Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
File:                     GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft (raw, json)
Hash identifier:          71dvo2gy1i8UlPlW9BjBsLOSEyGHK7uM4KgMrRridmY=
Subject key identifier:   B1:FE:41:34:13:EA:42:68:25:A5:06:2E:45:3F:B7:14:99:59:BC:FF
Authority key identifier: 19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6
Certificate issuer:       /CN=196628617c00e8dff20ca6699313af79fad0afc6
Certificate serial:       0190429D179055ECEE4B6798FADD6DD32AB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
Manifest number:          0A9E
Signing time:             Sun 23 Jun 2024 01:01:49 +0000
Manifest this update:     Sun 23 Jun 2024 01:01:49 +0000
Manifest next update:     Mon 24 Jun 2024 01:01:49 +0000
Files and hashes:         1: GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl (hash: yHU02vHxTBP1t9pf+jDsSVFUaKEIlRfvqJ02296Tmko=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:42:9d:17:90:55:ec:ee:4b:67:98:fa:dd:6d:d3:2a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196628617c00e8dff20ca6699313af79fad0afc6
        Validity
            Not Before: Jun 23 01:01:49 2024 GMT
            Not After : Jun 24 01:01:49 2024 GMT
        Subject: CN=b1fe413413ea426825a5062e453fb7149959bcff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:20:de:a8:f4:ab:d9:a4:89:11:66:23:9b:e8:
                    86:39:c6:d9:14:b2:ad:5c:34:b9:86:7e:1e:90:a1:
                    9a:e4:2e:a6:4b:4f:de:9a:40:8b:15:f7:c9:98:c4:
                    41:3e:bf:ad:f9:33:7a:07:f6:f1:5a:f1:ee:e1:c8:
                    6c:f3:95:75:c0:e1:96:00:fc:7a:6b:dd:de:47:fd:
                    7a:ee:8f:c7:00:a1:88:6a:cf:3c:e2:46:9e:48:4b:
                    03:53:ed:bf:ce:30:b7:41:e6:c8:13:42:9f:39:ce:
                    f3:2a:8b:a7:41:e9:73:e7:9c:8e:a6:56:71:92:28:
                    f4:c2:fc:27:e7:d9:b0:e6:bf:d5:e2:57:93:d8:2c:
                    8d:22:71:9a:a9:c0:9e:da:95:83:19:c3:3f:99:30:
                    22:4b:f5:d7:04:1d:6e:4a:ee:5b:79:92:1a:10:a8:
                    a3:0c:87:5b:cf:d4:a9:e3:8a:c1:6d:28:4b:90:ec:
                    ee:d7:cc:da:54:1c:57:d8:74:e3:f9:d0:fb:14:c4:
                    5c:86:a8:13:6d:f8:90:87:ee:81:fd:da:57:f7:38:
                    ee:51:f5:c2:fe:df:42:aa:57:6b:36:47:f6:86:36:
                    e5:bd:59:f5:5c:d4:68:2e:8b:7f:86:82:cf:2b:ff:
                    fe:1f:70:bb:0b:ac:1d:a4:3d:d8:52:ce:03:39:aa:
                    c5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FE:41:34:13:EA:42:68:25:A5:06:2E:45:3F:B7:14:99:59:BC:FF
            X509v3 Authority Key Identifier:
                keyid:19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:6c:72:f2:61:6c:83:a2:88:66:56:c6:75:c4:27:9c:c9:42:
         06:df:0a:43:c0:ea:e3:fe:73:6f:25:aa:eb:d2:41:9e:5b:ed:
         02:64:ca:67:12:54:1a:02:cb:fb:fc:8c:38:cf:13:c8:f0:9f:
         47:26:9b:d0:84:b4:c2:6d:3a:68:ff:72:14:07:53:27:93:54:
         49:53:bd:c4:a7:f5:13:30:a9:80:69:4f:e4:7f:4d:3d:38:fc:
         de:6d:03:b9:c1:ad:c5:8a:f7:7a:f3:36:5d:01:6e:a3:04:d5:
         81:f2:2c:a4:45:c7:9f:fd:15:eb:5b:48:52:d5:8e:48:f1:47:
         68:d2:3c:fe:c5:1c:48:d1:0c:f2:82:df:8c:d0:6d:9d:39:74:
         e1:dc:46:1e:ee:d6:c9:c2:8c:7e:3e:22:e1:75:5c:1f:2c:7c:
         51:55:9b:fc:c0:2b:68:85:d2:4a:da:36:e5:2e:1a:5e:74:ba:
         46:37:de:e1:c6:de:2f:ab:17:61:b6:5a:d1:c1:7f:5a:11:fe:
         f5:fc:14:62:82:49:47:df:0d:78:cb:2b:ff:1b:42:d0:89:2d:
         e7:a8:fa:0e:e2:da:68:03:28:ae:cf:01:2c:b4:57:13:5b:60:
         a0:79:eb:cb:a3:d6:39:a6:ba:75:32:09:aa:a6:4a:64:7e:7d:
         ea:41:2d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:23:22 2024 by rpki-client on console-fra.rpki-client.org