Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
File:                     Gk-AAcMMrFRuP5IQO0sScy38v1I.mft (raw, json)
Hash identifier:          EtiCc/pV6uaWfeuML7IJPPUvv2MYZ37svQ6ohgn7i3g=
Subject key identifier:   5C:CD:9C:37:14:33:8A:C7:9D:9A:6F:0B:91:C5:B1:5C:76:9A:80:E6
Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
Certificate issuer:       /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Certificate serial:       018F4A2230C5E8C51C71D903B951F4600219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
Manifest number:          1158
Signing time:             Sun 05 May 2024 19:01:45 +0000
Manifest this update:     Sun 05 May 2024 19:01:45 +0000
Manifest next update:     Mon 06 May 2024 19:01:45 +0000
Files and hashes:         1: Gk-AAcMMrFRuP5IQO0sScy38v1I.crl (hash: qqRONuO1DkdXPAyWYXuH8VwzQ3JZdoKl3eworkwIr24=)
                          2: HLBqL1Utasb5Xniz6f_U8C9Bxy4.roa (hash: RrSy1EJUUEMHJMjtajwbQ1m+EUY5kGhNC9/eG5GdTT8=)
                          3: J9qATCPGlCfGRTdrjVM6Zb5f4yA.roa (hash: wQD5rmC93BXZa2Zn2pTl7gGRK6E/CWPM1YTB5UnfH7c=)
                          4: Vo82ABbh79ku_YvUWXah5iIZCd0.roa (hash: n8T10wI17uTKFuhXoTuBedzRKSxVhAzom5LZZY5qPsg=)
                          5: k4dQJ7-jKSguo9QTFiGGSFlDIA4.roa (hash: vVUC1sskQ2EVDv7ng7m2kyIjKuQOQt8EpXvCoNU9tDs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:22:30:c5:e8:c5:1c:71:d9:03:b9:51:f4:60:02:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
        Validity
            Not Before: May  5 19:01:45 2024 GMT
            Not After : May  6 19:01:45 2024 GMT
        Subject: CN=5ccd9c3714338ac79d9a6f0b91c5b15c769a80e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:c5:2a:07:1e:7d:28:e0:d2:58:d6:90:07:
                    95:69:f6:24:f9:72:36:ca:b7:44:c4:90:ed:9c:ac:
                    88:30:2e:a0:f1:c6:e0:f7:f2:58:f2:7e:89:a4:de:
                    c9:78:72:44:6e:f6:0b:51:93:b9:ab:68:5e:e9:b0:
                    c8:57:d8:76:01:da:04:37:67:70:92:44:00:a7:56:
                    aa:75:2d:70:20:2a:e8:76:61:04:d7:ac:28:ee:40:
                    ed:d1:e6:c3:17:c5:f1:de:e9:c8:b1:24:82:2a:f7:
                    c0:d5:5a:b8:1b:2a:ef:d8:d3:a8:ed:23:75:d9:c7:
                    3a:ac:b1:8b:b8:e8:bb:58:52:c9:4d:5e:6b:cd:10:
                    3f:49:91:74:e2:51:ea:c3:51:63:85:0e:89:04:c8:
                    f4:cd:04:05:1c:79:a7:8d:fb:d4:8d:57:ad:a0:89:
                    e1:7f:da:c0:2c:ec:8e:a5:6e:af:7d:d0:58:71:02:
                    6f:e2:01:99:01:75:de:bc:f9:de:35:87:d0:ce:80:
                    50:fd:d0:e2:e2:80:89:92:22:86:f3:c6:f4:7f:b5:
                    8b:d5:ce:58:25:d1:46:50:6e:54:55:e7:c4:57:bc:
                    83:71:4c:02:d1:18:27:d0:e6:af:e2:a4:7c:71:e3:
                    e3:d2:71:9f:5f:46:b8:36:c3:6e:8f:27:6e:88:05:
                    7d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CD:9C:37:14:33:8A:C7:9D:9A:6F:0B:91:C5:B1:5C:76:9A:80:E6
            X509v3 Authority Key Identifier:
                keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ee:c9:d7:f0:5c:c1:cf:e9:f0:d6:e3:08:c8:09:26:50:e3:
         03:fe:6d:32:51:64:8a:2f:a7:24:bf:5e:0b:29:27:58:e9:93:
         b2:22:16:67:52:3e:e0:72:5a:82:ab:29:0e:87:65:71:64:2f:
         c5:f9:c8:04:48:e5:48:b0:d3:6b:d1:5e:5d:49:3e:7d:79:03:
         a7:ff:da:5f:36:0a:c7:2e:15:a3:82:f2:19:93:0c:ec:8b:08:
         ce:93:cc:01:a0:8f:a7:36:2a:ac:6f:bb:e7:56:75:8d:5c:ae:
         86:0f:79:aa:56:02:fa:a4:e0:14:f5:9e:b5:20:d4:5b:89:ee:
         a5:26:bd:01:ee:d7:13:5c:64:d2:75:21:41:94:fa:59:ff:d8:
         3a:f7:97:6d:eb:68:a2:99:db:19:93:9e:7b:bc:e7:4f:40:95:
         9b:9f:69:46:84:08:94:3c:25:08:50:f0:24:12:49:1f:b3:8b:
         19:d7:71:3d:1d:e6:ae:77:58:e6:e7:4a:10:44:61:83:0b:97:
         d2:44:e2:d1:56:51:eb:5b:3d:38:81:76:70:6e:bc:4d:82:d5:
         b7:48:e6:53:46:9d:88:df:c7:2f:91:40:ad:53:c9:62:7b:07:
         86:ec:cb:be:a0:68:b0:78:a1:82:38:12:d9:bd:a7:c7:4f:4e:
         ef:5c:e1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:15:27 2024 by rpki-client on console-fra.rpki-client.org