Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
File:                     GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft (raw, json)
Hash identifier:          cPCg7W8yzMwSfAARbXWG0FVy87BUa7Zwgz4ufVTt7Ww=
Subject key identifier:   5C:76:24:D8:12:64:B1:C7:83:D4:8F:07:51:AE:1D:F8:E2:DF:81:ED
Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
Certificate issuer:       /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Certificate serial:       018F46EA16525F883379037EA7EB2884E61F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
Manifest number:          0E53
Signing time:             Sun 05 May 2024 04:01:37 +0000
Manifest this update:     Sun 05 May 2024 04:01:37 +0000
Manifest next update:     Mon 06 May 2024 04:01:37 +0000
Files and hashes:         1: GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl (hash: V8ZJLvS8GDo2E3LaPtFFFTbGLlDwPYT8h4hSr4ToqF8=)
                          2: ohbka1ldxdlsgZqAYXtlLqgOYrE.roa (hash: AyBtaU25/LZ9JrkZGRBgd/n0GNFXgM9N3/lHRWncnxg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:ea:16:52:5f:88:33:79:03:7e:a7:eb:28:84:e6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
        Validity
            Not Before: May  5 04:01:37 2024 GMT
            Not After : May  6 04:01:37 2024 GMT
        Subject: CN=5c7624d81264b1c783d48f0751ae1df8e2df81ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a0:81:1f:42:c8:c1:13:0c:09:e0:6a:2c:9c:
                    80:d7:0b:43:84:c6:ed:b9:0c:62:c5:34:88:5c:7d:
                    0f:51:58:07:0e:ab:41:b9:e8:dc:27:34:58:b6:4f:
                    c4:a5:8a:ab:9c:53:60:9f:e3:85:2c:29:e8:25:fc:
                    d2:42:26:53:f4:c1:78:90:42:86:79:0a:9d:a7:32:
                    bd:4e:8d:2b:79:13:03:b8:2b:b6:82:c2:5f:3e:27:
                    10:23:41:86:fe:64:55:32:6f:00:42:30:9b:57:08:
                    e8:c9:89:b0:99:39:ba:35:6e:8b:bf:cc:a2:f9:74:
                    07:d7:14:af:9c:3a:15:18:a2:20:6a:34:65:56:51:
                    18:9d:32:84:8f:40:d5:a1:04:b2:a5:56:e9:47:c9:
                    5b:2a:a2:7d:2d:d0:40:0d:d9:d3:e8:30:c5:ee:da:
                    2f:74:86:f8:64:68:f6:4d:1c:4d:ed:bc:d4:28:b7:
                    81:bc:ab:c0:91:0d:0c:22:76:73:3b:cc:a9:aa:9d:
                    92:b1:d2:16:73:b4:3f:b0:71:31:4e:36:a4:a7:a4:
                    2d:eb:a8:bf:fd:1f:4c:e0:e7:2d:7b:33:c0:b1:5a:
                    52:13:bb:4f:21:7e:d8:af:69:68:46:43:d0:7a:a8:
                    d0:fa:ab:41:cb:eb:c4:5e:09:3c:2e:5f:f7:20:5c:
                    19:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:76:24:D8:12:64:B1:C7:83:D4:8F:07:51:AE:1D:F8:E2:DF:81:ED
            X509v3 Authority Key Identifier:
                keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:8f:1f:09:9b:ac:4f:ad:6b:03:b2:0a:6e:c4:1d:ab:c4:d0:
         9c:97:97:e6:21:2e:0f:31:b3:9c:c8:9b:1b:f3:2b:72:38:cb:
         80:6a:e6:38:e9:b5:4d:49:e4:85:b0:68:de:55:a2:25:3c:83:
         1f:48:77:7f:5b:cf:1b:b4:48:da:bb:39:57:51:3d:6b:f7:e2:
         14:82:64:e5:04:65:ea:e4:23:d1:fb:fb:d6:f0:4f:ff:81:77:
         6d:ce:31:e1:41:e2:86:42:37:16:e1:f4:1e:b6:d5:56:a3:8a:
         a1:a3:f8:44:03:3c:fd:53:9b:25:67:ef:f4:5c:d0:75:9a:1c:
         71:5b:e9:4d:3e:72:3c:ac:c4:5f:12:ff:2b:19:61:bd:77:73:
         89:1f:af:b7:92:4a:43:84:24:d4:b8:2a:9a:61:7c:3e:f7:41:
         ce:2b:e2:91:8e:ef:8f:9c:8d:44:f5:cb:1d:f6:0d:a3:96:2a:
         42:44:77:06:9a:ea:ed:af:a9:68:7c:ee:0a:2b:8b:56:18:95:
         96:60:88:2a:1a:60:e9:d6:f8:a9:18:8b:47:e7:32:22:f6:9b:
         c1:74:66:ce:ff:94:6a:57:85:f4:f4:6c:76:52:b3:8a:0d:96:
         3f:52:e6:de:b7:a1:d7:a4:84:d0:17:c6:7c:db:cc:ea:ba:02:
         bc:14:30:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 04:40:54 2024 by rpki-client on console-ams.rpki-client.org