Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
File:                     Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft (raw, json)
Hash identifier:          WsLS5DfWt9VBp16q1jxTuHDWrJxTcztwgNbNOHUufvc=
Subject key identifier:   89:14:97:10:20:D6:0F:84:17:6D:ED:22:95:F9:A7:01:64:22:73:72
Authority key identifier: 1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43
Certificate issuer:       /CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
Certificate serial:       018F53C962762E20DEA41DF8DEDD65AC17D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
Manifest number:          115A
Signing time:             Tue 07 May 2024 16:00:57 +0000
Manifest this update:     Tue 07 May 2024 16:00:57 +0000
Manifest next update:     Wed 08 May 2024 16:00:57 +0000
Files and hashes:         1: Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl (hash: Ef75vZ3VBb/IM21mN594Xzzq8hoL77X5P5V8fhxAXLY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:c9:62:76:2e:20:de:a4:1d:f8:de:dd:65:ac:17:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
        Validity
            Not Before: May  7 16:00:57 2024 GMT
            Not After : May  8 16:00:57 2024 GMT
        Subject: CN=8914971020d60f84176ded2295f9a70164227372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:52:71:81:8e:af:c8:25:fe:a1:90:05:7c:
                    cd:af:b3:80:7f:fe:02:fc:11:41:3b:45:7d:af:c1:
                    20:d6:c4:4c:fd:df:bd:bc:20:fe:00:51:26:47:24:
                    28:a1:f3:c0:94:08:55:03:aa:e4:11:c8:16:f1:4e:
                    89:a8:6a:a1:39:23:6d:24:63:37:06:b0:8a:7a:de:
                    2e:38:19:83:a3:6d:2b:34:4a:59:93:70:a7:9e:9e:
                    c8:92:82:cf:0f:19:e9:a5:1d:6e:7c:7d:32:79:e4:
                    46:73:78:36:6f:d3:10:1b:e0:59:d4:ed:0b:b0:d3:
                    39:e8:21:a5:c3:1f:41:16:f2:e4:30:26:f7:8a:fe:
                    7e:22:cf:7d:e5:94:cf:e1:5d:3d:2b:d6:e8:3c:3a:
                    e6:59:95:d5:da:38:f2:2e:53:e6:59:b0:4e:75:85:
                    19:53:3e:72:56:b1:13:7b:22:42:a6:5b:37:69:2b:
                    55:ce:7d:bc:8a:a0:a2:a4:f5:58:ad:25:a1:8f:9d:
                    88:76:09:aa:c8:37:65:24:92:06:76:10:66:c3:7b:
                    8f:5a:f0:88:bb:05:1f:4e:75:2a:83:ab:81:78:da:
                    ba:22:4f:2b:d5:3d:3b:dd:24:8e:b0:58:77:ae:6d:
                    15:a5:0e:2e:47:8f:9f:c8:58:44:7a:56:c8:fa:12:
                    c3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:14:97:10:20:D6:0F:84:17:6D:ED:22:95:F9:A7:01:64:22:73:72
            X509v3 Authority Key Identifier:
                keyid:1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9c:67:e6:36:c1:f1:a1:d4:c7:77:63:a4:eb:91:22:37:52:
         18:f9:78:0d:59:83:26:ff:45:30:64:b9:c3:53:bf:05:32:6c:
         6b:95:1d:0b:e9:3e:5c:58:34:da:28:2b:dd:32:d8:d9:53:6d:
         cf:0d:fc:24:8e:3e:3b:82:47:97:ae:49:19:22:95:0c:28:68:
         e0:a3:fc:40:bc:0a:2d:15:84:ab:08:59:e3:a0:36:40:ca:5a:
         a8:15:d2:53:0b:e4:99:82:a8:77:24:b2:58:ae:c6:62:7e:71:
         4f:50:60:d5:d5:d0:5b:3a:08:0d:3c:28:7c:71:3a:6c:a4:dd:
         cb:a9:73:81:c2:95:fa:16:bc:04:b0:66:18:d4:5e:4f:01:c4:
         94:23:29:59:f2:cf:54:33:42:d8:24:04:70:ff:97:d1:4b:75:
         d8:3d:be:ff:0d:48:24:8a:0c:04:d3:68:37:e3:22:db:ac:f0:
         cb:c5:42:20:37:81:ec:c1:ce:fb:2c:93:c7:bf:e8:1b:62:28:
         6b:00:d4:ce:a7:a8:59:49:85:be:3a:2e:6b:d4:66:c1:5f:63:
         a4:33:f4:1a:89:61:3f:39:b1:ff:24:ed:c4:e2:fc:51:16:56:
         5d:17:54:4b:00:1b:11:c2:94:20:90:bc:eb:56:16:79:77:56:
         36:05:c9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:30:04 2024 by rpki-client on console-ams.rpki-client.org