Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
File:                     GVmXqL_GmLjrnoco7K8SpSezV98.mft (raw, json)
Hash identifier:          4x4GDgtX9eltFMD9qUTYJeLxvkFvSglZQFa1MNGMpkk=
Subject key identifier:   D0:B4:23:18:96:0E:F6:AB:78:0A:60:88:CC:A3:29:F5:DC:55:67:C3
Authority key identifier: 19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
Certificate issuer:       /CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
Certificate serial:       018F3BFAC4AB8BE903F5EA9F3E4CB242FE77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
Manifest number:          0455
Signing time:             Fri 03 May 2024 01:04:01 +0000
Manifest this update:     Fri 03 May 2024 01:04:01 +0000
Manifest next update:     Sat 04 May 2024 01:04:01 +0000
Files and hashes:         1: GVmXqL_GmLjrnoco7K8SpSezV98.crl (hash: kqnB377HLDyA/DenpCfwKPH6qPGn/vSsueQblP5uQXg=)
                          2: nZvZwSn5iFyaC8Yp3FAjjusnblc.roa (hash: u/4S40KQdpZS6v0v8C7Ngo2Y3BfFpYAApd1jpIHWq/U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fa:c4:ab:8b:e9:03:f5:ea:9f:3e:4c:b2:42:fe:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
        Validity
            Not Before: May  3 01:04:01 2024 GMT
            Not After : May  4 01:04:01 2024 GMT
        Subject: CN=d0b42318960ef6ab780a6088cca329f5dc5567c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:73:95:00:83:dc:f5:6d:a8:19:4b:02:ca:76:
                    b1:26:a5:f7:04:8b:12:5d:2d:4f:9e:7f:9c:9e:ed:
                    8e:98:98:5d:93:74:92:76:fe:19:70:84:89:51:fc:
                    ea:14:38:f1:1d:50:92:fe:8d:be:82:3d:e4:d2:f5:
                    2b:ed:1d:96:60:08:dc:b7:f7:0a:35:e1:dc:81:e9:
                    c8:38:5f:a6:99:de:86:84:7d:34:4b:92:62:09:ee:
                    b0:da:60:0d:ea:db:b0:55:aa:34:2e:0a:c5:04:32:
                    34:4c:50:53:38:29:41:40:e8:4a:38:3d:49:fd:f1:
                    c3:ac:a9:ee:42:6c:5a:d0:40:d9:36:f9:5a:8b:4a:
                    e7:77:8e:dc:cf:d4:dc:3e:43:ca:ce:b2:77:9c:48:
                    6c:c8:ad:ed:52:58:75:c4:4c:1d:85:c0:53:a9:be:
                    53:65:3c:f1:4c:da:74:e1:4b:af:f5:91:36:e6:bb:
                    9f:bb:11:0c:65:bb:60:3f:ce:aa:65:eb:94:93:bc:
                    51:e2:4d:cb:eb:53:30:d8:32:0f:6d:f9:e5:e2:99:
                    e0:1d:9d:c9:b8:c1:1c:5e:5c:66:ce:fd:57:81:95:
                    c9:aa:86:36:4a:a1:5e:33:21:5b:fb:73:54:f1:e8:
                    c3:f3:b1:c6:7b:b5:87:91:e7:30:52:cb:01:09:58:
                    1d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B4:23:18:96:0E:F6:AB:78:0A:60:88:CC:A3:29:F5:DC:55:67:C3
            X509v3 Authority Key Identifier:
                keyid:19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:4c:f7:2d:43:94:ef:29:c7:36:9a:ba:48:57:3a:39:75:0e:
         55:4a:b3:26:7c:b6:19:67:f4:5c:3c:d3:8c:36:96:db:70:12:
         5e:db:49:dd:88:b2:dd:d6:91:05:20:ab:2a:ee:6d:fd:c5:24:
         10:a2:ca:be:86:56:3e:92:08:af:1e:b6:7c:c9:0d:da:da:69:
         49:b2:b6:6a:56:4b:36:e3:83:31:50:b6:04:e0:74:f6:60:58:
         84:df:fa:96:b4:cc:39:bb:b5:9c:d4:6c:37:6f:9f:17:e6:1c:
         3c:32:f4:3e:53:6f:0e:c2:e5:95:8d:69:19:2d:ab:be:51:5b:
         32:64:af:4a:4a:db:44:71:47:c3:33:25:be:43:ad:f6:de:39:
         d0:12:ef:fd:56:be:65:85:15:dd:25:b6:31:ea:7a:98:af:1f:
         bf:7f:b9:44:66:c8:c8:9c:f9:21:cc:0a:3f:f7:e1:c7:d7:ce:
         94:92:7b:84:ff:b0:4c:39:6d:1c:d6:cb:d1:f4:ab:f6:9d:42:
         37:e0:2e:43:e4:00:7e:b4:7d:c6:c2:2e:fe:e3:03:49:71:76:
         1c:cc:6c:a7:a4:29:7a:a9:c4:99:d7:05:d6:b6:35:0b:9b:20:
         45:53:4f:b3:cd:2f:06:48:a1:24:3f:01:61:fa:e1:00:3e:4f:
         6f:6b:57:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:34:22 2024 by rpki-client on console-ams.rpki-client.org