Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
File:                     GRGmWD3HmkFVGxeutDFNspMRy-s.mft (raw, json)
Hash identifier:          Ark/cEz+RtdukfE0MNlIgKmJU6T1h4s+lFveofxyRQM=
Subject key identifier:   CA:84:9F:F6:0B:19:32:F4:DC:1C:82:A2:91:A9:20:B0:56:F4:74:B6
Authority key identifier: 19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
Certificate issuer:       /CN=1911a6583dc79a41551b17aeb4314db29311cbeb
Certificate serial:       018F3E8B8160F96AA83CDDC4D72796C1894C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
Manifest number:          1068
Signing time:             Fri 03 May 2024 13:01:20 +0000
Manifest this update:     Fri 03 May 2024 13:01:20 +0000
Manifest next update:     Sat 04 May 2024 13:01:20 +0000
Files and hashes:         1: GRGmWD3HmkFVGxeutDFNspMRy-s.crl (hash: ToQJ0eY0InRgQdQdcJvvdL4W6eEYpkG4djvYWokaD34=)
                          2: U-39f0iUUQP3QDyeb8YSslHfsaQ.roa (hash: LgtSZ3SVYAkBZpsRcEB12Jix6bi0apLYKyw4hYDeD34=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3e:8b:81:60:f9:6a:a8:3c:dd:c4:d7:27:96:c1:89:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1911a6583dc79a41551b17aeb4314db29311cbeb
        Validity
            Not Before: May  3 13:01:20 2024 GMT
            Not After : May  4 13:01:20 2024 GMT
        Subject: CN=ca849ff60b1932f4dc1c82a291a920b056f474b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9d:cb:be:e0:2a:45:f4:44:14:60:07:de:df:
                    d6:60:70:65:17:9d:8f:6a:5a:a5:df:18:b3:67:5b:
                    76:1d:16:dd:22:b0:be:36:38:73:b8:f6:66:38:8b:
                    56:df:0a:c1:63:ba:7b:7e:e4:70:15:8b:20:cb:2e:
                    4c:2c:ef:ab:63:d6:01:84:ca:1a:f7:95:60:60:5a:
                    ef:65:e4:5b:41:0a:9f:a3:c8:2b:c3:86:8d:54:06:
                    84:30:ad:81:d8:73:95:1b:6b:32:8a:34:1d:30:8e:
                    8b:da:bf:88:8a:cb:99:84:97:15:4c:c3:7e:b0:b5:
                    c5:78:84:07:1f:a5:28:88:8d:43:57:1c:7a:a9:da:
                    ed:62:9e:b8:92:ef:1e:7a:c3:6f:15:02:99:8f:a1:
                    2d:91:82:a8:dc:74:27:17:3b:0d:75:fe:9b:95:70:
                    02:d5:45:7b:6a:48:69:c8:3c:91:17:b7:53:d8:d7:
                    85:a6:11:91:b8:57:eb:80:dc:78:5d:3a:a1:e7:e0:
                    ac:0c:33:b4:ab:b9:15:61:d4:60:17:7d:58:7e:35:
                    dc:94:f4:1d:0c:ee:7c:5e:11:34:e9:4b:ed:52:f1:
                    ca:13:12:bd:41:f0:f3:51:36:fc:fe:58:56:5a:e6:
                    1d:ae:12:04:12:22:42:b9:9e:e4:19:a7:f6:01:5d:
                    ba:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:84:9F:F6:0B:19:32:F4:DC:1C:82:A2:91:A9:20:B0:56:F4:74:B6
            X509v3 Authority Key Identifier:
                keyid:19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:94:0b:81:c9:7c:f0:57:73:88:8e:8c:87:9f:c7:44:2b:56:
         e6:dc:e7:ef:91:a5:c2:f9:7f:0d:46:88:d7:e7:d9:10:ce:c5:
         7b:52:e8:12:6b:4f:e1:01:07:3c:d8:71:ad:4e:a2:2a:be:47:
         bd:d3:d6:c6:1c:a9:ab:2f:ce:22:2b:61:41:96:69:47:3b:53:
         73:a5:9a:91:59:ac:65:6b:2e:a0:9f:b2:c6:b9:62:1b:47:af:
         c7:ce:1e:8e:c9:e0:58:52:7d:6a:cc:3c:9b:0b:37:15:82:61:
         ff:ca:d7:51:18:fe:44:bc:cf:0b:29:13:e6:49:1a:a5:c0:bb:
         4b:eb:fd:77:12:4c:57:80:0e:cd:aa:db:57:28:a1:04:18:f2:
         04:cb:c0:ab:c8:de:65:8c:69:b3:80:fe:d9:a3:f1:39:ca:14:
         60:70:7a:6f:9e:57:6f:9f:6f:f9:f2:3d:63:21:84:18:7c:8c:
         c3:af:67:47:12:07:47:97:e9:aa:57:43:48:c3:c0:81:f0:98:
         44:60:a6:2d:79:3e:a3:69:20:54:d4:5d:42:35:3c:f9:98:a7:
         bf:bc:b6:09:4b:68:b8:a5:51:41:bf:17:2c:10:d7:b0:b6:7c:
         da:46:2b:30:7d:b8:bd:21:93:b0:87:88:19:29:0f:80:04:3f:
         4d:ec:d3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 18:08:01 2024 by rpki-client on console-ams.rpki-client.org