Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft
File:                     Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft (raw, json)
Hash identifier:          BmMKqIjlO9Y69zb4GnS81cmpeZvdNwHY3PVOC+j9nU8=
Subject key identifier:   C1:F2:FA:40:C5:DE:54:BB:ED:DB:20:DB:B1:47:C9:46:BC:00:70:35
Authority key identifier: 1A:39:2D:FC:6B:A2:D3:18:6D:32:69:C7:09:1B:70:19:81:53:45:D3
Certificate issuer:       /CN=1a392dfc6ba2d3186d3269c7091b7019815345d3
Certificate serial:       019369D8EE4A40730F9B22F86A36034B2004
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft
Manifest number:          1389
Signing time:             Tue 26 Nov 2024 19:00:44 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:44 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:44 +0000
Files and hashes:         1: Gjkt_Gui0xhtMmnHCRtwGYFTRdM.crl (hash: iPPKph7DWyOFI3TAZpnqi7NCBhNxqOQQuwFcoiiLny4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:ee:4a:40:73:0f:9b:22:f8:6a:36:03:4b:20:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a392dfc6ba2d3186d3269c7091b7019815345d3
        Validity
            Not Before: Nov 26 19:00:44 2024 GMT
            Not After : Nov 27 19:00:44 2024 GMT
        Subject: CN=c1f2fa40c5de54bbeddb20dbb147c946bc007035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:41:a6:95:91:cc:59:86:b4:0b:c9:dc:56:ae:
                    9e:eb:11:6d:b1:d7:2f:86:31:78:7b:b0:be:d6:a2:
                    2a:92:0c:f2:d2:15:39:85:31:ce:b2:f0:a2:4e:ca:
                    62:49:74:b0:c9:59:e4:c3:aa:c0:e7:49:5d:26:ee:
                    e3:c8:2c:01:09:7d:29:4b:37:08:8e:e8:0c:8b:b2:
                    3a:e2:85:1a:9c:9e:6f:9d:cb:53:29:e0:e7:df:77:
                    af:57:63:5b:0b:08:90:9c:89:a1:2a:c0:82:22:b9:
                    2f:86:9c:14:c2:4c:c3:e8:01:40:a7:01:15:5a:22:
                    bd:ba:5a:e5:7c:13:d5:06:86:d2:6f:b6:e3:c2:72:
                    ac:f2:fc:53:8a:84:4e:dd:16:9f:e5:4d:ee:28:ed:
                    65:91:1c:65:96:13:b9:8f:1a:61:2c:14:29:02:87:
                    5b:65:47:6b:12:c5:c7:8d:35:96:ec:5b:b6:15:51:
                    db:c6:2e:3c:6f:7e:52:da:f8:ee:d4:68:cc:9d:77:
                    d0:e1:79:88:65:6d:b5:4c:3d:fc:88:51:29:b7:57:
                    4b:7c:bf:87:5e:a0:bc:f0:24:82:fc:5d:31:83:d7:
                    24:cc:37:e7:9f:d2:0a:8f:b2:94:78:a0:0a:bf:3f:
                    17:36:29:ac:90:b4:d7:88:b3:32:12:df:fe:10:7a:
                    34:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F2:FA:40:C5:DE:54:BB:ED:DB:20:DB:B1:47:C9:46:BC:00:70:35
            X509v3 Authority Key Identifier:
                keyid:1A:39:2D:FC:6B:A2:D3:18:6D:32:69:C7:09:1B:70:19:81:53:45:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:e5:e8:2d:1c:5a:a1:9f:c8:94:fb:4c:e7:22:f1:25:5a:27:
         f6:d9:1a:08:70:9a:1b:db:7f:16:a6:b6:28:09:9a:fc:51:b1:
         98:af:4b:93:12:6c:e8:cb:46:32:c0:3e:00:52:13:37:35:fa:
         f9:64:5e:70:18:f1:e4:bc:af:cf:49:25:d4:05:ef:5e:ea:96:
         3b:3d:eb:99:01:1c:17:f2:89:90:28:ce:e0:8f:c3:9c:ad:6b:
         26:14:98:da:db:f4:83:a4:4d:1b:37:7f:90:a7:ba:88:24:f8:
         8f:4a:07:e1:8c:62:f9:66:25:10:f8:3f:17:da:05:30:77:78:
         77:68:f6:f4:ee:3b:f1:14:58:b8:38:e7:7d:76:c4:5a:cf:94:
         13:2a:b9:39:a1:2a:e8:f6:3a:f1:a7:62:85:fc:2b:50:55:39:
         f9:0f:eb:4e:38:10:16:ee:7c:3f:1a:5b:9a:ca:eb:ac:c6:ae:
         75:fc:34:b6:4c:ac:c4:02:41:94:8b:3e:a0:18:06:76:10:02:
         ca:50:20:1a:d1:50:66:af:4e:c0:5f:e3:9b:a5:23:1c:f9:3a:
         7f:20:78:5c:d5:b7:75:d9:3a:43:48:18:33:e0:b7:9e:a8:37:
         44:45:00:53:6b:8a:cb:3c:8a:48:ee:72:45:53:2e:e7:f8:70:
         33:38:0e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:37 2024 by rpki-client on console-fra.rpki-client.org