Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
File:                     GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft (raw, json)
Hash identifier:          gY4fVl3slFo9AUTteHW9HKk5dtyIDcu7TBJP9EhxTxg=
Subject key identifier:   0F:61:8E:45:4B:26:63:14:C0:4C:E8:39:78:15:00:E1:B4:BD:A7:B8
Authority key identifier: 19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01
Certificate issuer:       /CN=195a12a0e73482d993260598a25c8f5a5c49d201
Certificate serial:       018F219307A2363F3BF81F975991AA0AC19F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
Manifest number:          113F
Signing time:             Sat 27 Apr 2024 22:00:34 +0000
Manifest this update:     Sat 27 Apr 2024 22:00:34 +0000
Manifest next update:     Sun 28 Apr 2024 22:00:34 +0000
Files and hashes:         1: GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl (hash: tokSkSAYuFX0rDO2kiQmeIuRMTB4y8Gx5D2IOj46nC0=)
                          2: vEwrEoVUXi7xxY0E085vGBKl2Qo.roa (hash: 47Ub9lFiQjWly7SB90E64K47jXvtuA2mlivmFg1NWrI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:21:93:07:a2:36:3f:3b:f8:1f:97:59:91:aa:0a:c1:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195a12a0e73482d993260598a25c8f5a5c49d201
        Validity
            Not Before: Apr 27 22:00:34 2024 GMT
            Not After : Apr 28 22:00:34 2024 GMT
        Subject: CN=0f618e454b266314c04ce839781500e1b4bda7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9a:ee:ea:1d:c6:65:4d:8f:b7:85:de:4e:17:
                    19:dc:f1:4b:3c:5f:6d:0b:b6:60:4f:21:20:42:87:
                    a8:55:55:05:eb:e7:bc:d3:4c:d2:67:b9:2b:00:d2:
                    a7:2b:44:03:e0:aa:3b:c1:3a:55:5f:3b:bc:b4:8a:
                    d0:60:5f:4c:3a:38:ad:7a:45:5a:3f:40:bf:b7:e1:
                    0a:ce:58:09:a9:d9:85:95:38:1d:f7:6b:8d:7d:c5:
                    63:28:35:57:d1:28:65:e4:c2:8e:3b:7e:20:67:95:
                    4d:3c:8b:3e:77:6f:f6:ef:33:2c:4a:21:fb:fd:05:
                    c6:0d:20:39:b9:3e:6e:fc:30:3b:66:c7:2a:c3:c9:
                    75:2b:ee:2c:35:66:78:3b:b9:09:ce:0d:3a:08:d9:
                    71:16:57:4d:06:f5:1a:16:37:4b:d2:d5:18:b2:4b:
                    54:df:d9:69:17:0c:85:75:43:9a:fe:7e:73:78:6e:
                    fe:50:de:98:40:e9:c3:db:63:da:25:4f:75:c4:b6:
                    71:e9:4d:14:b3:45:4f:40:ef:b4:b9:93:7b:a0:e3:
                    8d:d6:df:ba:3a:a6:ba:5e:c9:b2:2f:53:24:39:c6:
                    f0:d9:e5:5a:b4:92:0b:81:7c:77:5a:6a:5f:3f:43:
                    2d:72:e1:e4:1f:7e:59:51:44:18:5a:11:13:15:1d:
                    7e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:61:8E:45:4B:26:63:14:C0:4C:E8:39:78:15:00:E1:B4:BD:A7:B8
            X509v3 Authority Key Identifier:
                keyid:19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:57:3c:8d:0b:50:43:7f:94:9d:ca:0f:68:86:ce:92:8d:1f:
         73:40:74:ac:a1:12:3c:4c:3c:8a:43:8a:68:d4:1e:8b:31:46:
         0c:a4:ab:e2:fe:fc:6d:e0:60:2c:85:25:96:92:96:5a:52:09:
         d6:d3:dc:62:2c:c1:dd:d0:d8:61:da:3d:1e:71:76:8e:f2:c7:
         ea:ae:d7:b7:6d:8b:ec:80:11:73:0a:86:ae:cb:aa:b3:33:1a:
         b9:64:8d:94:0b:b9:f5:fa:a7:ac:93:9e:0e:c4:3c:e8:24:a3:
         41:1e:14:50:09:85:c4:a1:bd:c2:80:6e:f3:a9:26:c9:5e:d4:
         56:24:cd:20:76:2c:3e:00:2d:87:a4:fc:15:85:5a:bc:0a:8a:
         b9:b3:ae:7d:f1:13:55:18:6d:71:0f:0c:1c:0c:bb:39:b1:71:
         56:8a:82:b9:ef:f2:6b:5c:4e:58:c5:c5:10:3d:54:c4:8e:7e:
         cf:5c:aa:d0:8b:00:9d:1a:f6:d3:f3:e4:a5:ff:d8:f9:27:bc:
         05:69:ca:c2:60:a2:5e:07:18:af:c9:cc:e5:33:8d:f4:39:aa:
         35:7a:4b:e0:9b:0c:61:d2:02:67:fd:da:a1:bd:0b:0c:8a:41:
         e3:cc:54:ab:ff:e0:0d:8b:65:c1:3e:10:71:50:d9:69:06:94:
         dc:99:65:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:36:54 2024 by rpki-client on console-ams.rpki-client.org