Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
File:                     GUKBeimILUM78buOvFmy_yVugD8.mft (raw, json)
Hash identifier:          5FOW118k/eNK+9g4yML478ARTTp7btEGXrD7nYmLvmI=
Subject key identifier:   50:82:D0:59:CE:D4:80:47:8C:68:68:61:5C:7E:38:A1:5F:F5:4A:87
Authority key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
Certificate issuer:       /CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Certificate serial:       018F396537307133A5FB94E1B1051C85B35D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
Manifest number:          0687
Signing time:             Thu 02 May 2024 13:01:25 +0000
Manifest this update:     Thu 02 May 2024 13:01:25 +0000
Manifest next update:     Fri 03 May 2024 13:01:25 +0000
Files and hashes:         1: GUKBeimILUM78buOvFmy_yVugD8.crl (hash: UUj5FGczqF6SjHAzwjcYDyCFTJUYwf/EUjsLMpmYpBI=)
                          2: mzjdQ8bGGKLxqAiJZOBzKWdojLc.roa (hash: zW+nE2ANkEWL6YnQDiArZSzjEOS29RXKUamj5wCg++I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:39:65:37:30:71:33:a5:fb:94:e1:b1:05:1c:85:b3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
        Validity
            Not Before: May  2 13:01:25 2024 GMT
            Not After : May  3 13:01:25 2024 GMT
        Subject: CN=5082d059ced480478c6868615c7e38a15ff54a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:34:c5:30:0b:6f:46:0c:2e:28:f4:3d:dd:bc:
                    d4:a2:3b:06:b3:48:7c:be:36:c4:7b:5a:2b:a6:49:
                    90:2d:9e:dc:03:c7:d1:8a:82:70:0a:96:ab:f7:ce:
                    b9:4a:b0:36:f9:3c:12:08:ad:46:c8:79:57:43:b5:
                    4d:c0:57:f8:8e:99:aa:fb:43:bc:a3:f3:99:c1:12:
                    24:c3:b2:33:c2:f7:eb:31:f7:6a:39:50:32:3a:7d:
                    fb:ea:10:36:70:b3:1d:5f:8a:ab:a5:98:42:a9:55:
                    ad:c3:9a:6a:06:01:7d:7a:a2:ca:9e:ef:29:3c:f2:
                    b5:46:fa:7e:23:cd:1a:1e:ad:3d:92:e4:f6:b6:1e:
                    c7:1d:6e:b2:3e:c1:f8:b7:5a:84:77:96:c4:2c:ef:
                    e0:f7:2a:2e:6a:e3:ac:f5:ce:ff:38:36:01:c0:fc:
                    06:30:6f:f5:9f:ed:63:7a:11:5e:3a:25:d1:c8:61:
                    86:d8:cf:27:93:51:d7:13:b9:90:8f:d0:66:71:10:
                    a4:c4:b5:dc:11:47:2b:48:69:37:ca:37:96:dd:ce:
                    f7:6e:95:aa:67:cc:99:f1:b6:1b:64:f0:d2:2a:ad:
                    de:94:14:af:67:7e:6e:9c:c3:f1:83:5f:3c:3c:73:
                    57:d9:0b:8f:96:3f:e3:0d:88:0f:cf:2a:bd:a3:cd:
                    bc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:82:D0:59:CE:D4:80:47:8C:68:68:61:5C:7E:38:A1:5F:F5:4A:87
            X509v3 Authority Key Identifier:
                keyid:19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e0:ca:c9:b8:ca:99:7f:f6:e0:94:b1:ed:c8:89:9f:17:59:
         08:39:ae:a5:5b:3c:44:ca:c2:7f:54:9e:46:a4:62:02:96:ea:
         00:3e:90:80:6a:0e:de:00:ab:db:f1:22:26:b7:8a:e9:6a:0e:
         cb:7a:47:06:6b:86:12:1f:6d:5c:af:0e:44:98:da:28:fc:4d:
         5d:d4:35:a1:0d:5c:b0:fe:67:96:fb:d7:62:90:5e:0d:27:7f:
         03:e2:51:f5:5b:0c:9a:1e:f5:aa:fc:2e:6e:66:ff:97:f5:55:
         10:7a:48:59:e4:a5:e3:95:70:d4:0a:87:03:df:2c:69:c1:37:
         31:9d:69:2b:8a:20:83:fb:80:03:23:d0:a4:67:f7:e9:65:73:
         5c:99:10:bd:bb:c9:f5:f3:5e:9b:83:d3:cc:8f:08:27:b6:b6:
         e2:d8:8a:db:62:9d:c8:81:5e:49:94:17:67:e1:36:ca:7d:c7:
         8a:82:2d:4f:3f:3b:67:57:f6:bd:93:74:5b:0a:72:38:51:d2:
         fb:8f:dd:aa:3e:7b:b7:3d:e7:30:ac:c8:11:dc:0a:9d:e0:26:
         0d:55:e9:92:bc:c7:c9:5d:bd:af:5c:8f:6b:5c:66:a2:bd:fe:
         97:30:1d:9b:82:54:c7:f5:43:33:74:bf:a4:a0:ad:9c:1e:b4:
         0e:0e:cb:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY85ZTcwcTOl+5ThsQUchbNdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI4MTdhMjk4ODJkNDMzYmYxYmI4ZWJjNTliMmZmMjU2
ZTgwM2YwHhcNMjQwNTAyMTMwMTI1WhcNMjQwNTAzMTMwMTI1WjAzMTEwLwYDVQQD
Eyg1MDgyZDA1OWNlZDQ4MDQ3OGM2ODY4NjE1YzdlMzhhMTVmZjU0YTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTTFMAtvRgwuKPQ93bzUojsGs0h8
vjbEe1orpkmQLZ7cA8fRioJwCpar9865SrA2+TwSCK1GyHlXQ7VNwFf4jpmq+0O8
o/OZwRIkw7IzwvfrMfdqOVAyOn376hA2cLMdX4qrpZhCqVWtw5pqBgF9eqLKnu8p
PPK1Rvp+I80aHq09kuT2th7HHW6yPsH4t1qEd5bELO/g9youauOs9c7/ODYBwPwG
MG/1n+1jehFeOiXRyGGG2M8nk1HXE7mQj9BmcRCkxLXcEUcrSGk3yjeW3c73bpWq
Z8yZ8bYbZPDSKq3elBSvZ35unMPxg188PHNX2QuPlj/jDYgPzyq9o828TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCC0FnO1IBHjGhoYVx+OKFf9UqHMB8GA1UdIwQY
MBaAFBlCgXopiC1DO/G7jrxZsv8lboA/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VLQmVpbUlMVU03OGJ1T3ZGbXlfeVZ1Z0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81MzAwNjQtMjQ4Mi00NWJlLWJmZmUt
ZmRkZTU4YWIyOWY5LzEvR1VLQmVpbUlMVU03OGJ1T3ZGbXlfeVZ1Z0Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81MzAwNjQtMjQ4Mi00NWJlLWJmZmUtZmRkZTU4YWIyOWY5
LzEvR1VLQmVpbUlMVU03OGJ1T3ZGbXlfeVZ1Z0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnuDKybjK
mX/24JSx7ciJnxdZCDmupVs8RMrCf1SeRqRiApbqAD6QgGoO3gCr2/EiJreK6WoO
y3pHBmuGEh9tXK8ORJjaKPxNXdQ1oQ1csP5nlvvXYpBeDSd/A+JR9VsMmh71qvwu
bmb/l/VVEHpIWeSl45Vw1AqHA98sacE3MZ1pK4ogg/uAAyPQpGf36WVzXJkQvbvJ
9fNem4PTzI8IJ7a24tiK22KdyIFeSZQXZ+E2yn3HioItTz87Z1f2vZN0WwpyOFHS
+4/dqj57tz3nMKzIEdwKneAmDVXpkrzHyV29r1yPa1xmor3+lzAdm4JUx/VDM3S/
pKCtnB60Dg7L1A==
-----END CERTIFICATE-----
Generated at Thu May 2 15:08:17 2024 by rpki-client on console-fra.rpki-client.org