Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
File:                     gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json)
Hash identifier:          QtviG4mOUxQYzvsyXXfRQvute9/7bbrzWfF/rgHn1rU=
Subject key identifier:   C3:AF:31:4C:FB:43:14:2E:F1:11:E1:0B:9A:16:0D:A5:48:FA:D7:88
Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
Certificate issuer:       /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Certificate serial:       018F8635B38061996546884F5654F39464DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
Manifest number:          02BD
Signing time:             Fri 17 May 2024 11:00:16 +0000
Manifest this update:     Fri 17 May 2024 11:00:16 +0000
Manifest next update:     Sat 18 May 2024 11:00:16 +0000
Files and hashes:         1: KBoMDD3vy6cb7_xSn_kVkZRtmdw.roa (hash: A8D5IeGOu9viEDfuO8PMMIUNcztJez165ognvPEdkIk=)
                          2: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: FsXrC3XkrDiUgCc3qnHXzdymjVGIengKiNNU2U0su9c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:b3:80:61:99:65:46:88:4f:56:54:f3:94:64:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
        Validity
            Not Before: May 17 11:00:16 2024 GMT
            Not After : May 18 11:00:16 2024 GMT
        Subject: CN=c3af314cfb43142ef111e10b9a160da548fad788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:7c:4b:f0:cf:1c:3c:0c:ad:93:d4:0f:3e:
                    af:66:7c:1a:6d:d9:c6:1a:a1:85:d9:2c:8b:5b:ae:
                    dc:f9:d5:ec:ce:30:a6:fc:73:73:9d:d9:2f:86:df:
                    9d:71:0a:f9:84:74:ba:a1:e7:6a:cc:83:c5:4a:be:
                    3d:05:d4:cb:fc:9e:b7:e6:98:c3:61:8a:e4:9f:a5:
                    fa:e0:84:d6:83:6d:ad:6a:f7:cd:28:78:64:f7:ba:
                    eb:66:9a:96:5f:83:8a:75:69:63:1b:38:0d:38:31:
                    b6:8d:29:01:d2:27:5e:33:50:61:f3:1c:d7:7c:45:
                    e7:f9:c7:2f:7a:35:a8:be:22:72:44:dd:43:dd:ff:
                    26:1f:da:ca:95:8c:3e:0f:4e:4a:f9:81:d8:e8:5e:
                    b6:9d:21:aa:aa:63:eb:5f:29:a0:8d:e5:55:5f:53:
                    ff:44:4b:a5:8c:a8:36:f8:ea:db:53:32:ff:4b:cf:
                    ba:cc:23:54:50:b9:bf:44:3f:6e:a1:19:c5:98:c7:
                    06:6c:d6:5c:4e:2e:fc:a0:20:ea:71:4a:e5:9e:5e:
                    75:cb:ef:b3:2d:98:2c:bf:e0:38:d6:70:ef:7f:04:
                    c7:b4:a2:dc:31:9f:98:5a:2d:df:0a:3c:34:70:fb:
                    a3:8b:11:de:9d:f5:54:84:6d:05:99:88:34:90:95:
                    a3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AF:31:4C:FB:43:14:2E:F1:11:E1:0B:9A:16:0D:A5:48:FA:D7:88
            X509v3 Authority Key Identifier:
                keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ea:b3:0a:36:71:19:93:ac:7c:50:68:cd:64:bd:75:eb:7e:
         17:09:72:f9:e3:ba:49:6a:c6:79:5d:ad:ae:2d:8c:e7:0e:01:
         8a:f3:40:f6:a9:51:a0:29:f8:94:b4:df:99:a0:13:4c:08:6c:
         19:61:70:27:04:98:e5:c5:bd:fc:79:76:70:d8:1e:23:d0:c3:
         10:7e:d6:85:c4:04:de:9c:2e:2d:89:eb:0e:16:95:31:91:90:
         b5:1b:cf:10:6b:f4:e4:05:a5:19:8a:17:dc:5f:56:c0:2c:52:
         ea:f6:36:e2:02:12:00:db:dc:39:ee:0a:66:ac:e0:32:a5:99:
         5e:ec:19:fb:16:0f:ab:dd:43:48:5b:be:9b:4c:a5:50:12:a8:
         3c:f9:40:82:b1:30:aa:61:87:01:df:17:9a:f7:bf:ac:7d:6b:
         a4:d5:7d:03:4d:27:d5:e1:09:1d:10:9d:23:69:87:5d:9d:26:
         02:d0:f0:0d:d3:ca:8f:5d:0e:f7:22:32:f8:3b:27:bc:fb:c2:
         b7:87:35:bb:d8:ab:c1:7e:fe:e9:36:b6:d7:d5:d0:de:4c:fb:
         db:3a:eb:52:80:cd:2e:ef:4e:1a:38:31:1b:7c:64:f3:86:20:
         94:4a:a4:bc:9b:9e:f4:53:65:61:d8:91:5d:72:a0:4e:83:55:
         87:d8:d6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:00:52 2024 by rpki-client on console-ams.rpki-client.org