Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft
File:                     Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft (raw, json)
Hash identifier:          zMUw6Ox8/WYfezrGSsDz7iW5QpgoHW5JaPk2/y1BNi8=
Subject key identifier:   44:5E:49:D3:CA:D1:F0:9D:52:DB:0A:3F:6A:9B:C0:1D:E6:3D:D2:0B
Authority key identifier: 1A:39:2D:FC:6B:A2:D3:18:6D:32:69:C7:09:1B:70:19:81:53:45:D3
Certificate issuer:       /CN=1a392dfc6ba2d3186d3269c7091b7019815345d3
Certificate serial:       018FD866AD97FA4ABCFCF597714C45383C81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft
Manifest number:          11B0
Signing time:             Sun 02 Jun 2024 10:02:38 +0000
Manifest this update:     Sun 02 Jun 2024 10:02:38 +0000
Manifest next update:     Mon 03 Jun 2024 10:02:38 +0000
Files and hashes:         1: Gjkt_Gui0xhtMmnHCRtwGYFTRdM.crl (hash: Prd/5Ty895HCaGqA8VAUI9VWEkuA7zZ3ltFUiGK5Fyc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d8:66:ad:97:fa:4a:bc:fc:f5:97:71:4c:45:38:3c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a392dfc6ba2d3186d3269c7091b7019815345d3
        Validity
            Not Before: Jun  2 10:02:38 2024 GMT
            Not After : Jun  3 10:02:38 2024 GMT
        Subject: CN=445e49d3cad1f09d52db0a3f6a9bc01de63dd20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:28:7e:04:6e:98:2d:56:73:24:99:e9:17:0b:
                    e6:be:aa:ae:ff:82:6a:f8:9a:e1:17:c8:e1:d6:47:
                    33:94:05:bd:27:e5:b8:79:0e:20:39:ac:51:00:76:
                    16:b4:3a:3f:e3:49:52:01:00:7a:99:c8:e3:09:28:
                    5a:e8:e9:c3:2c:c5:f5:84:33:b3:63:83:45:70:00:
                    66:99:5c:8c:8b:2f:7b:fb:91:22:16:aa:17:58:bb:
                    3e:06:6e:fa:f1:86:77:25:eb:c3:c6:f4:fc:a2:aa:
                    b0:0c:64:ab:75:f6:53:81:e5:b1:0a:96:b5:23:b8:
                    02:0f:b9:12:ef:8a:dd:4a:d2:88:b1:d0:ec:9f:b1:
                    b7:71:67:ca:87:9b:e4:cc:13:e3:8c:05:51:fb:9a:
                    0c:3d:f8:86:33:36:5d:7b:58:46:03:c6:e8:7a:33:
                    8d:70:a1:ef:a8:5e:ad:20:8f:40:dc:50:1d:5e:82:
                    cf:38:56:13:ea:5b:62:34:ec:df:95:89:60:36:22:
                    63:67:fa:9c:43:cb:80:95:a5:aa:25:50:f7:43:74:
                    4d:c3:30:46:ca:76:14:9d:eb:dc:3a:2c:ac:b7:0c:
                    d6:f6:c7:b8:35:b6:cc:67:d0:29:49:43:37:82:44:
                    3a:6e:62:02:da:7d:7d:31:d1:37:d6:21:d5:71:d0:
                    ae:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5E:49:D3:CA:D1:F0:9D:52:DB:0A:3F:6A:9B:C0:1D:E6:3D:D2:0B
            X509v3 Authority Key Identifier:
                keyid:1A:39:2D:FC:6B:A2:D3:18:6D:32:69:C7:09:1B:70:19:81:53:45:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e3:56:69:15:c3:49:fb:9e:1d:e8:85:fb:71:10:cb:24:9c:
         4c:af:a9:b6:6d:84:d3:2c:3b:a0:13:39:79:82:cf:a7:22:fd:
         01:26:4a:c2:2b:ff:af:bc:7e:06:12:cd:9e:95:51:45:03:8c:
         bc:d8:b9:f1:9a:cc:ea:31:67:a6:79:bb:a8:21:33:e8:9b:da:
         7c:1a:03:6b:18:e9:22:8a:84:b0:22:41:da:16:75:5b:c0:73:
         35:ce:49:48:2c:da:47:ab:33:6b:23:9f:02:05:33:3e:d5:60:
         aa:de:c4:8a:8a:e9:32:f1:b6:fa:83:b1:f8:bb:c9:33:cb:67:
         d4:f9:f6:4d:2d:ff:d9:8d:34:3a:c0:a4:0d:ad:01:b5:90:25:
         b9:94:20:92:08:c4:9a:48:58:45:e7:93:bd:af:d6:f5:de:46:
         22:ec:26:e4:7b:a4:39:e4:75:36:1a:df:d1:0a:da:52:bf:96:
         19:23:90:d1:42:8c:4d:5a:61:17:0d:eb:08:71:16:3a:88:84:
         36:52:2d:c7:cb:46:a0:db:33:9e:3e:30:a1:15:88:2b:85:fd:
         0a:dd:ce:35:cb:e8:53:81:b9:49:08:5d:2f:70:bf:a8:09:bf:
         f1:88:c6:42:f3:b3:20:05:df:a4:46:5f:5b:47:c4:56:2f:44:
         bd:79:4c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 10:59:44 2024 by rpki-client on console-fra.rpki-client.org