Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
File:                     gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft (raw, json)
Hash identifier:          6gRY+dNrpx4SaNhM0HKdn0EB39r8V7vzb7XX4dDaEeM=
Subject key identifier:   CA:28:30:36:D7:56:07:74:92:D4:09:0A:BE:2E:0A:EC:0C:CD:E3:C7
Authority key identifier: 82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
Certificate issuer:       /CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Certificate serial:       01935576708EB0E8D8AD869DBBDABD6EB128
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
Manifest number:          06E3
Signing time:             Fri 22 Nov 2024 20:00:45 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:45 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:45 +0000
Files and hashes:         1: QhFo0H31BxIAa_8rDeup_scAlOA.roa (hash: yNMn6QEEEKLbySltnMFuHyN3r9Vl8UfHz171k6Pa2tI=)
                          2: gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl (hash: 94aW9/U09zuaPnbz3b6fBKYOe0K+jJMIlekayZ19Ajc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:70:8e:b0:e8:d8:ad:86:9d:bb:da:bd:6e:b1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
        Validity
            Not Before: Nov 22 20:00:45 2024 GMT
            Not After : Nov 23 20:00:45 2024 GMT
        Subject: CN=ca283036d756077492d4090abe2e0aec0ccde3c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ae:a5:4f:d6:2c:c2:2e:b1:1c:38:ae:0c:ad:
                    78:60:3f:44:3f:ba:e7:7b:b7:36:1f:d1:99:2c:af:
                    82:01:88:dc:0e:c6:3a:86:b6:32:f0:46:f9:30:cc:
                    ff:db:c7:20:e2:e2:07:13:b0:2f:b1:5a:fe:4d:58:
                    dd:c4:f0:6e:28:23:ed:76:4d:f5:1c:f8:87:f1:e9:
                    f3:fe:56:f3:9f:6f:40:15:24:08:e9:fe:92:0b:ba:
                    6d:83:e1:4a:f7:aa:96:1f:ba:79:96:f3:a1:b6:eb:
                    4c:9c:bc:24:6e:2f:b5:88:4e:ab:6d:1d:1f:e4:82:
                    71:30:37:68:3a:91:df:50:59:50:9b:bd:25:de:16:
                    00:c4:65:9f:2d:09:78:f5:8b:99:67:ce:5b:08:a5:
                    1f:ce:69:dc:92:64:67:1a:27:75:1d:9e:d7:7e:f1:
                    05:30:c8:20:90:80:0b:7a:9d:c7:1c:b2:29:b0:b7:
                    ef:e6:f1:b6:04:6a:b0:17:55:22:a8:32:a6:3c:ca:
                    78:ce:00:e9:18:d6:da:fa:2d:ea:f3:47:b5:95:ca:
                    10:19:4d:a4:d3:d6:b1:50:0a:ed:c6:e3:67:4c:ed:
                    b1:68:7a:f9:0a:65:8f:49:a0:4b:e8:fa:09:b0:97:
                    45:11:99:1f:80:e1:0a:62:fb:42:23:9a:97:0e:8d:
                    6a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:28:30:36:D7:56:07:74:92:D4:09:0A:BE:2E:0A:EC:0C:CD:E3:C7
            X509v3 Authority Key Identifier:
                keyid:82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c2:91:85:0a:13:a2:d1:75:14:06:f0:83:c9:de:e7:6c:75:
         2e:cf:46:44:81:c4:f4:3c:6c:b2:ee:f0:40:0c:9a:5d:c8:87:
         b9:f7:d2:56:f5:a7:19:f6:a7:50:2f:8c:b9:f9:3b:7d:51:1b:
         7f:06:4d:8e:f6:ae:30:db:69:d0:50:75:65:a4:9b:49:e6:10:
         81:c9:ef:a0:20:02:fa:ee:ee:71:55:0c:27:15:82:31:3a:2f:
         3e:b4:94:00:65:62:62:98:2a:21:63:53:77:73:8e:56:43:c3:
         8a:b0:28:52:72:8f:4e:f6:af:70:5f:a5:8a:00:96:93:78:48:
         6c:2e:86:69:f4:96:80:a2:8c:da:73:54:55:e0:df:84:9e:5f:
         7d:22:f0:92:a2:fe:ac:95:cd:5b:57:0b:58:5e:38:6b:9b:21:
         93:be:af:70:fb:06:af:f6:3f:00:9a:80:35:e6:61:8d:86:af:
         3f:75:19:dc:a2:0d:53:69:15:e5:b8:a2:d5:40:6b:68:c9:e0:
         15:80:30:67:ea:5d:82:a9:28:fb:31:3e:5b:77:db:62:ad:df:
         81:6b:e8:61:14:ba:31:b2:58:81:6e:28:50:2b:b3:f1:1f:5e:
         8f:3c:18:71:d7:05:23:64:05:f6:8b:d5:8b:53:68:b4:92:40:
         6d:a1:62:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVdnCOsOjYrYadu9q9brEoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjFhNDJiZjIyNjRjYjVlYmNlYzZlMTkwZDAyYTZkNTUz
YjYyMzMwHhcNMjQxMTIyMjAwMDQ1WhcNMjQxMTIzMjAwMDQ1WjAzMTEwLwYDVQQD
EyhjYTI4MzAzNmQ3NTYwNzc0OTJkNDA5MGFiZTJlMGFlYzBjY2RlM2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq6lT9Yswi6xHDiuDK14YD9EP7rn
e7c2H9GZLK+CAYjcDsY6hrYy8Eb5MMz/28cg4uIHE7AvsVr+TVjdxPBuKCPtdk31
HPiH8enz/lbzn29AFSQI6f6SC7ptg+FK96qWH7p5lvOhtutMnLwkbi+1iE6rbR0f
5IJxMDdoOpHfUFlQm70l3hYAxGWfLQl49YuZZ85bCKUfzmnckmRnGid1HZ7XfvEF
MMggkIALep3HHLIpsLfv5vG2BGqwF1UiqDKmPMp4zgDpGNba+i3q80e1lcoQGU2k
09axUArtxuNnTO2xaHr5CmWPSaBL6PoJsJdFEZkfgOEKYvtCI5qXDo1qFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMooMDbXVgd0ktQJCr4uCuwMzePHMB8GA1UdIwQY
MBaAFIJhpCvyJky1687G4ZDQKm1VO2IzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21Ha0tfSW1UTFhyenNiaGtOQXFiVlU3WWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81NGI2NzgtYjJmZS00NDlkLWIzMjYt
ZGNhZTcwZjFjOTNiLzEvZ21Ha0tfSW1UTFhyenNiaGtOQXFiVlU3WWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS81NGI2NzgtYjJmZS00NDlkLWIzMjYtZGNhZTcwZjFjOTNi
LzEvZ21Ha0tfSW1UTFhyenNiaGtOQXFiVlU3WWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMKRhQoT
otF1FAbwg8ne52x1Ls9GRIHE9Dxssu7wQAyaXciHuffSVvWnGfanUC+Mufk7fVEb
fwZNjvauMNtp0FB1ZaSbSeYQgcnvoCAC+u7ucVUMJxWCMTovPrSUAGViYpgqIWNT
d3OOVkPDirAoUnKPTvavcF+ligCWk3hIbC6GafSWgKKM2nNUVeDfhJ5ffSLwkqL+
rJXNW1cLWF44a5shk76vcPsGr/Y/AJqANeZhjYavP3UZ3KINU2kV5bii1UBraMng
FYAwZ+pdgqko+zE+W3fbYq3fgWvoYRS6MbJYgW4oUCuz8R9ejzwYcdcFI2QF9ovV
i1NotJJAbaFipw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:14:19 2024 by rpki-client on console-fra.rpki-client.org