Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
File:                     gsbbjg23mzF0_umfxqYFz1bfvck.mft (raw, json)
Hash identifier:          9sXLy5Ffce4SlQ0YvWD0YIIIufoZjkGSrE1aqkEtK1w=
Subject key identifier:   24:96:92:7F:CE:0B:35:7B:E2:3D:C1:1C:C4:4C:60:16:80:40:5F:30
Authority key identifier: 82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9
Certificate issuer:       /CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9
Certificate serial:       018FB2D89CE46A7454FB7F0D70841326EA52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
Manifest number:          0301
Signing time:             Sun 26 May 2024 03:01:31 +0000
Manifest this update:     Sun 26 May 2024 03:01:31 +0000
Manifest next update:     Mon 27 May 2024 03:01:31 +0000
Files and hashes:         1: 1aYU_XMA8vpsYh4p7yguh33GyfU.roa (hash: 5dLYwDMXBmQDLauBrQtVLVvk+H+Tk8UavUYRE179y4c=)
                          2: gsbbjg23mzF0_umfxqYFz1bfvck.crl (hash: Bw566QzhT/z+2BWOnPXKaSgd06QMCqRWU50j+W93GaE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:d8:9c:e4:6a:74:54:fb:7f:0d:70:84:13:26:ea:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9
        Validity
            Not Before: May 26 03:01:31 2024 GMT
            Not After : May 27 03:01:31 2024 GMT
        Subject: CN=2496927fce0b357be23dc11cc44c601680405f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0b:2d:07:49:f3:7c:b4:f0:fa:b0:af:fc:9b:
                    34:1a:4a:2c:5c:24:ec:8e:b2:79:d7:af:f1:be:66:
                    a0:e0:07:85:ce:b7:dd:ac:f4:ab:5c:99:fe:ff:4f:
                    e5:80:94:0a:e5:b7:b8:9e:cc:cc:76:2a:51:e5:29:
                    5c:84:e4:95:19:0a:29:d3:b6:ee:35:76:38:ea:34:
                    94:a7:8d:a0:c6:77:17:e3:c9:19:d9:1b:8b:00:fb:
                    c9:a3:c9:87:3a:15:ce:c9:33:ca:d9:26:eb:07:0f:
                    0a:85:34:79:a3:23:6a:56:1d:32:42:13:4b:d1:d8:
                    2e:ce:3f:31:64:36:e2:ad:03:19:57:01:7d:28:b6:
                    72:19:41:05:4c:53:4d:2f:5a:e3:cb:70:9d:dd:af:
                    56:70:d2:a2:e9:0a:fd:11:6e:77:a4:34:7a:5e:fa:
                    99:d3:af:dc:11:51:2b:94:2d:a0:5a:55:d5:81:8d:
                    cd:cb:8c:59:f1:c4:76:66:9b:93:74:1f:91:b1:77:
                    5c:91:a0:f0:e2:07:7b:4a:e2:9d:2a:ad:35:94:b3:
                    06:c3:f5:ab:c9:d1:c8:7a:e8:b1:06:a5:39:80:ec:
                    c7:04:40:0c:76:be:06:68:21:9c:1e:01:37:4a:e2:
                    02:7b:90:82:b7:ec:02:9d:16:8d:51:fd:33:1c:50:
                    cd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:96:92:7F:CE:0B:35:7B:E2:3D:C1:1C:C4:4C:60:16:80:40:5F:30
            X509v3 Authority Key Identifier:
                keyid:82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c1:55:16:72:ef:db:c4:e2:1c:7e:14:02:27:fd:42:e3:62:
         0c:c9:10:55:09:57:d1:a8:a5:8c:f9:d0:4a:d4:9e:81:15:28:
         91:5c:5c:bf:64:2f:ad:8b:2c:4f:e2:1d:5a:39:f2:37:0b:e5:
         ee:19:1e:39:2d:4c:7d:51:19:d7:86:da:22:f9:f3:aa:55:24:
         1a:c6:9f:6e:42:38:29:43:00:90:2d:2d:8c:1a:b7:d3:53:81:
         0e:fe:55:df:8a:ec:44:c2:4a:02:1d:4f:97:2b:e7:3d:4c:58:
         52:cb:e1:aa:6c:b9:6d:32:46:1c:34:a5:1f:5a:c1:a0:b8:d2:
         e9:c4:e0:cd:ae:fd:46:00:48:68:11:3e:e5:2b:7a:e4:da:fc:
         0b:1f:70:b9:b7:7d:a3:4e:8d:90:65:63:08:d0:62:ae:02:d7:
         8d:2f:5d:bb:21:35:5c:30:c0:64:a9:2f:c1:c2:f3:fe:bc:c7:
         45:ec:b2:35:6c:0b:fd:3e:8c:4c:1f:4e:99:ca:f0:9c:ec:df:
         11:57:9a:02:ee:05:9a:86:f1:1d:23:65:f4:d2:f1:48:25:ef:
         87:d5:c6:da:01:f0:20:bb:0e:ae:01:c9:f2:d5:e0:75:8a:9d:
         2b:84:cc:0b:18:f9:19:44:c0:0c:90:ca:2b:f7:b7:96:10:8d:
         d9:41:7f:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+y2JzkanRU+38NcIQTJupSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYzZkYjhlMGRiNzliMzE3NGZlZTk5ZmM2YTYwNWNmNTZk
ZmJkYzkwHhcNMjQwNTI2MDMwMTMxWhcNMjQwNTI3MDMwMTMxWjAzMTEwLwYDVQQD
EygyNDk2OTI3ZmNlMGIzNTdiZTIzZGMxMWNjNDRjNjAxNjgwNDA1ZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgstB0nzfLTw+rCv/Js0GkosXCTs
jrJ516/xvmag4AeFzrfdrPSrXJn+/0/lgJQK5be4nszMdipR5SlchOSVGQop07bu
NXY46jSUp42gxncX48kZ2RuLAPvJo8mHOhXOyTPK2SbrBw8KhTR5oyNqVh0yQhNL
0dguzj8xZDbirQMZVwF9KLZyGUEFTFNNL1rjy3Cd3a9WcNKi6Qr9EW53pDR6XvqZ
06/cEVErlC2gWlXVgY3Ny4xZ8cR2ZpuTdB+RsXdckaDw4gd7SuKdKq01lLMGw/Wr
ydHIeuixBqU5gOzHBEAMdr4GaCGcHgE3SuICe5CCt+wCnRaNUf0zHFDNwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSWkn/OCzV74j3BHMRMYBaAQF8wMB8GA1UdIwQY
MBaAFILG244Nt5sxdP7pn8amBc9W373JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3NiYmpnMjNtekYwX3VtZnhxWUZ6MWJmdmNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85ZTY4NTAtMzEwYy00MjBmLWI3NTUt
YmFiYTRlM2QzYzFkLzEvZ3NiYmpnMjNtekYwX3VtZnhxWUZ6MWJmdmNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC85ZTY4NTAtMzEwYy00MjBmLWI3NTUtYmFiYTRlM2QzYzFk
LzEvZ3NiYmpnMjNtekYwX3VtZnhxWUZ6MWJmdmNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8FVFnLv
28TiHH4UAif9QuNiDMkQVQlX0ailjPnQStSegRUokVxcv2QvrYssT+IdWjnyNwvl
7hkeOS1MfVEZ14baIvnzqlUkGsafbkI4KUMAkC0tjBq301OBDv5V34rsRMJKAh1P
lyvnPUxYUsvhqmy5bTJGHDSlH1rBoLjS6cTgza79RgBIaBE+5St65Nr8Cx9wubd9
o06NkGVjCNBirgLXjS9duyE1XDDAZKkvwcLz/rzHReyyNWwL/T6MTB9OmcrwnOzf
EVeaAu4FmobxHSNl9NLxSCXvh9XG2gHwILsOrgHJ8tXgdYqdK4TMCxj5GUTADJDK
K/e3lhCN2UF/HA==
-----END CERTIFICATE-----
Generated at Sun May 26 08:22:24 2024 by rpki-client on console-ams.rpki-client.org