Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
File:                     GOTxZiOGegux8zeFDqyr_4fEfhA.mft (raw, json)
Hash identifier:          0fxhvBMcfSSnkkLwQy1j/16bDEXaGNg+FjB+EhvFrPw=
Subject key identifier:   C0:A9:A3:AF:15:43:79:0E:99:34:3A:CA:9F:1E:77:F9:4E:01:9C:9B
Authority key identifier: 18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10
Certificate issuer:       /CN=18e4f16623867a0bb1f337850eacabff87c47e10
Certificate serial:       018F3D41AB0AA8BC7AAADF1E869BB17541AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
Manifest number:          114F
Signing time:             Fri 03 May 2024 07:01:04 +0000
Manifest this update:     Fri 03 May 2024 07:01:04 +0000
Manifest next update:     Sat 04 May 2024 07:01:04 +0000
Files and hashes:         1: GOTxZiOGegux8zeFDqyr_4fEfhA.crl (hash: 85bITAhbofBoNgWtVgVD60C7ltr8Wl2Ux2wI5Cy+O7c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:41:ab:0a:a8:bc:7a:aa:df:1e:86:9b:b1:75:41:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e4f16623867a0bb1f337850eacabff87c47e10
        Validity
            Not Before: May  3 07:01:04 2024 GMT
            Not After : May  4 07:01:04 2024 GMT
        Subject: CN=c0a9a3af1543790e99343aca9f1e77f94e019c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e5:25:81:f4:19:75:e0:43:05:20:8d:77:f9:
                    17:45:67:25:9e:3a:b2:ce:62:a9:10:8f:04:c6:3f:
                    5b:3c:e1:f5:34:4a:d5:b0:47:b6:de:90:0f:6c:66:
                    d6:f3:0b:f5:65:30:57:4d:00:9b:28:9f:55:ad:c9:
                    3c:ca:c3:a5:f9:0a:9c:93:cc:71:3b:c1:62:24:8c:
                    29:36:a3:76:8a:cc:e1:3b:23:a2:92:4a:7d:04:15:
                    b9:ce:b7:bc:db:d8:61:06:b1:df:9e:68:33:b3:8d:
                    49:ae:ab:f9:7d:29:29:e1:66:d9:f6:d4:58:5a:52:
                    29:d8:f7:6b:dd:2f:aa:af:e1:ca:b7:2a:d7:64:fa:
                    9e:4e:ef:1f:43:73:46:94:4e:93:31:dc:a6:18:61:
                    c6:9b:87:b5:7e:f3:ad:76:0f:25:07:bb:5a:6c:27:
                    7a:f7:4e:8e:7a:db:60:16:7e:03:5b:b1:41:b7:cd:
                    61:6e:38:3a:75:b3:8c:a4:ab:13:23:6f:44:63:da:
                    5e:e4:d3:29:97:1e:4e:c5:5f:31:3d:68:c9:52:be:
                    43:ae:39:0e:41:7d:95:d1:4a:87:f5:9c:0c:39:5f:
                    de:9b:88:33:bc:af:d5:bb:c3:58:ec:16:95:27:d9:
                    02:49:ba:38:4f:77:37:77:04:83:a0:32:05:1e:81:
                    8a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A9:A3:AF:15:43:79:0E:99:34:3A:CA:9F:1E:77:F9:4E:01:9C:9B
            X509v3 Authority Key Identifier:
                keyid:18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:91:6d:6e:5c:a5:3d:fc:c2:77:23:4a:ee:ed:e2:07:46:66:
         bb:1c:0f:e6:a2:71:7b:c5:b5:c0:c5:bb:15:2c:c4:c8:99:57:
         3b:4d:99:da:f6:d2:6a:a4:68:4a:ea:e0:32:80:a1:08:f5:4c:
         de:df:db:96:76:2e:ab:5a:14:4e:a8:b7:7c:e2:37:5e:67:27:
         84:47:fd:7a:b5:5a:9f:99:f7:31:8c:8e:16:37:79:1c:ce:8f:
         af:7e:17:7d:39:8c:ef:5b:dd:7a:1a:1f:e8:15:7b:b2:64:f9:
         50:fe:e1:f1:3d:a8:20:8f:7e:a8:c1:e5:ff:93:1b:eb:b6:82:
         98:42:77:84:c0:9b:22:9c:2b:37:06:32:59:f5:28:1f:7d:e8:
         e0:16:28:d6:14:61:fa:63:a3:b3:68:8f:61:a7:bd:e2:73:c4:
         61:23:99:8a:80:74:74:1a:41:62:bc:12:c6:d7:d6:35:55:c4:
         a3:98:54:6a:27:c4:d7:f8:cc:79:cf:a2:0c:ae:19:4d:9e:ca:
         96:b7:3d:7c:18:4a:f4:6c:ba:35:b4:54:ab:2a:d0:02:84:33:
         48:9f:a2:e3:c6:41:a5:c2:c3:ed:e8:49:74:e3:51:7d:d8:a0:
         29:52:c3:92:a8:85:d3:e9:9a:d4:45:ac:90:70:9b:0c:a8:51:
         80:38:60:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:26:22 2024 by rpki-client on console-ams.rpki-client.org