Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
File:                     GB5NYIFS_CRK__ui3HK4UbGbJSc.mft (raw, json)
Hash identifier:          3EDk2xukQnzYcHlIG+JEFKrxu1AkxCTcEz2xMHo9aDw=
Subject key identifier:   60:9E:7E:D7:E2:C4:CF:22:BC:F2:3A:23:62:46:8F:F4:A2:D7:3E:35
Authority key identifier: 18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
Certificate issuer:       /CN=181e4d608152fc244afffba2dc72b851b19b2527
Certificate serial:       019406B3D4D8E4DF39165A36FC0C5D8646F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
Manifest number:          13CC
Signing time:             Fri 27 Dec 2024 06:00:36 +0000
Manifest this update:     Fri 27 Dec 2024 06:00:36 +0000
Manifest next update:     Sat 28 Dec 2024 06:00:36 +0000
Files and hashes:         1: GB5NYIFS_CRK__ui3HK4UbGbJSc.crl (hash: dVIYprEyfhvDe2TzSGWjbmWJX8OjM2GNe97GXXeh/fY=)
                          2: hnaBnhLAiVCARXhCMtwKIhOnK4Y.roa (hash: Rc4Yt9X9IYHH/RqTUqJET2qXRyrKXbRDfi9DyP9l6GA=)
                          3: uQ5LB2wgDpvk4NWaddMFTpiAFLQ.roa (hash: +BnmmJZaKG83U/LnZI5FWk4Dc8VrvZzumrDME3pVwVo=)
                          4: xuF2W_JTaTbbnE4s7hpvXPjVKrs.roa (hash: Pv0WtladW979bxTn0V4VCUShu0QiEkjuK0fNjP+uh0o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:b3:d4:d8:e4:df:39:16:5a:36:fc:0c:5d:86:46:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181e4d608152fc244afffba2dc72b851b19b2527
        Validity
            Not Before: Dec 27 06:00:36 2024 GMT
            Not After : Dec 28 06:00:36 2024 GMT
        Subject: CN=609e7ed7e2c4cf22bcf23a2362468ff4a2d73e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:22:5f:c0:23:99:c0:5a:c6:73:2d:86:3b:02:
                    eb:9b:97:d8:c0:b8:64:91:d7:0f:44:a0:a2:a7:b3:
                    77:07:68:e0:cd:03:85:71:ca:33:9f:aa:45:7a:5a:
                    98:ea:2c:fe:14:4c:a6:e8:12:42:23:a2:2d:7b:7b:
                    fe:5b:f9:af:d1:dc:d6:f7:48:74:f4:df:ce:19:02:
                    1a:9e:83:4a:ac:72:7e:32:c4:92:2d:30:28:92:32:
                    08:03:e9:9a:cc:9e:6f:81:ac:1a:19:03:a0:5f:22:
                    78:82:f4:e2:03:21:a7:f6:04:c7:b6:24:6f:db:20:
                    9a:9b:00:c9:78:94:70:9e:bd:34:91:66:07:0c:6b:
                    b3:79:4f:7e:c5:23:7e:fb:cf:ed:90:21:14:c6:c3:
                    6d:9c:c0:b4:41:3c:ee:e2:f8:a5:d4:23:b8:39:81:
                    90:e7:4b:5f:4e:67:f5:a8:ff:ee:76:04:35:e5:35:
                    b5:a9:e5:11:67:fc:54:90:9e:a4:e9:5a:b7:e5:2a:
                    4a:33:cc:b4:59:54:fb:78:d3:34:06:dd:1e:54:df:
                    2c:f8:18:10:90:da:14:e6:14:15:b7:22:70:91:cd:
                    61:e8:5c:96:e6:d0:53:3e:44:28:2a:bb:50:c3:bf:
                    d8:91:6a:68:a3:da:ac:ae:bd:e5:ec:e7:4e:ce:ca:
                    8f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9E:7E:D7:E2:C4:CF:22:BC:F2:3A:23:62:46:8F:F4:A2:D7:3E:35
            X509v3 Authority Key Identifier:
                keyid:18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b5:72:85:18:58:52:80:4c:bd:a2:04:75:69:67:4a:13:08:
         18:1c:c6:d4:e5:3d:33:f0:ec:44:ba:76:1d:cc:84:b1:20:1b:
         21:ce:a5:c1:19:98:f5:73:fb:bd:fb:ec:81:71:1d:e8:7c:d9:
         6d:9b:20:46:1b:58:f4:fb:5b:67:c6:04:d9:16:91:46:13:fe:
         45:79:c9:2b:06:7f:ed:a6:96:d7:96:4b:3b:f7:05:be:23:8f:
         36:ca:14:a9:95:f3:29:83:f4:c7:e6:2c:a4:6a:ab:21:f3:22:
         d9:68:cf:d2:46:45:1f:71:1e:87:b3:79:bc:f1:92:c1:22:5c:
         94:38:8b:35:b6:01:59:f3:a8:ab:68:bf:cb:d6:16:e2:07:5d:
         2f:28:7f:5b:e2:e7:2c:66:6a:49:2d:55:78:20:de:5c:f9:28:
         f9:09:48:f7:cf:e3:60:52:88:e0:b7:02:a6:84:81:cd:f2:c2:
         0e:18:12:9f:8d:cd:0b:a0:64:9c:58:c4:20:90:8f:eb:bf:93:
         4e:24:e3:46:80:32:6c:da:ce:5b:64:af:81:a1:a4:06:2f:ed:
         1e:04:45:ba:75:26:6f:46:7c:c6:a2:61:ac:85:ef:d9:d6:ec:
         61:9f:8e:57:cc:54:0c:83:43:bc:1d:84:f1:39:24:d3:c8:cb:
         74:1e:63:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:40:01 2024 by rpki-client on console-ams.rpki-client.org