Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
File:                     GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft (raw, json)
Hash identifier:          sCAfsiUO8fRAjyEWjaBjOb9zyHKuezMgkujCno+JO5A=
Subject key identifier:   74:67:B9:3B:56:07:79:67:D4:3F:3C:CF:00:69:8C:76:57:33:47:A4
Authority key identifier: 19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
Certificate issuer:       /CN=194f0b272e243acfaf36346094e58395cc1383b4
Certificate serial:       018F3BF92EFECBD44BBEB63E30BDDC264930
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
Manifest number:          0CC7
Signing time:             Fri 03 May 2024 01:02:17 +0000
Manifest this update:     Fri 03 May 2024 01:02:17 +0000
Manifest next update:     Sat 04 May 2024 01:02:17 +0000
Files and hashes:         1: GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl (hash: sy8SKT1ggWMBfIvdbhrvMHSD/XvM0Fa8AgLfe6MClmA=)
                          2: MwZPS-4evsmr8U6RxU3_g8SE80s.roa (hash: Rh0aL5thHdOiE3ShT4J3mdo/GjbQaUwLXfEJ2oYo1sY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f9:2e:fe:cb:d4:4b:be:b6:3e:30:bd:dc:26:49:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194f0b272e243acfaf36346094e58395cc1383b4
        Validity
            Not Before: May  3 01:02:17 2024 GMT
            Not After : May  4 01:02:17 2024 GMT
        Subject: CN=7467b93b56077967d43f3ccf00698c76573347a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a3:2a:25:d0:18:56:5a:d5:00:39:e0:25:0e:
                    e4:cb:4d:de:ac:99:37:41:b3:33:f2:fd:d0:77:0d:
                    08:ff:49:5f:cf:00:78:50:3f:6f:5f:39:78:37:9d:
                    5c:af:3a:a7:cc:c9:fa:e0:2c:6f:f1:2f:19:5d:5c:
                    59:72:6e:2c:ed:a6:c9:17:d8:91:7e:f3:a9:de:82:
                    3c:2b:cc:9a:48:5f:27:7a:39:c9:5f:a4:b1:36:db:
                    d6:a9:44:15:68:5a:c7:f8:3c:88:0f:80:09:de:ac:
                    bb:5a:14:07:fa:bd:45:5a:17:e6:ac:c7:3b:43:ba:
                    89:ef:34:c1:34:52:b6:78:a5:88:bb:19:76:59:bd:
                    db:bc:d0:c6:6a:dd:5b:9a:a2:ff:a8:98:91:02:9b:
                    6e:82:c0:f7:e5:1d:af:3f:05:5f:af:77:0a:90:89:
                    8c:1d:fe:51:4c:f5:89:ce:30:1a:86:79:a1:49:b0:
                    f2:be:67:8b:f4:4a:d1:55:d9:66:97:41:8f:72:f9:
                    20:27:5c:e2:e3:f6:d4:9e:46:63:4b:fe:a9:c0:fa:
                    24:9a:35:59:8d:f5:b6:41:b2:0c:c4:8d:20:73:b9:
                    99:1c:18:a3:84:e6:e6:03:09:08:22:fd:6e:1b:94:
                    66:2e:ec:e2:de:42:cd:75:1e:c8:2a:86:b7:8f:39:
                    73:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:67:B9:3B:56:07:79:67:D4:3F:3C:CF:00:69:8C:76:57:33:47:A4
            X509v3 Authority Key Identifier:
                keyid:19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:4e:e6:b6:6e:80:7a:80:96:14:17:fb:aa:4c:e9:00:be:a6:
         74:cd:cd:8d:9a:38:77:ca:77:7b:ad:65:e9:9c:26:94:84:b4:
         1d:8d:b1:43:a1:3e:6d:5b:b4:77:dc:43:ea:46:10:9f:23:dd:
         28:15:71:60:fe:d3:a5:0b:0d:34:51:3f:3e:8d:69:46:a7:12:
         bf:9b:a4:48:69:69:6e:fd:6a:ab:4e:47:4f:18:bd:92:8e:a1:
         09:69:50:6a:00:1b:07:c7:c8:93:d3:d2:c1:5a:61:ad:b3:1f:
         f1:97:fa:f9:56:bc:28:f4:54:20:93:d6:9f:c2:44:74:85:2a:
         b2:be:a9:4c:81:e3:65:b3:d9:cf:05:19:6d:61:d4:5f:d3:bc:
         7d:c4:49:06:83:99:6f:57:8e:3c:07:12:93:15:69:66:02:b0:
         ef:1d:7f:3d:f1:c2:b9:2f:76:c7:70:31:0f:fa:35:a3:4d:b7:
         ae:17:c2:36:9f:4b:6d:63:80:73:48:63:eb:2a:02:83:57:05:
         b2:06:56:08:df:3b:29:21:07:40:75:ce:da:8b:72:03:3a:67:
         bd:19:74:4f:89:25:1b:54:32:f5:71:99:f2:3d:30:a0:97:cb:
         8e:1b:f8:16:95:fa:c5:94:70:ff:40:fb:97:ee:7e:a3:92:49:
         eb:10:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:22:09 2024 by rpki-client on console-fra.rpki-client.org