Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
File:                     GUoR_la49HpaFBUDK3f_n7CC4D8.mft (raw, json)
Hash identifier:          ItmotXxm/qZ3ExYWzwLYVIiiccB/v+5N0Vo00H5jTk4=
Subject key identifier:   41:9E:81:B9:95:96:4C:FC:87:EB:DE:A6:77:63:D4:3D:0D:B9:63:67
Authority key identifier: 19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F
Certificate issuer:       /CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f
Certificate serial:       018F4790F3BCEA0FE348AC4FB145DDB1AD82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
Manifest number:          0C15
Signing time:             Sun 05 May 2024 07:03:52 +0000
Manifest this update:     Sun 05 May 2024 07:03:52 +0000
Manifest next update:     Mon 06 May 2024 07:03:52 +0000
Files and hashes:         1: GUoR_la49HpaFBUDK3f_n7CC4D8.crl (hash: JCbf2a8JD1ak+2uZOvW26klwHPZyRh/FSXzrsgmIQ90=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 07:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:90:f3:bc:ea:0f:e3:48:ac:4f:b1:45:dd:b1:ad:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f
        Validity
            Not Before: May  5 07:03:52 2024 GMT
            Not After : May  6 07:03:52 2024 GMT
        Subject: CN=419e81b995964cfc87ebdea67763d43d0db96367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d7:1f:7b:8b:62:a4:f0:41:d8:25:a1:fa:2c:
                    ad:c6:05:cb:4c:bb:3b:d2:03:9d:3c:a8:f0:1d:cc:
                    9e:84:64:76:b4:84:75:d7:17:46:dc:a3:d4:01:36:
                    21:7e:88:64:e4:24:89:9d:c0:87:1a:da:bd:46:f6:
                    c4:db:59:5e:94:84:f4:4d:97:90:47:1d:53:96:86:
                    80:3c:6d:96:d8:69:79:07:9b:1f:af:da:bd:af:09:
                    a9:b8:47:be:89:17:13:63:e8:6c:ca:af:30:d5:39:
                    21:c3:5d:93:9c:ae:49:91:fb:c8:78:15:1b:43:67:
                    41:07:3a:12:cb:a3:7e:9d:14:69:b3:16:8d:a6:99:
                    23:67:8a:5a:a0:58:a8:ec:c9:96:d3:51:05:f0:a2:
                    ff:d7:56:17:7c:b0:ec:94:9f:b1:ed:f8:aa:6b:57:
                    92:ff:78:a3:a0:60:17:55:ca:87:3f:30:4d:76:f4:
                    97:d4:eb:78:04:24:12:c1:39:80:fb:1e:9c:5b:22:
                    b0:6a:0f:cb:bf:7a:b2:53:54:fe:10:18:2c:38:6a:
                    ca:e7:3d:8c:6b:1c:9d:72:09:6a:22:d8:17:86:81:
                    73:cb:69:9f:02:ea:fb:0b:c7:e8:1c:1f:72:ac:bf:
                    d4:a6:cd:14:9c:41:99:5f:59:78:59:fc:8d:ee:c1:
                    f9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9E:81:B9:95:96:4C:FC:87:EB:DE:A6:77:63:D4:3D:0D:B9:63:67
            X509v3 Authority Key Identifier:
                keyid:19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:9d:52:a7:e3:2f:29:73:ad:25:18:d8:10:43:ad:60:c2:f7:
         69:15:0f:a7:a5:5c:41:52:13:a7:ad:fb:bb:46:e1:34:ae:82:
         20:83:f4:f9:23:ad:f7:1d:09:65:a4:52:41:75:37:99:69:02:
         49:8b:e2:5b:63:c2:71:77:2d:25:15:e4:30:02:ff:20:eb:84:
         a1:f5:07:82:6c:6b:67:70:74:3c:e3:cf:95:12:95:50:17:ef:
         dc:11:ed:05:0f:91:65:f3:aa:f9:7d:14:66:3a:2b:94:09:31:
         1d:88:b2:ad:8a:aa:b7:89:54:a0:91:80:ee:be:31:2a:89:d6:
         f2:31:c8:1f:c4:b3:de:de:b7:32:71:79:01:a9:22:ad:5c:a4:
         6a:df:37:b2:7b:f8:5b:40:8c:ea:ea:ec:20:95:4a:c0:d5:55:
         42:b8:39:bd:de:6b:e8:05:0c:7f:18:6e:e0:fc:72:1c:67:6c:
         dc:8b:2c:45:15:2b:48:46:f5:2e:d6:11:22:c8:33:4e:39:93:
         0d:95:65:ed:ac:73:ac:6a:8a:ac:4b:96:b5:7a:b2:9c:a0:ea:
         5b:f5:94:09:5f:16:57:ee:19:82:21:36:98:80:8e:d9:3e:9e:
         7e:a9:cf:72:c0:63:a8:ee:bb:d2:93:ac:76:90:4e:e0:4c:aa:
         a3:22:ce:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 10:00:12 2024 by rpki-client on console-fra.rpki-client.org