Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
File:                     gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft (raw, json)
Hash identifier:          rq+TQjHrrCZ4YXQyBcJI0xP6uMabUQpj7XM6MfqGr3Y=
Subject key identifier:   7A:E0:FB:67:60:28:96:80:FE:C2:24:4D:63:83:0E:3D:A6:43:D5:35
Authority key identifier: 82:FF:FC:FA:DD:27:16:23:C8:D5:05:5D:64:A9:3E:B3:D3:42:5D:BC
Certificate issuer:       /CN=82fffcfadd271623c8d5055d64a93eb3d3425dbc
Certificate serial:       01936B227ABBFA2A423B6159EDF3A9A77339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
Manifest number:          096C
Signing time:             Wed 27 Nov 2024 01:00:41 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:41 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:41 +0000
Files and hashes:         1: MgwbdzmncvpI1ESb1vd0BGlAnZY.roa (hash: 4bNiKyzQqipZ9w3VQdqS+cjPm5/7A1motA8/jr3KKvg=)
                          2: gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl (hash: USPCcCgr/6Se6bZbjBoxn9e6j/TH2lolCEoRXqlnh58=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:7a:bb:fa:2a:42:3b:61:59:ed:f3:a9:a7:73:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fffcfadd271623c8d5055d64a93eb3d3425dbc
        Validity
            Not Before: Nov 27 01:00:41 2024 GMT
            Not After : Nov 28 01:00:41 2024 GMT
        Subject: CN=7ae0fb6760289680fec2244d63830e3da643d535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:23:00:31:e8:1c:48:2f:42:2d:e1:c6:4b:6d:
                    6d:fb:c5:5f:74:9d:a5:60:e7:0b:2f:19:0d:f8:f3:
                    74:72:08:2e:e4:a8:8c:dd:46:1e:60:bd:e9:46:00:
                    fb:26:47:12:8f:9b:e8:b1:a0:ec:0e:d7:66:d0:5f:
                    e1:be:7b:29:db:8b:50:69:a2:8f:4b:90:21:ca:fb:
                    02:22:a8:2b:e1:b0:47:0b:67:6e:f0:a0:ce:4d:f9:
                    be:cb:7a:a4:31:e3:06:9e:69:fe:e1:9a:ee:5c:6e:
                    8e:89:0a:36:0d:a5:a0:b2:ea:01:99:16:a6:50:5c:
                    4b:bc:e4:e2:b6:fb:f6:dd:7a:68:3a:1e:b6:35:cc:
                    ba:60:7f:df:32:5f:8f:07:a0:ae:47:f1:f2:51:16:
                    73:ae:e2:66:f6:49:11:41:90:55:ed:83:bc:44:5c:
                    f4:78:89:22:6e:7d:ee:46:95:ff:3f:41:6a:f8:ab:
                    ef:f5:d0:85:49:ea:ed:95:75:04:f1:2d:07:b6:bf:
                    26:5f:39:56:c4:fd:01:ce:3a:ad:d9:7b:74:df:58:
                    b3:04:a9:f7:2a:8a:14:1d:5d:76:06:ba:85:34:0e:
                    9a:28:20:3d:71:da:f6:bc:6a:69:75:9a:4f:da:92:
                    2f:6f:1f:fe:ee:85:06:f7:88:78:af:9d:1d:bf:b1:
                    08:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E0:FB:67:60:28:96:80:FE:C2:24:4D:63:83:0E:3D:A6:43:D5:35
            X509v3 Authority Key Identifier:
                keyid:82:FF:FC:FA:DD:27:16:23:C8:D5:05:5D:64:A9:3E:B3:D3:42:5D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ff:ec:73:ed:28:20:60:c1:aa:db:70:80:bc:60:1c:f1:0b:
         72:ed:7d:09:e6:dc:ec:e5:e3:f5:c7:ef:fd:c3:f6:14:85:cb:
         49:9f:86:b3:78:e8:46:23:c8:d0:ce:26:be:b6:12:48:9c:87:
         19:c1:ba:b9:fe:cb:3c:39:74:f2:8f:b1:5f:f0:7c:c7:41:da:
         ff:be:c8:e2:d6:44:f7:65:0b:4e:14:12:f0:3f:37:20:48:25:
         2e:9a:c1:0d:50:e5:dd:43:d1:9f:d7:a4:3a:44:f8:5f:e2:6f:
         56:df:96:55:95:1f:a7:47:13:83:eb:c5:dd:7c:10:b4:b6:68:
         46:b7:9f:5e:75:18:df:d6:b9:ec:89:6f:ff:8f:f0:6c:a5:83:
         b1:af:61:53:cf:6b:fc:a8:5e:50:4f:82:75:57:5a:3a:12:36:
         21:09:84:3f:9c:a9:f8:68:f4:88:63:2d:d7:99:1e:68:c3:e9:
         71:4c:fc:17:8b:3f:f9:d5:3d:8e:50:d8:4a:4f:48:ba:1c:c2:
         0e:ae:4c:58:a8:97:ac:b2:4c:c0:a5:67:69:ee:b5:9c:b0:af:
         97:86:62:14:9f:9c:76:9a:d0:20:ae:b9:af:fb:7d:da:26:d6:
         0f:4d:95:2d:86:00:a7:29:ef:3f:ba:fe:94:b1:2f:89:bb:33:
         45:dc:23:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:32:01 2024 by rpki-client on console-ams.rpki-client.org