Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
File:                     GE0fQIM4P1aJXW4-c6igd63rUMs.mft (raw, json)
Hash identifier:          kylK+SZq6z0bmBvAuGsl8RJQDqoFo+N3ZGqqXJJTbyo=
Subject key identifier:   97:9F:37:1C:04:44:1F:A1:C8:11:73:F3:F6:6D:BA:6A:19:9B:1E:DC
Authority key identifier: 18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB
Certificate issuer:       /CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
Certificate serial:       018F41C515662856F210DE649D4B0ABEDEAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
Manifest number:          0781
Signing time:             Sat 04 May 2024 04:03:06 +0000
Manifest this update:     Sat 04 May 2024 04:03:06 +0000
Manifest next update:     Sun 05 May 2024 04:03:06 +0000
Files and hashes:         1: GE0fQIM4P1aJXW4-c6igd63rUMs.crl (hash: lVEcGIKEnkKBdNYG0v+Mj0v8ejDR5Nex0xTBoyLDBWc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c5:15:66:28:56:f2:10:de:64:9d:4b:0a:be:de:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
        Validity
            Not Before: May  4 04:03:06 2024 GMT
            Not After : May  5 04:03:06 2024 GMT
        Subject: CN=979f371c04441fa1c81173f3f66dba6a199b1edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:13:f0:49:1e:77:92:72:22:cc:ef:8c:46:fb:
                    fd:88:3e:bd:a1:14:0f:96:9b:39:88:e2:1e:96:35:
                    0a:c3:96:f1:2b:99:97:d4:33:88:f8:8d:6a:b4:54:
                    92:8a:26:52:0b:a0:c8:16:24:41:92:11:21:86:93:
                    17:7f:f9:1a:88:61:1f:f4:70:76:03:32:00:82:8d:
                    e7:e3:eb:3d:ca:85:06:06:0c:57:7d:8c:0b:f5:ad:
                    0d:65:ae:d0:13:ec:3f:53:e8:1d:6d:2e:ab:03:f0:
                    a6:1c:bb:1f:d6:8b:0c:e2:a0:07:82:56:a3:f2:5e:
                    f2:98:7a:9a:f6:9c:be:48:ea:aa:56:db:90:64:9d:
                    f8:b4:a5:6b:70:ba:8f:5b:db:a7:a8:2c:53:a4:62:
                    fa:de:d2:89:96:dd:20:80:b8:52:77:b5:ec:30:b2:
                    fc:e1:02:cb:7f:4b:05:e4:c8:7b:d6:7f:a6:ce:c1:
                    0d:fc:21:a8:46:86:fe:52:37:fa:6f:9a:42:08:48:
                    30:a0:54:01:bd:c7:fb:5c:30:00:88:81:7a:3d:f2:
                    43:0c:5d:f0:9c:1b:4a:8b:fd:ba:72:c0:46:5d:2d:
                    0e:73:d3:2e:ed:d8:44:10:7d:67:43:d0:55:d7:4f:
                    f3:cc:e0:03:21:7b:5d:ee:83:3e:c1:1d:a4:ab:3b:
                    71:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9F:37:1C:04:44:1F:A1:C8:11:73:F3:F6:6D:BA:6A:19:9B:1E:DC
            X509v3 Authority Key Identifier:
                keyid:18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a5:39:8d:f4:db:c6:50:1b:0f:5a:fb:bb:18:b2:2b:6f:25:
         db:23:d4:b3:f3:46:9c:52:19:c6:a3:a5:a9:27:fe:04:13:8a:
         72:9a:50:cf:ed:ae:ae:35:5b:53:e5:cd:9f:a7:60:cb:a9:fb:
         39:c4:df:7e:36:49:79:a1:da:d1:29:65:8a:10:bf:9d:15:05:
         1a:b9:9a:44:a4:fb:1e:09:cc:e0:68:f1:69:e6:f2:68:b8:c6:
         d5:7c:0e:a3:fb:a9:be:de:59:bd:92:be:80:24:f1:c8:9d:a6:
         9c:ae:48:35:7e:98:0d:9c:3e:95:09:6a:01:ae:6a:45:6f:25:
         83:67:37:e2:8a:f2:37:ba:aa:59:6c:f2:24:5c:6a:52:e5:0c:
         67:3a:83:4d:80:a9:04:d8:b1:38:ac:ce:8e:01:c2:2f:9b:17:
         84:8c:e3:fd:54:c1:cf:f9:7f:c6:48:fe:dd:21:f7:e2:84:9b:
         da:37:f9:3a:f6:5e:35:3d:5f:be:06:83:23:f2:33:d0:66:49:
         2d:f2:bc:da:1d:5e:ab:ec:0d:9b:e1:21:b0:6b:f6:7c:d4:e3:
         d0:5a:f2:73:71:48:c9:6f:31:9e:39:c3:75:e3:d1:7d:00:92:
         3f:a5:4f:af:d1:02:71:75:ee:9b:5f:af:39:17:62:73:ea:93:
         a4:97:58:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:02:15 2024 by rpki-client on console-ams.rpki-client.org