Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
File:                     GkIazkbF3ViinUbNkfso_DnFb-4.mft (raw, json)
Hash identifier:          r4pUW3RSsreauacVyDh3WYR7jD+ng157X7suYwMVy0E=
Subject key identifier:   68:DC:CF:0A:B2:EF:2D:92:31:4F:B1:BA:8A:94:13:22:C4:94:3E:E2
Authority key identifier: 1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
Certificate issuer:       /CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Certificate serial:       018F36D249F9F3C71F35257F35B6A9BCF203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
Manifest number:          1150
Signing time:             Thu 02 May 2024 01:01:42 +0000
Manifest this update:     Thu 02 May 2024 01:01:42 +0000
Manifest next update:     Fri 03 May 2024 01:01:42 +0000
Files and hashes:         1: GkIazkbF3ViinUbNkfso_DnFb-4.crl (hash: IOAsbfFK7MsUv/CE1w9pj50N4jve65lT8FDRJlVfGv4=)
                          2: NEWheC_VjV8ishvPj4H4kR9WspM.roa (hash: LuD6dZ0VY6EGicNfZ3sHKeOZ+q0avygX6wVJriy7tAw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 01:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:d2:49:f9:f3:c7:1f:35:25:7f:35:b6:a9:bc:f2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
        Validity
            Not Before: May  2 01:01:42 2024 GMT
            Not After : May  3 01:01:42 2024 GMT
        Subject: CN=68dccf0ab2ef2d92314fb1ba8a941322c4943ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:02:9e:09:82:f3:01:54:1e:4e:7d:a4:48:b6:
                    91:b5:d7:7e:c0:c9:6e:0e:16:25:01:8e:ee:12:34:
                    a5:35:ea:07:0c:27:97:e6:8d:7d:84:c7:6a:5b:ba:
                    f4:ac:a1:29:88:7d:bf:39:39:f8:1e:3f:e6:64:2b:
                    ea:ab:52:cc:e8:04:98:70:9e:ac:ed:8c:15:02:02:
                    50:27:4f:e4:ed:f6:19:ae:17:b2:3d:5e:35:55:5b:
                    f9:11:c0:21:23:c9:c2:61:ba:0d:9f:20:7f:d8:3c:
                    0c:1a:33:22:48:bc:46:7f:00:14:3d:44:f5:6a:f5:
                    88:a2:ed:eb:a8:c8:ad:97:55:2a:38:34:60:fb:0e:
                    9c:de:89:b2:ed:60:a7:0d:32:84:81:22:5f:f7:74:
                    85:74:97:ce:e2:6d:c9:5d:69:8b:e3:70:d7:db:a9:
                    40:03:b9:d1:54:11:cf:63:d8:80:99:58:5b:19:29:
                    81:26:a6:9d:b2:cb:62:9f:b0:65:11:15:15:dd:57:
                    bf:f5:11:31:d7:3c:c7:a3:1f:0a:eb:74:70:20:5c:
                    4b:9b:10:2f:13:0f:b5:37:81:f4:03:52:ef:1e:4a:
                    fc:76:36:1b:e6:65:8d:2e:a2:43:6c:18:56:87:43:
                    bb:4b:7a:49:b4:69:36:dc:d6:8b:c7:5f:7b:c4:07:
                    0a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DC:CF:0A:B2:EF:2D:92:31:4F:B1:BA:8A:94:13:22:C4:94:3E:E2
            X509v3 Authority Key Identifier:
                keyid:1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:51:5a:d4:6a:a8:d2:c5:c5:bc:e3:05:f9:91:c2:3f:41:a5:
         b5:5e:47:d6:69:4f:9d:d4:4d:2b:61:58:a1:cc:2d:10:94:d1:
         30:e8:93:54:c0:a8:96:5e:2b:95:53:80:47:b7:bc:ca:3e:b2:
         7d:b9:7a:87:97:d3:26:14:f4:0b:99:cf:d7:5c:72:56:5d:4c:
         cb:6b:67:68:db:9d:6e:2b:d9:37:c4:54:50:23:a9:09:4a:2c:
         af:de:5f:7d:79:dd:4b:1e:8e:21:08:8b:1b:10:04:d2:99:f9:
         88:a4:30:da:75:1e:6f:2a:2c:23:48:5e:4e:8f:a3:91:a1:2b:
         6b:36:39:8a:78:35:78:b4:af:7c:e7:59:d3:2b:9e:0f:a7:d7:
         7a:dd:a0:8e:4b:ea:b6:42:70:06:a3:ff:1f:fd:50:6e:c2:51:
         5e:6c:bb:7e:c3:76:d6:a2:fb:a8:e9:e5:d7:d1:19:f7:80:66:
         8b:2c:d4:56:e4:3e:00:63:d1:5c:82:32:4a:ae:49:1a:5b:47:
         56:a6:c1:aa:00:4f:20:6e:3f:67:2b:33:08:bb:0f:b0:88:9d:
         cd:39:db:66:10:1c:5e:f9:54:11:b8:b4:4c:66:72:1a:f2:0e:
         db:dc:f0:9a:4f:75:c6:fa:6c:93:c5:a0:81:67:a9:a7:f4:0d:
         b7:01:2e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:08:34 2024 by rpki-client on console-fra.rpki-client.org