Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
File:                     GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft (raw, json)
Hash identifier:          YntP9esmG3GNTErmHPhKDulKSJZHM6v1QN569zZcb8A=
Subject key identifier:   E0:2F:E4:60:D2:DE:DA:A5:C5:E4:ED:20:75:B3:E8:47:B7:61:6F:AB
Authority key identifier: 18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
Certificate issuer:       /CN=1810633739243f71a29eed18dc13d00676c7ce3c
Certificate serial:       018F43B38B2F6F1B0DF50F735472203DAF2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
Manifest number:          1151
Signing time:             Sat 04 May 2024 13:03:11 +0000
Manifest this update:     Sat 04 May 2024 13:03:11 +0000
Manifest next update:     Sun 05 May 2024 13:03:11 +0000
Files and hashes:         1: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl (hash: EDKlKeTx6xW7wq5JwBsosCO54yvYTca8fkwe0c19eH8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b3:8b:2f:6f:1b:0d:f5:0f:73:54:72:20:3d:af:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1810633739243f71a29eed18dc13d00676c7ce3c
        Validity
            Not Before: May  4 13:03:11 2024 GMT
            Not After : May  5 13:03:11 2024 GMT
        Subject: CN=e02fe460d2dedaa5c5e4ed2075b3e847b7616fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:ce:26:26:37:92:e1:fd:80:28:21:45:7d:
                    68:d5:57:12:57:b6:53:c5:db:07:2c:51:10:22:3c:
                    6b:dd:20:9a:67:19:4d:5a:9a:96:38:c7:84:f8:3d:
                    e3:29:88:d0:83:17:f4:9b:6a:bf:64:fa:56:d5:8e:
                    dc:b3:f8:60:8d:f3:7e:e9:c5:16:e4:cc:3c:04:0d:
                    6c:77:80:0d:72:22:2d:a4:5a:6f:6d:a3:6f:5e:b3:
                    1b:05:27:d0:18:e9:81:3c:c5:1a:10:22:42:5e:7f:
                    4b:d6:8d:f1:2e:a4:11:21:8a:c6:4a:6a:16:ad:27:
                    16:de:bf:b2:72:98:4b:d2:52:49:83:1c:91:2c:99:
                    91:0e:a7:df:84:d8:a2:76:d3:35:fc:d9:3e:35:ae:
                    61:28:ba:2c:50:f1:35:33:f9:9a:dd:52:62:8e:70:
                    76:b7:33:b8:da:bc:01:de:b1:e6:ec:6f:95:fa:a9:
                    7f:ed:c3:7d:68:e0:c7:c1:78:d1:cf:89:87:ba:86:
                    72:62:b3:67:34:36:2a:cf:84:23:9a:c7:0b:2d:9f:
                    6e:f2:20:81:25:10:58:9b:89:cb:7f:be:8e:59:95:
                    9a:ee:ee:aa:fd:dc:7a:af:f8:7d:8e:c9:41:21:84:
                    54:91:de:df:8d:10:13:5a:45:7f:17:8a:eb:99:e6:
                    d5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2F:E4:60:D2:DE:DA:A5:C5:E4:ED:20:75:B3:E8:47:B7:61:6F:AB
            X509v3 Authority Key Identifier:
                keyid:18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:75:91:c7:73:a5:fd:19:42:bc:1d:c6:bb:0f:20:6c:11:a8:
         7b:05:4b:5a:f7:e5:54:26:db:f7:3c:55:81:c2:96:f6:a4:d2:
         c4:76:18:5c:71:bf:04:94:12:d4:23:f6:66:3d:67:59:83:f3:
         a3:88:8e:3b:08:4d:4b:43:12:9c:c5:db:b9:78:2c:e3:03:6d:
         67:ad:50:a0:34:af:6a:8b:d4:26:0f:11:2f:c8:62:23:0c:f8:
         50:8e:ed:02:a6:6c:fe:d8:d5:eb:b2:f7:6d:f5:ff:4c:41:ce:
         32:61:40:df:3c:52:c8:47:f8:cb:74:8a:ad:f2:f7:39:a1:7f:
         90:b7:c4:56:0e:a5:cc:62:2c:db:19:6d:7f:4d:db:87:90:69:
         4a:b6:c7:33:2f:e8:db:67:2f:6d:e4:42:ef:fe:e5:f1:d2:a2:
         63:2f:e2:fd:fb:bd:8e:e7:63:1f:53:3e:18:1f:89:15:45:55:
         c6:03:d6:ae:24:4d:cf:66:e0:50:42:a4:fd:b6:c5:20:62:e7:
         50:dd:99:f9:0b:1d:d0:f1:01:a4:52:cf:24:12:99:a0:53:fd:
         2e:56:19:cb:9f:04:4c:08:7a:45:e0:fa:62:01:68:12:93:09:
         74:74:df:d7:30:0d:21:4d:5f:19:07:24:77:b4:e0:a8:50:1f:
         8f:67:70:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:47:13 2024 by rpki-client on console-ams.rpki-client.org