Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
File:                     GXSZvpe8wyf2Tp64xCOUUIygbWU.mft (raw, json)
Hash identifier:          Xphc5OHGrcNN/l3xmSUbcqcAifmda2jKznfmzKTNr0I=
Subject key identifier:   70:F8:D7:D5:82:83:B0:29:21:D9:F2:D7:84:7A:94:4E:8C:9C:68:09
Authority key identifier: 19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
Certificate issuer:       /CN=197499be97bcc327f64e9eb8c42394508ca06d65
Certificate serial:       018F4B6BDDB79992D9AEF18C9DBC695C6E87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
Manifest number:          07AE
Signing time:             Mon 06 May 2024 01:01:51 +0000
Manifest this update:     Mon 06 May 2024 01:01:51 +0000
Manifest next update:     Tue 07 May 2024 01:01:51 +0000
Files and hashes:         1: GXSZvpe8wyf2Tp64xCOUUIygbWU.crl (hash: NIcWSzG4qPJHOXgH/Cq+7Qwv7BLkoxx/lMKKpx5+A7k=)
                          2: MHd_o0AXjmwZPfrMu8VrSu6El0I.roa (hash: 3pGS/WVRsO4xeElgiagyspIKWyh7cTcBMOylzLFiIPA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6b:dd:b7:99:92:d9:ae:f1:8c:9d:bc:69:5c:6e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197499be97bcc327f64e9eb8c42394508ca06d65
        Validity
            Not Before: May  6 01:01:51 2024 GMT
            Not After : May  7 01:01:51 2024 GMT
        Subject: CN=70f8d7d58283b02921d9f2d7847a944e8c9c6809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6e:a3:6f:93:d6:cd:f5:35:b5:eb:7b:09:17:
                    fb:df:dd:77:a5:bf:29:3f:d5:92:4b:98:e7:8e:51:
                    e7:7c:1d:63:d1:25:1a:32:d3:56:2c:f1:4e:2d:d2:
                    6b:81:87:66:30:09:a4:86:1c:0b:aa:19:a5:99:9b:
                    6c:18:47:8f:bb:7e:08:a7:3a:0c:e6:58:ca:41:5e:
                    b0:c7:17:35:76:63:84:9b:ac:7b:42:15:fc:4f:a1:
                    67:c2:0d:7a:30:f7:0f:98:92:25:c7:46:b3:a9:70:
                    45:e6:8c:e0:e0:ec:a8:f0:76:f7:a6:04:8a:17:30:
                    2d:b2:c0:0f:b5:32:e0:77:04:9b:df:c5:2c:8c:29:
                    9e:0c:50:25:02:3d:24:1c:09:2e:2b:d8:ea:a7:72:
                    41:4a:d8:54:af:dd:23:fa:1c:57:88:81:20:bb:97:
                    8a:dd:9e:3f:a0:fd:c6:d0:7d:1a:bd:01:63:08:dc:
                    ad:45:d2:36:e9:da:7a:fb:e6:e3:5c:50:bb:3f:52:
                    91:43:91:71:82:c8:71:75:fc:25:ba:df:2d:d1:58:
                    81:7f:6c:ac:1c:e1:15:cd:66:71:61:35:4f:71:c6:
                    8b:dc:1f:c6:07:9e:05:66:f7:1f:e5:b6:67:95:20:
                    1f:c7:d4:33:83:15:23:e9:dc:b8:df:7f:49:d7:88:
                    f7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F8:D7:D5:82:83:B0:29:21:D9:F2:D7:84:7A:94:4E:8C:9C:68:09
            X509v3 Authority Key Identifier:
                keyid:19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b2:fa:e3:37:d1:9c:8c:f3:c6:1d:44:6d:bb:c9:2c:1b:19:
         06:f7:94:3f:64:20:5c:b8:95:a9:b0:cc:45:93:7b:39:92:3a:
         bd:ed:ae:e8:69:5a:08:e6:84:5b:54:28:34:5b:36:66:bc:9e:
         92:4e:9e:25:0c:6e:bc:7b:28:f1:47:8d:51:25:d2:57:16:63:
         11:f1:54:e9:3a:bf:a4:77:35:21:fc:71:bc:1b:57:5a:c2:b5:
         19:e2:e0:77:e2:c4:26:cb:1d:19:10:c4:61:27:31:a4:cc:b1:
         37:e6:1c:d5:34:36:ef:17:a5:1f:d2:cf:37:2a:f4:ba:74:28:
         16:75:bb:29:34:4d:14:37:7e:4f:1f:2b:7a:25:58:1e:f0:81:
         e7:71:da:7e:3d:9e:23:06:88:a3:eb:9b:9a:55:ac:4a:b8:b2:
         d2:98:a4:f7:17:59:bc:64:32:88:32:e2:71:d4:52:98:59:c0:
         51:8c:cd:e9:b3:e6:f8:28:68:f3:c8:ec:ea:a1:97:71:3c:61:
         e8:08:7a:34:0b:36:91:41:7c:5c:62:7f:c3:66:f8:c9:eb:fa:
         7f:0b:e6:57:bc:85:9d:21:e5:8f:e7:69:5f:b1:19:cb:35:07:
         e8:c3:3f:01:6e:27:71:75:ba:87:19:a9:ba:68:bf:e0:5e:5b:
         d1:f3:f9:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9La923mZLZrvGMnbxpXG6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NzQ5OWJlOTdiY2MzMjdmNjRlOWViOGM0MjM5NDUwOGNh
MDZkNjUwHhcNMjQwNTA2MDEwMTUxWhcNMjQwNTA3MDEwMTUxWjAzMTEwLwYDVQQD
Eyg3MGY4ZDdkNTgyODNiMDI5MjFkOWYyZDc4NDdhOTQ0ZThjOWM2ODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA626jb5PWzfU1tet7CRf73913pb8p
P9WSS5jnjlHnfB1j0SUaMtNWLPFOLdJrgYdmMAmkhhwLqhmlmZtsGEePu34IpzoM
5ljKQV6wxxc1dmOEm6x7QhX8T6Fnwg16MPcPmJIlx0azqXBF5ozg4Oyo8Hb3pgSK
FzAtssAPtTLgdwSb38UsjCmeDFAlAj0kHAkuK9jqp3JBSthUr90j+hxXiIEgu5eK
3Z4/oP3G0H0avQFjCNytRdI26dp6++bjXFC7P1KRQ5Fxgshxdfwlut8t0ViBf2ys
HOEVzWZxYTVPccaL3B/GB54FZvcf5bZnlSAfx9QzgxUj6dy4339J14j33wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHD419WCg7ApIdny14R6lE6MnGgJMB8GA1UdIwQY
MBaAFBl0mb6XvMMn9k6euMQjlFCMoG1lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1hTWnZwZTh3eWYyVHA2NHhDT1VVSXlnYldVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82YTkwMGEtOGI1Yy00MDdiLWEwOTQt
ODk4MDM2NzM0ODc4LzEvR1hTWnZwZTh3eWYyVHA2NHhDT1VVSXlnYldVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS82YTkwMGEtOGI1Yy00MDdiLWEwOTQtODk4MDM2NzM0ODc4
LzEvR1hTWnZwZTh3eWYyVHA2NHhDT1VVSXlnYldVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7L64zfR
nIzzxh1EbbvJLBsZBveUP2QgXLiVqbDMRZN7OZI6ve2u6GlaCOaEW1QoNFs2Zrye
kk6eJQxuvHso8UeNUSXSVxZjEfFU6Tq/pHc1IfxxvBtXWsK1GeLgd+LEJssdGRDE
YScxpMyxN+Yc1TQ27xelH9LPNyr0unQoFnW7KTRNFDd+Tx8reiVYHvCB53Hafj2e
IwaIo+ubmlWsSriy0pik9xdZvGQyiDLicdRSmFnAUYzN6bPm+Cho88js6qGXcTxh
6Ah6NAs2kUF8XGJ/w2b4yev6fwvmV7yFnSHlj+dpX7EZyzUH6MM/AW4ncXW6hxmp
umi/4F5b0fP5yQ==
-----END CERTIFICATE-----
Generated at Mon May 6 06:44:14 2024 by rpki-client on console-fra.rpki-client.org