:96:8a:41:d9:8f:
                    09:8e:5e:e5:a2:d7:cd:0f:af:0d:8a:2e:30:f3:fc:
                    f4:57:7b:08:8d:a4:4d:9d:ea:7c:1f:3f:3c:46:2a:
                    e5:ee:13:d5:7c:f2:38:24:8a:08:85:ac:12:13:0d:
                    2d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:84:56:C2:80:0C:D6:1D:65:83:71:A9:61:2E:15:9C:F3:F5:D5:52
            X509v3 Authority Key Identifier:
                keyid:1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3e:6b:42:6a:48:47:97:e1:71:ca:c3:b7:94:1b:f3:51:12:
         7a:7b:ad:37:74:0b:06:42:f6:f4:03:5d:f9:30:17:32:f1:d5:
         4e:9c:cc:5b:f8:cc:cf:31:de:b3:d6:b8:81:f7:ea:3b:14:c2:
         ab:ed:e9:eb:30:02:16:c0:c5:37:46:7d:59:aa:a5:79:3b:7a:
         a1:a5:c3:16:38:ed:fe:b0:67:cb:e7:6f:54:15:f0:5e:ae:f5:
         72:35:30:c0:ac:ed:ed:69:19:ed:17:3c:13:4d:d3:f9:e3:db:
         1e:e9:f3:09:ce:61:97:24:e5:9b:de:f3:5d:61:08:8e:80:11:
         2b:fe:0b:c7:f6:9e:61:e0:5b:5b:c9:fb:db:35:9c:38:92:37:
         b4:95:ed:3c:31:1a:35:6f:2f:b6:ca:5a:65:b4:b3:52:81:e3:
         c0:27:a4:e3:06:17:d8:0a:3e:a4:e7:8e:07:bf:71:fb:a8:9d:
         22:e2:31:5b:11:ef:ba:93:b1:5c:fc:38:c2:f5:c9:bb:ce:ac:
         db:ee:81:69:d8:39:38:43:77:8b:ee:91:05:e9:6c:4b:d8:27:
         d2:ed:50:65:81:7b:63:f0:b8:b1:8c:3f:df:47:2a:bb:d6:70:
         5f:9d:07:e4:31:31:13:c7:01:f6:be:e0:17:bb:4c:72:10:d2:
         52:f5:c3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:14:16 2024 by rpki-client on console-ams.rpki-client.org