Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
File:                     GVc7IITN9G7hzNKC36O49rfqcmw.mft (raw, json)
Hash identifier:          /F+tPX6NA4lQg3vF5yhDd6DxjumwMy/9+GzHTKSGo7A=
Subject key identifier:   BD:50:E1:1F:0C:7B:9A:7D:D4:8E:5E:08:F1:24:8E:86:C3:4A:05:63
Authority key identifier: 19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
Certificate issuer:       /CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Certificate serial:       018F4FECB59864BEC2245E171CF89722CB9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
Manifest number:          0E9A
Signing time:             Mon 06 May 2024 22:01:03 +0000
Manifest this update:     Mon 06 May 2024 22:01:03 +0000
Manifest next update:     Tue 07 May 2024 22:01:03 +0000
Files and hashes:         1: GVc7IITN9G7hzNKC36O49rfqcmw.crl (hash: /cnV7HDuFL+oGClWiYd58c5C4Ba/yo82Xj5AkI94YwM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:ec:b5:98:64:be:c2:24:5e:17:1c:f8:97:22:cb:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
        Validity
            Not Before: May  6 22:01:03 2024 GMT
            Not After : May  7 22:01:03 2024 GMT
        Subject: CN=bd50e11f0c7b9a7dd48e5e08f1248e86c34a0563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d1:be:3c:e0:ae:85:85:d6:d6:3a:d4:51:91:
                    c0:f3:e5:fa:5b:34:39:35:aa:a2:6f:be:cf:e0:28:
                    66:3e:74:c6:ed:46:ed:db:31:d8:cb:2f:18:09:ba:
                    c3:1c:79:66:56:0f:ee:a5:eb:26:23:1f:cd:f4:17:
                    1b:c1:68:93:8c:46:47:6d:37:8b:c8:54:ab:71:61:
                    3d:c5:57:10:5a:17:d5:2d:d7:62:4d:f9:d4:1c:07:
                    28:4e:de:b4:d4:45:b1:14:92:de:18:36:25:1f:5f:
                    59:a3:83:fa:ed:94:06:8f:2e:bf:9c:94:f0:58:b0:
                    e8:33:23:ab:b3:fe:ac:b4:3c:c3:dd:82:93:8f:71:
                    a0:db:fd:7c:58:6e:84:a2:2a:a7:af:17:64:53:55:
                    cd:e3:f2:65:6a:ed:5b:69:b6:08:8f:dd:fe:eb:7a:
                    88:f6:85:dd:6b:9e:c5:91:c4:96:06:e6:7e:cd:63:
                    c5:b2:46:f6:4e:1e:50:dd:8e:20:c2:02:7a:61:5c:
                    6c:bb:81:5c:b2:3c:e4:74:78:b9:ed:2a:a8:7e:0c:
                    ed:40:0d:e2:af:48:4a:a8:94:fc:fb:77:3c:8b:fb:
                    8d:b4:80:c4:81:fd:05:16:1f:ed:7d:ab:37:15:37:
                    33:c1:e4:15:0b:18:34:61:e1:0a:f6:9c:1c:93:0c:
                    77:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:50:E1:1F:0C:7B:9A:7D:D4:8E:5E:08:F1:24:8E:86:C3:4A:05:63
            X509v3 Authority Key Identifier:
                keyid:19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:36:bd:1f:33:6a:1d:a8:20:a1:d4:de:70:df:56:8c:c5:b1:
         a0:e1:e6:82:dd:4c:9c:5d:c8:a0:2b:66:a9:b3:a3:66:87:d1:
         e2:9b:23:0e:5a:64:2b:cc:ac:f6:a5:05:07:48:f7:62:27:c0:
         98:67:bb:75:9f:57:5b:f8:b5:2d:18:c9:b5:36:bf:f7:bb:5c:
         af:fc:f3:ec:79:56:29:28:ad:cf:97:68:d3:b9:85:bf:77:1c:
         a8:ce:a0:ae:41:a6:69:86:2b:67:0b:91:6a:d6:45:b4:bc:3d:
         c5:06:6b:94:55:ba:c8:30:cd:d1:e7:0c:25:ab:1d:ef:db:db:
         7a:00:b6:fe:c6:ea:dc:ed:5a:17:70:ca:b5:c8:1a:05:ad:81:
         9d:81:3c:37:92:64:66:26:f8:76:69:37:48:3a:25:16:5c:0d:
         36:74:73:8f:cf:a6:97:06:8a:d5:14:37:cb:d1:8d:a4:32:81:
         3d:26:50:f0:89:85:04:86:34:9c:57:40:89:ce:44:3a:b7:be:
         fb:57:3a:53:f9:0b:6a:27:c1:56:18:09:24:bd:b4:0c:7c:3f:
         88:9f:be:0d:20:aa:6d:1c:70:5d:cb:d3:34:8a:64:7f:a6:b5:
         82:2d:b8:65:72:a1:1d:9c:68:35:10:4b:b9:d9:ef:f5:e7:d6:
         e9:27:1e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:28:11 2024 by rpki-client on console-fra.rpki-client.org