Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
File:                     GYe7aFnJOMi2PlqqVtkHvQRE484.mft (raw, json)
Hash identifier:          GYAjUQrJmeuzLsgG7JNWkjgMYv/oGk8XOfh9JL1ffmw=
Subject key identifier:   92:85:EA:35:93:49:A9:62:A6:E6:C1:D5:72:13:F1:FA:38:E4:D2:4E
Authority key identifier: 19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
Certificate issuer:       /CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Certificate serial:       018F527FE8643EC9B98FD4370E620E4220F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
Manifest number:          109B
Signing time:             Tue 07 May 2024 10:01:05 +0000
Manifest this update:     Tue 07 May 2024 10:01:05 +0000
Manifest next update:     Wed 08 May 2024 10:01:05 +0000
Files and hashes:         1: GYe7aFnJOMi2PlqqVtkHvQRE484.crl (hash: sqAFWJskZovJ0LFYw2i3dQNVXge7Mn8+9rHe/C/ImTE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 10:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:52:7f:e8:64:3e:c9:b9:8f:d4:37:0e:62:0e:42:20:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
        Validity
            Not Before: May  7 10:01:05 2024 GMT
            Not After : May  8 10:01:05 2024 GMT
        Subject: CN=9285ea359349a962a6e6c1d57213f1fa38e4d24e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ea:b2:04:88:b0:91:4d:1d:4a:85:e9:fb:6b:
                    42:71:b8:8e:9f:69:2e:34:3c:4b:31:3a:d1:38:21:
                    7a:aa:de:65:58:25:88:67:4c:25:f5:f4:34:dc:88:
                    66:ac:7a:92:39:d7:7d:12:c5:aa:8d:af:a6:c6:56:
                    9e:71:86:ec:ff:ac:d9:17:5d:a0:9a:f7:6a:35:24:
                    c0:61:2d:d3:da:ca:9d:f5:d1:e6:9c:36:24:99:6b:
                    f6:90:3b:f8:a5:08:31:2e:6a:ab:b4:c3:96:c7:f9:
                    25:2d:f4:39:0c:23:47:66:3b:31:99:15:77:89:bb:
                    b3:50:c9:8c:89:e9:9f:e7:67:04:fc:10:4d:9a:48:
                    10:f1:5a:6e:f3:fd:68:d6:b1:10:01:9a:6d:e5:5b:
                    8d:f8:18:b3:e4:49:33:64:1e:bd:af:67:13:f4:ea:
                    1f:f3:74:c9:a9:b4:c6:0a:c4:fb:69:a6:bc:79:c0:
                    ca:7a:d0:de:d8:ab:61:52:2e:7f:28:21:55:dd:09:
                    86:55:0c:28:71:59:98:e6:70:34:31:f3:31:04:02:
                    cc:b3:29:33:5a:da:99:c2:a9:1e:5f:7f:00:e5:fa:
                    fb:0f:b0:3a:19:0b:ed:7b:d2:45:ea:0e:99:85:4b:
                    0e:e2:01:af:7e:b8:f6:c0:64:a7:be:22:11:7d:17:
                    02:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:85:EA:35:93:49:A9:62:A6:E6:C1:D5:72:13:F1:FA:38:E4:D2:4E
            X509v3 Authority Key Identifier:
                keyid:19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ae:d0:e4:0e:20:b2:68:a1:58:73:5f:56:b5:87:c4:ca:c8:
         24:99:af:5a:3f:a0:0f:9f:7a:59:0e:81:10:d0:11:17:8e:5f:
         5e:6e:3a:3f:6f:4f:a5:19:bf:00:93:b2:bb:62:13:ec:5b:5f:
         3e:e9:c5:d8:a1:d6:4c:5b:aa:e1:b0:e5:cd:34:fb:0a:21:3c:
         e9:c1:a8:83:a3:7d:33:a3:fa:58:29:0d:bc:f2:18:f4:ec:b6:
         54:4a:0b:5e:8a:6f:72:9c:d1:be:97:2b:e5:05:ca:56:45:a2:
         74:38:2f:8e:dc:41:05:77:ac:bb:18:42:f4:45:c6:5e:0a:22:
         52:41:39:0c:9e:19:62:67:7e:77:0c:38:ce:29:93:cd:35:7f:
         55:f2:58:f2:07:7e:65:b3:84:bb:c5:50:af:01:9e:81:3a:ea:
         63:86:ef:25:5f:d2:65:c7:3e:7f:e1:28:c2:a1:a1:86:d5:a6:
         09:f2:a7:b4:81:1a:0f:35:a8:44:4c:17:a6:b3:c9:b8:0a:da:
         f9:58:21:be:68:3d:43:aa:84:3a:02:3e:96:05:22:a1:74:08:
         72:c9:99:34:c3:b1:6d:cc:98:c5:8b:24:4c:5a:1c:eb:f8:25:
         ab:be:d7:1f:8d:1c:72:6c:92:82:d1:db:7f:9a:8d:64:01:fb:
         dd:3e:bd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 17:15:59 2024 by rpki-client on console-ams.rpki-client.org