Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
File:                     GxubyMfg_Ee_iwpXLRpXLWppa7c.mft (raw, json)
Hash identifier:          nfnrgSBEkufzPI9q71G5fNGhv7ehHHypED5NkqVai6A=
Subject key identifier:   26:AE:32:F0:32:FA:EA:42:A3:96:DD:70:2D:B6:AA:9D:F2:13:41:27
Authority key identifier: 1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7
Certificate issuer:       /CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
Certificate serial:       018F3D41E9256F72D4ECD49698631D25BB00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
Manifest number:          0976
Signing time:             Fri 03 May 2024 07:01:20 +0000
Manifest this update:     Fri 03 May 2024 07:01:20 +0000
Manifest next update:     Sat 04 May 2024 07:01:20 +0000
Files and hashes:         1: GxubyMfg_Ee_iwpXLRpXLWppa7c.crl (hash: uR7NQCtjLOc3P+zfA5xBCQjU/AU5cDMzL/Rarh+w4lM=)
                          2: PhCAmRBQNdFgS3a5vSj4hKAQZ3c.roa (hash: afG6KpqhUnp0/MMCmoxyzLvZVuh7/zuH7Hm0LTl/CEs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:41:e9:25:6f:72:d4:ec:d4:96:98:63:1d:25:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
        Validity
            Not Before: May  3 07:01:20 2024 GMT
            Not After : May  4 07:01:20 2024 GMT
        Subject: CN=26ae32f032faea42a396dd702db6aa9df2134127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:f8:9d:49:7a:25:a6:16:00:53:89:95:6a:
                    6c:a8:ca:ae:e4:22:26:64:6b:8f:6d:9d:6d:3d:b4:
                    28:c5:e6:62:69:02:bb:08:22:dc:3f:e9:f3:6f:77:
                    76:24:2d:fb:50:d4:5a:97:22:2e:56:73:a4:ce:0d:
                    b7:b6:7e:30:c1:59:78:56:ff:78:96:6f:da:5b:40:
                    aa:ee:ab:c7:33:29:23:1e:d9:81:6a:5e:6e:28:f2:
                    97:07:dd:1b:b7:64:57:c6:6a:0b:d1:64:c9:da:91:
                    e1:8c:5a:0c:09:e0:6e:51:8e:19:d1:25:9f:d3:30:
                    37:59:84:68:b2:13:9b:fe:57:ca:44:6e:f4:b5:16:
                    9b:86:3a:6d:6a:65:dc:bd:fd:ab:db:b7:c8:73:5e:
                    31:d2:b7:ae:b5:2c:6a:ad:1d:81:f6:ef:3c:e4:f4:
                    e2:d3:73:cd:77:98:3f:2e:82:d0:51:be:69:af:07:
                    96:1d:5c:3f:15:4b:7a:50:4e:7d:2c:91:91:f9:c8:
                    09:0b:8e:27:f3:36:63:f9:78:e0:4b:dc:e5:88:ec:
                    b3:35:95:0f:fa:e7:ca:c9:44:6e:f7:6a:52:0f:d9:
                    43:4b:d2:42:69:99:eb:25:5b:f3:1d:e5:75:13:ba:
                    dd:ae:b9:1f:11:15:d0:24:0e:85:1a:f2:93:57:a3:
                    9d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AE:32:F0:32:FA:EA:42:A3:96:DD:70:2D:B6:AA:9D:F2:13:41:27
            X509v3 Authority Key Identifier:
                keyid:1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:84:8c:2e:56:1c:67:1c:73:1b:ed:fa:da:86:b1:8f:45:68:
         52:13:21:8b:e4:e1:70:c3:4e:7c:8a:31:a0:72:76:bd:3f:bd:
         f0:0a:51:e1:a7:79:f7:c4:01:40:4c:68:3b:72:0a:ae:c9:18:
         4d:21:8a:98:ad:a0:f8:89:85:c3:88:8a:dc:cd:7b:17:eb:c7:
         74:c9:8c:00:44:94:25:33:2e:36:a6:84:77:8b:6d:d6:38:3e:
         6c:46:11:3c:a0:40:c7:6f:71:f9:9b:b4:9e:b8:47:65:e8:f6:
         37:b9:91:f6:56:38:af:c0:18:24:01:06:ef:d2:f3:72:a0:5d:
         55:f6:71:30:16:ad:40:63:e0:80:64:21:c7:7e:80:51:08:f3:
         4f:b1:e7:ec:4c:d3:0a:83:ac:ee:f5:14:49:b5:78:f3:a7:fc:
         a1:be:3d:6a:79:ac:27:95:32:98:25:0a:82:f3:da:a1:22:bc:
         56:6f:b9:8a:9c:45:b5:6f:ae:2b:c7:53:97:73:31:d2:b9:9c:
         fc:e8:84:1f:28:b5:5f:b8:6a:08:c5:f4:50:61:b8:4b:ca:63:
         2c:fd:82:3a:07:1a:2f:a1:c0:30:40:9b:64:15:dd:dd:40:82:
         06:dd:e9:77:94:0b:02:72:45:d8:42:bb:c3:a7:94:ff:86:3f:
         c8:06:09:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:23:15 2024 by rpki-client on console-fra.rpki-client.org