Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
File:                     GvujiocH_SMcOIfkpSvc3tqyAyM.mft (raw, json)
Hash identifier:          gUyPYfhA5R92nfe1YQA6NJ3dOe8e3+fiaxF8yE1XIZw=
Subject key identifier:   C9:2A:64:F3:92:F9:3C:64:D5:04:D7:A9:76:54:42:4A:FF:2E:4E:2B
Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
Certificate issuer:       /CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Certificate serial:       019356BFA563B0B329A29FF8680EA64EF90D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
Manifest number:          04CE
Signing time:             Sat 23 Nov 2024 02:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:20 +0000
Files and hashes:         1: GvujiocH_SMcOIfkpSvc3tqyAyM.crl (hash: ECm5wKPxAO1nQw6vo1GvrY0EJxyCe+Q8cozJX4CWKjU=)
                          2: IlTzFIyg7BPTOPWnuFBxfH2_RR8.roa (hash: 1eFwX7VApr/o7fca+I0oQ8tYdtuZ4nYHnzWx2Y8u8aU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:a5:63:b0:b3:29:a2:9f:f8:68:0e:a6:4e:f9:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323
        Validity
            Not Before: Nov 23 02:00:20 2024 GMT
            Not After : Nov 24 02:00:20 2024 GMT
        Subject: CN=c92a64f392f93c64d504d7a97654424aff2e4e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ea:b2:b3:04:f3:0c:76:c6:37:ec:75:13:43:
                    c2:6c:3e:14:17:84:e9:46:1c:8e:c1:77:e6:f3:8b:
                    ae:8f:03:1a:bb:fe:6c:ce:92:63:b9:9f:d0:54:de:
                    d4:c1:ad:4d:05:82:41:4d:10:09:f5:49:88:cd:cc:
                    b5:59:a6:d3:ca:8b:b5:4e:0d:46:ee:69:48:2f:4e:
                    0b:30:e3:de:04:b7:c0:b0:91:89:0a:21:a4:5f:01:
                    bf:1b:de:e5:c0:e7:2b:23:b2:3b:c9:b2:55:7a:d4:
                    d3:96:c7:1a:e4:b7:bc:ff:53:a5:fb:5d:0d:64:b1:
                    01:f0:22:81:03:75:52:4a:62:76:36:f3:f6:5f:db:
                    a9:c7:d6:3a:75:2f:ed:c7:86:b5:a2:71:4e:e9:4f:
                    20:5f:8a:67:71:a4:00:52:39:bf:f2:33:88:c3:9c:
                    51:9d:6a:26:d3:d9:f5:e1:c7:21:44:36:74:8b:47:
                    62:b8:2b:83:ea:a9:51:c1:30:f6:8f:05:07:98:12:
                    2c:1f:a6:5a:59:8b:9c:a7:87:67:b1:f0:31:75:22:
                    9f:de:e3:70:c2:32:a0:9c:28:a8:14:94:70:73:b6:
                    7b:b4:09:86:7a:e3:b9:1a:29:13:ad:e8:a6:0a:11:
                    d9:52:9e:2c:50:9a:d6:0e:7c:71:d3:a8:43:f6:5b:
                    1d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2A:64:F3:92:F9:3C:64:D5:04:D7:A9:76:54:42:4A:FF:2E:4E:2B
            X509v3 Authority Key Identifier:
                keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:3c:a3:7a:c7:bd:e2:ac:6b:b9:bf:6f:4a:41:dc:a1:fb:18:
         82:f1:f6:9c:9c:1d:73:3f:b7:f8:be:eb:00:67:a5:1d:b4:2d:
         ca:89:44:2c:8b:09:14:8a:01:9e:65:81:38:d0:e0:7d:3c:1f:
         d4:e4:c5:17:21:0f:96:ec:d7:09:e3:f4:a4:84:74:a5:82:1b:
         14:3d:39:24:60:2a:96:74:bf:28:55:13:ff:fd:9f:88:c1:40:
         1a:6e:0a:da:a1:a5:74:0b:a1:e8:9c:cb:59:18:77:08:fb:76:
         41:55:b0:aa:55:4c:85:20:29:2e:08:e3:00:d5:af:03:bc:04:
         52:2d:40:31:4a:dc:06:a4:50:a3:ef:d7:7c:c3:cd:48:fb:ed:
         d1:f2:0a:ab:50:e3:88:45:30:4e:93:f3:b9:4f:8e:e3:7f:1e:
         fa:2d:26:7f:c7:c5:d5:cf:b1:b2:cd:ca:1d:e1:03:b0:01:b9:
         c8:3d:63:38:a0:10:4d:57:03:f5:d4:28:7c:37:93:64:1b:b6:
         5e:7d:59:1f:b8:9a:33:ef:55:67:57:a6:24:d2:d2:5b:d3:7e:
         a5:01:d4:be:5a:13:c0:d6:be:12:38:be:97:25:43:59:1c:e1:
         ed:6b:f5:97:bc:78:eb:e6:c6:9a:56:77:48:88:58:71:8d:87:
         79:29:8f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:40:15 2024 by rpki-client on console-ams.rpki-client.org