Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
File:                     Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft (raw, json)
Hash identifier:          K5Ddx+Uxa4amAJj7SJoh5Z3GqNkBnkRC4zcYN7T9FjM=
Subject key identifier:   51:1F:E5:F5:E6:BD:97:5C:41:BF:24:3C:30:5E:86:38:3B:01:18:0A
Authority key identifier: 1A:AC:7D:B5:19:3C:1B:3B:74:87:E8:47:D4:1A:38:3E:D5:B2:66:71
Certificate issuer:       /CN=1aac7db5193c1b3b7487e847d41a383ed5b26671
Certificate serial:       018F3B537D149AA8D3BFAB8EEB55BB203D35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
Manifest number:          042C
Signing time:             Thu 02 May 2024 22:01:18 +0000
Manifest this update:     Thu 02 May 2024 22:01:18 +0000
Manifest next update:     Fri 03 May 2024 22:01:18 +0000
Files and hashes:         1: Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl (hash: Rl9SzBbwh2+Uip8ANCdNBvH+V/3KUNU+1sFTzGTztNs=)
                          2: KX892rzyjMXgrRcsyLvyE-v_AT8.roa (hash: t7EpgxvFrdamcIfPlnABk2hl/vkdhYmXLhbjJNicuDc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:53:7d:14:9a:a8:d3:bf:ab:8e:eb:55:bb:20:3d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aac7db5193c1b3b7487e847d41a383ed5b26671
        Validity
            Not Before: May  2 22:01:18 2024 GMT
            Not After : May  3 22:01:18 2024 GMT
        Subject: CN=511fe5f5e6bd975c41bf243c305e86383b01180a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a8:09:d9:74:54:f8:fb:98:3d:cc:97:90:56:
                    44:77:58:ff:7a:dc:3d:df:a4:4a:44:b1:d6:8f:d2:
                    38:bb:6f:67:cb:3c:d7:48:40:45:e6:ef:3f:01:bf:
                    88:d9:88:a7:58:c2:31:1e:25:53:12:f9:cb:2b:6a:
                    20:15:99:c1:65:93:4a:65:8c:fc:e0:c7:78:5b:38:
                    86:3f:d7:c1:87:45:de:fa:84:af:5e:27:aa:19:f5:
                    05:02:8d:9a:a8:d8:84:0c:cc:aa:cf:6c:a4:53:72:
                    0d:5c:25:4a:ff:1a:db:36:09:ae:08:2b:2d:a5:9d:
                    69:f4:c9:8c:d2:69:58:4b:05:7e:27:86:89:1c:19:
                    fc:37:e6:92:26:c8:b3:44:c7:d8:81:19:23:31:eb:
                    24:99:89:5c:fd:b5:46:be:42:f4:52:d1:8a:e9:60:
                    30:73:5e:6a:bd:69:75:83:c1:3d:58:64:f1:64:d5:
                    cb:17:da:3e:2a:2a:42:ce:1d:e7:03:22:7b:1e:4d:
                    ab:37:ab:fb:1b:30:b6:72:94:e5:49:a7:85:c8:60:
                    8c:5c:56:c1:33:c0:24:b5:2e:e7:ef:94:5c:a4:ce:
                    fa:7b:1a:d7:f2:e8:00:48:29:35:18:7c:ea:15:a2:
                    f6:b3:9c:0c:e0:90:c5:4a:c6:fc:2e:7d:66:78:6f:
                    7c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1F:E5:F5:E6:BD:97:5C:41:BF:24:3C:30:5E:86:38:3B:01:18:0A
            X509v3 Authority Key Identifier:
                keyid:1A:AC:7D:B5:19:3C:1B:3B:74:87:E8:47:D4:1A:38:3E:D5:B2:66:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f7:e6:3a:a8:ae:17:62:05:6a:d1:6e:74:f1:43:fe:35:a2:
         37:b2:b6:f7:9c:cd:31:49:2b:33:0d:ef:6c:b0:59:b8:1a:88:
         1b:81:27:e2:9e:85:46:f8:04:00:05:d3:b9:c4:5f:47:86:29:
         ca:31:6d:33:00:84:10:a0:e0:16:40:0b:56:8c:97:31:dc:34:
         95:18:45:80:d6:3a:9d:83:09:51:70:24:ca:d8:d6:9b:45:b8:
         a1:33:8f:27:6b:01:9f:89:61:b0:3e:15:b8:1d:0a:76:6a:b1:
         58:45:2b:9d:b7:81:f4:17:34:00:dd:9c:03:5c:61:67:13:5b:
         2f:69:9b:77:70:5e:ca:64:be:2b:d0:2d:8d:52:40:06:e3:1f:
         7c:62:6e:3c:8a:2d:4b:10:dc:47:fc:e8:07:8c:1a:ec:7f:84:
         84:60:6c:3f:4f:e3:ee:9c:e8:2f:ed:a4:a5:d4:df:36:36:6c:
         03:86:f9:0b:f1:17:15:bf:fb:58:05:02:6a:ed:e1:29:b9:12:
         a9:74:40:d1:23:74:70:1e:0b:03:67:e1:25:10:59:4c:d4:9a:
         33:04:ef:41:14:a0:37:e4:01:08:64:54:43:02:e9:df:68:92:
         85:d8:ac:15:e0:f0:7c:04:c1:92:c4:58:90:2f:39:04:3d:60:
         b8:f8:fc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:11:44 2024 by rpki-client on console-fra.rpki-client.org