Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
File:                     GYIE0cJaARI2vqB0HkxgE500mxA.mft (raw, json)
Hash identifier:          fFUDW5UwQlQ36Edmt2F9Tl2fnlr/ggUkogPTdq4AFuo=
Subject key identifier:   87:FD:4A:5C:1E:9C:2B:2A:34:66:25:4D:DF:FB:12:47:26:C0:59:0F
Authority key identifier: 19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
Certificate issuer:       /CN=198204d1c25a011236bea0741e4c60139d349b10
Certificate serial:       0190411B978E1768D586D01E420F85905437
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
Manifest number:          11D8
Signing time:             Sat 22 Jun 2024 18:00:45 +0000
Manifest this update:     Sat 22 Jun 2024 18:00:45 +0000
Manifest next update:     Sun 23 Jun 2024 18:00:45 +0000
Files and hashes:         1: GYIE0cJaARI2vqB0HkxgE500mxA.crl (hash: JUTai0N1BITR64dKGI0tm8lP1CzaWNLLb01v5BTQIjo=)
                          2: aIBhLFlBrGUyIkN-JiSDsc7t310.roa (hash: ZxIou53Glx+vOsrjXt+Jz9GdRSQ8W7nS5W1ZR/EwV54=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:1b:97:8e:17:68:d5:86:d0:1e:42:0f:85:90:54:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=198204d1c25a011236bea0741e4c60139d349b10
        Validity
            Not Before: Jun 22 18:00:45 2024 GMT
            Not After : Jun 23 18:00:45 2024 GMT
        Subject: CN=87fd4a5c1e9c2b2a3466254ddffb124726c0590f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:9e:72:22:a2:ea:3b:cd:bb:b7:89:df:56:
                    e2:d3:71:97:40:92:d9:d9:3a:12:ad:fc:92:51:76:
                    2c:3e:ae:f1:91:b1:ad:bd:1b:0a:a8:73:c9:90:a1:
                    24:8a:79:46:f9:c7:87:21:3e:ec:61:a1:e5:3d:cf:
                    fd:ee:71:74:49:b2:d0:d3:5e:56:06:98:f7:8e:2a:
                    e4:e5:f3:eb:66:3a:b5:03:2d:12:a0:03:cc:96:6a:
                    e1:42:4e:ed:86:d7:60:6a:49:79:0b:24:04:7d:c0:
                    64:4e:2d:a6:01:18:fb:61:90:cf:3f:6c:60:05:bc:
                    42:d8:44:4a:46:33:d0:8b:ac:53:51:8d:97:b5:5e:
                    5c:32:e2:64:79:9b:00:e2:78:c7:bc:18:0d:84:58:
                    b5:2e:80:e6:dc:28:81:33:80:48:d9:c6:41:18:89:
                    7e:29:67:6c:fb:f6:83:ab:0f:51:f7:06:0f:b7:79:
                    4b:9f:95:11:17:b0:44:b7:ca:9e:bd:be:8d:8e:3b:
                    06:b2:a9:aa:6c:6b:9c:40:d3:33:8f:5c:f0:47:4b:
                    90:47:d0:83:f8:a9:a5:be:b3:9b:2b:3b:bc:f5:ee:
                    de:eb:97:0a:6c:ea:0d:ed:d3:94:d7:32:34:95:fd:
                    0c:d0:94:ae:ed:3f:81:07:b2:5c:ab:12:1b:cf:61:
                    48:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FD:4A:5C:1E:9C:2B:2A:34:66:25:4D:DF:FB:12:47:26:C0:59:0F
            X509v3 Authority Key Identifier:
                keyid:19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f3:c7:88:08:53:52:14:5c:90:80:ca:24:82:35:43:33:1b:
         ab:c0:cb:6e:a9:e0:a0:e5:99:4c:fa:20:9b:02:12:c4:62:0c:
         fe:30:3e:34:b2:d2:3e:b1:69:ef:41:59:4a:4b:9f:7d:28:94:
         e8:d4:7a:f7:60:31:7f:83:ec:87:54:90:eb:12:92:6b:4b:76:
         b1:c3:69:46:eb:17:87:3a:7c:74:f3:07:aa:77:5c:cc:4d:89:
         de:75:68:c2:ba:d8:a9:9f:4f:20:d1:62:0c:c4:d8:d0:e0:b2:
         de:c5:a0:b6:3a:9e:e3:a6:71:d0:04:46:81:7f:e5:67:95:93:
         39:36:72:5d:0f:7a:f2:14:35:2a:68:e7:66:e9:4d:0c:a4:0d:
         8e:33:9c:46:5b:72:54:77:ec:df:d0:fd:4d:34:46:9f:df:db:
         65:0d:15:f5:b3:4c:17:18:03:4d:0d:42:40:07:5f:fa:43:d9:
         ed:5e:c4:f3:db:fb:ae:5a:35:e1:52:a1:2c:60:1d:c1:ee:be:
         c0:a2:33:79:dc:69:4f:5a:1a:a0:c5:71:1c:f8:24:07:a5:d3:
         f3:e9:a6:f9:81:8f:1b:97:1f:b7:51:70:24:f4:9f:0d:17:df:
         c5:dd:2e:d3:e7:5b:af:6d:74:6d:55:51:7f:47:cf:14:05:da:
         b6:aa:08:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:49:42 2024 by rpki-client on console-fra.rpki-client.org