Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
File:                     GB5NYIFS_CRK__ui3HK4UbGbJSc.mft (raw, json)
Hash identifier:          3UR5sAk7c/HatcIi4a12R0I/RygjMyh6D0JDuf3Mb1c=
Subject key identifier:   94:67:39:78:BD:B3:5C:07:56:30:57:89:A2:CC:F1:76:62:63:53:80
Authority key identifier: 18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
Certificate issuer:       /CN=181e4d608152fc244afffba2dc72b851b19b2527
Certificate serial:       018F460E525D3BB03093C15E54FF156DCCA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
Manifest number:          1156
Signing time:             Sun 05 May 2024 00:01:34 +0000
Manifest this update:     Sun 05 May 2024 00:01:34 +0000
Manifest next update:     Mon 06 May 2024 00:01:34 +0000
Files and hashes:         1: GB5NYIFS_CRK__ui3HK4UbGbJSc.crl (hash: NzonaUC+4gnT9SIQ+PWzCdHSdQrIkGCuG2jkn/yib+k=)
                          2: hnaBnhLAiVCARXhCMtwKIhOnK4Y.roa (hash: Rc4Yt9X9IYHH/RqTUqJET2qXRyrKXbRDfi9DyP9l6GA=)
                          3: uQ5LB2wgDpvk4NWaddMFTpiAFLQ.roa (hash: +BnmmJZaKG83U/LnZI5FWk4Dc8VrvZzumrDME3pVwVo=)
                          4: xuF2W_JTaTbbnE4s7hpvXPjVKrs.roa (hash: Pv0WtladW979bxTn0V4VCUShu0QiEkjuK0fNjP+uh0o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:0e:52:5d:3b:b0:30:93:c1:5e:54:ff:15:6d:cc:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181e4d608152fc244afffba2dc72b851b19b2527
        Validity
            Not Before: May  5 00:01:34 2024 GMT
            Not After : May  6 00:01:34 2024 GMT
        Subject: CN=94673978bdb35c0756305789a2ccf17662635380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:05:ba:5b:df:eb:e4:52:1e:ff:e7:c0:de:b3:
                    e6:bc:49:ea:0e:a8:bc:11:85:58:f3:83:28:51:09:
                    22:a7:b0:bb:d5:21:3d:1a:f8:27:ab:85:01:0d:94:
                    7a:2d:e3:e7:2a:de:3c:b9:5d:a3:76:aa:5c:83:e9:
                    4b:75:84:dc:b5:cb:1c:e7:cb:52:31:59:2e:1f:8e:
                    ce:5a:7a:f1:1f:18:31:94:31:1a:28:24:76:e9:27:
                    82:d2:f9:18:88:d8:1e:2e:d1:1b:da:d3:d1:36:0f:
                    4e:90:e3:13:d6:92:df:20:63:29:48:e4:96:75:ec:
                    1b:6f:89:40:84:01:0b:d6:20:57:23:3e:72:11:b7:
                    86:95:66:2e:71:0a:74:4e:f5:91:97:69:ee:68:72:
                    db:3e:f0:d8:a5:d0:13:50:2d:8a:25:cc:ec:8f:39:
                    4f:bd:f4:e3:6b:3d:aa:3f:c0:c0:2a:8a:29:63:10:
                    06:b6:07:71:5e:ee:32:54:7c:9d:74:66:8b:2b:32:
                    1f:bf:ea:d7:90:c5:69:a6:d6:8e:6e:36:03:a1:de:
                    0b:6d:02:54:f5:0b:0a:62:a2:ac:7f:76:71:17:22:
                    c6:9a:a4:ab:f9:ae:85:d2:77:29:79:84:83:6a:86:
                    00:f0:e2:09:e2:09:63:ea:c0:8d:0c:9c:8e:a1:0b:
                    f2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:67:39:78:BD:B3:5C:07:56:30:57:89:A2:CC:F1:76:62:63:53:80
            X509v3 Authority Key Identifier:
                keyid:18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:bd:ab:9d:6d:7e:68:cf:c3:6a:3e:6f:3f:49:d1:15:55:c6:
         86:58:0f:58:50:4a:65:c0:2a:8a:6c:19:98:e9:c2:52:71:6e:
         14:0a:8a:e5:f9:16:b2:46:a0:2e:67:d2:b7:46:44:5c:80:2c:
         20:b0:af:2f:d4:38:02:c8:94:f0:e3:d1:87:60:d2:16:45:d3:
         3b:df:a2:7e:bf:dd:c2:ea:f8:83:6a:a3:7e:c7:6c:66:cf:95:
         4a:03:87:a1:06:f2:7a:b4:3d:9f:70:90:99:3a:ba:8d:43:20:
         9c:bc:db:10:62:cb:03:46:71:83:e2:92:c1:2d:2f:44:11:18:
         ba:9d:ad:c3:d0:76:32:12:f5:7f:8e:eb:05:17:97:43:ab:f0:
         0c:82:4f:ae:8a:a7:94:d8:34:5e:d6:70:f0:94:ae:ea:6f:a4:
         2a:c0:bb:e3:82:4e:8d:bd:57:54:5a:5d:2c:2d:a6:8c:56:d9:
         10:4a:93:ab:f5:fe:fb:c6:c9:4b:3e:ac:4e:f3:35:31:a7:db:
         58:18:d3:43:54:eb:38:df:c6:15:3f:e4:ec:26:0a:f7:c2:c5:
         09:1d:13:ac:47:03:4b:4c:6e:22:41:47:b7:31:5a:57:95:dd:
         3c:a5:5a:e0:04:0f:5f:25:d5:a4:2b:23:32:ba:20:fd:bf:c8:
         c6:c0:2c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:30:06 2024 by rpki-client on console-ams.rpki-client.org