Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
File:                     GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json)
Hash identifier:          sf2SfaYB6jI5FzGORf+YBU53sK2N9jkmSTOPJ2Rcv4M=
Subject key identifier:   56:06:C6:A1:38:C5:5F:96:85:7E:45:B5:FC:01:71:96:41:7F:BD:CF
Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
Certificate issuer:       /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Certificate serial:       01906F0771BFE9204D6AE81B0F1DC9F942B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
Manifest number:          0ED0
Signing time:             Mon 01 Jul 2024 16:01:17 +0000
Manifest this update:     Mon 01 Jul 2024 16:01:17 +0000
Manifest next update:     Tue 02 Jul 2024 16:01:17 +0000
Files and hashes:         1: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: ZXjbcX9/x1UovDrZCjL3S/X+GIz6JsnTQeox706QZ1g=)
                          2: IvNPLpHgrmfwftPfFvLuiiuUwxg.roa (hash: nIRXoWFHdSS+2uUBV8KNyzoC84ecb71LXGWPUa7NwxM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 13:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6f:07:71:bf:e9:20:4d:6a:e8:1b:0f:1d:c9:f9:42:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
        Validity
            Not Before: Jul  1 16:01:17 2024 GMT
            Not After : Jul  2 16:01:17 2024 GMT
        Subject: CN=5606c6a138c55f96857e45b5fc017196417fbdcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8c:1c:a5:bb:35:98:96:9a:25:45:1b:44:4c:
                    1e:18:6a:a5:cc:67:a3:d4:a9:e3:f9:85:d1:05:57:
                    de:9f:ed:1c:b2:90:ba:1a:75:50:6e:5e:23:55:74:
                    e2:5e:80:ba:3a:af:a2:3f:cd:cd:fc:61:7d:9a:08:
                    c0:ca:22:bc:3b:19:54:59:20:7d:12:bf:dc:ae:64:
                    dd:f9:a4:38:a4:ec:e0:ac:66:68:a0:8b:af:fa:ca:
                    2f:1c:66:3a:cd:db:8d:cd:a4:7f:67:3e:83:35:50:
                    2d:3e:a0:03:d2:c9:03:78:b0:9d:e0:e1:24:e6:02:
                    ae:0b:c7:87:20:f0:cb:90:d1:60:45:6f:ee:9d:cd:
                    34:f3:d9:cc:70:33:67:a4:0e:1b:88:2a:ef:cf:42:
                    94:c4:30:9e:80:5f:e6:c6:74:da:07:75:1b:85:3f:
                    3a:77:7f:48:27:d1:b0:09:fa:b5:b4:63:e1:45:3d:
                    cf:4a:e0:2d:6d:2d:37:2b:af:94:37:0e:f2:37:9b:
                    17:3e:38:a5:de:17:2a:9a:5b:b3:1e:11:b5:6f:47:
                    76:53:1e:ce:82:41:fc:4c:51:c8:ad:71:a6:76:04:
                    35:28:7d:d4:9a:c8:12:2d:90:25:d0:41:44:95:7f:
                    7d:c8:24:b8:f3:07:cc:25:99:7e:29:80:51:1a:b0:
                    53:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:06:C6:A1:38:C5:5F:96:85:7E:45:B5:FC:01:71:96:41:7F:BD:CF
            X509v3 Authority Key Identifier:
                keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6c:fa:51:de:9a:5f:f2:29:d4:50:61:c5:29:38:c6:99:1d:
         8b:02:c7:a1:a2:1a:83:c5:d0:21:4e:22:35:04:60:9c:5e:38:
         14:55:d5:6f:1f:57:4b:ce:0a:e4:49:78:66:03:9a:88:74:3e:
         3f:49:16:23:8a:04:3c:6f:59:9b:48:a0:f0:2c:69:08:23:9b:
         92:db:bc:82:49:3e:3b:19:83:eb:2e:f3:f7:f4:a9:41:b4:ee:
         4d:2e:d4:c1:73:de:f8:c7:2f:ae:06:ee:29:f5:03:31:7f:e6:
         1d:f0:60:c4:54:b5:44:e3:53:1c:d0:0c:82:39:fb:30:a3:25:
         98:4e:b5:ed:9e:f8:03:09:cf:44:86:0a:64:87:41:53:c3:65:
         6c:0e:03:41:20:29:ed:1e:53:0a:04:ce:81:68:ab:46:20:23:
         5f:7a:e2:d9:81:af:1d:2c:d5:88:cf:46:a9:55:bc:15:ce:aa:
         48:e3:0b:65:e5:1f:81:d2:b1:91:18:ec:ed:0d:b1:c4:c1:6b:
         61:00:ad:97:0d:29:6c:95:ac:42:b6:21:26:a6:01:c9:dd:80:
         c6:a7:76:f2:ad:83:df:6b:ce:9b:1a:64:88:b1:24:d4:91:aa:
         df:17:7d:50:ab:4f:0b:e6:40:43:01:2f:75:0f:a1:3e:df:fa:
         1a:40:06:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBvB3G/6SBNaugbDx3J+UK4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZDRjY2NlZmU1NWM1ZTIyM2E5YjMyMDViOTM4YTNkMWM5
ZTg2ZDUwHhcNMjQwNzAxMTYwMTE3WhcNMjQwNzAyMTYwMTE3WjAzMTEwLwYDVQQD
Eyg1NjA2YzZhMTM4YzU1Zjk2ODU3ZTQ1YjVmYzAxNzE5NjQxN2ZiZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkowcpbs1mJaaJUUbREweGGqlzGej
1Knj+YXRBVfen+0cspC6GnVQbl4jVXTiXoC6Oq+iP83N/GF9mgjAyiK8OxlUWSB9
Er/crmTd+aQ4pOzgrGZooIuv+sovHGY6zduNzaR/Zz6DNVAtPqAD0skDeLCd4OEk
5gKuC8eHIPDLkNFgRW/unc0089nMcDNnpA4biCrvz0KUxDCegF/mxnTaB3UbhT86
d39IJ9GwCfq1tGPhRT3PSuAtbS03K6+UNw7yN5sXPjil3hcqmluzHhG1b0d2Ux7O
gkH8TFHIrXGmdgQ1KH3UmsgSLZAl0EFElX99yCS48wfMJZl+KYBRGrBTuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYGxqE4xV+WhX5FtfwBcZZBf73PMB8GA1UdIwQY
MBaAFBrUzM7+VcXiI6mzIFuTij0cnobVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kMjM4NzAtNzRjNy00YTg0LTkwZWMt
YzMyMDM2NzUwZTM2LzEvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kMjM4NzAtNzRjNy00YTg0LTkwZWMtYzMyMDM2NzUwZTM2
LzEvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmz6Ud6a
X/Ip1FBhxSk4xpkdiwLHoaIag8XQIU4iNQRgnF44FFXVbx9XS84K5El4ZgOaiHQ+
P0kWI4oEPG9Zm0ig8CxpCCObktu8gkk+OxmD6y7z9/SpQbTuTS7UwXPe+Mcvrgbu
KfUDMX/mHfBgxFS1RONTHNAMgjn7MKMlmE617Z74AwnPRIYKZIdBU8NlbA4DQSAp
7R5TCgTOgWirRiAjX3ri2YGvHSzViM9GqVW8Fc6qSOMLZeUfgdKxkRjs7Q2xxMFr
YQCtlw0pbJWsQrYhJqYByd2Axqd28q2D32vOmxpkiLEk1JGq3xd9UKtPC+ZAQwEv
dQ+hPt/6GkAGFQ==
-----END CERTIFICATE-----
Generated at Mon Jul 1 17:14:28 2024 by rpki-client on console-fra.rpki-client.org