Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ab3d97-cd82-426c-b74a-e0c1dfde824a/1/gkL-ZPQXLuuwyWr35QtipQd6_go.mft
File:                     gkL-ZPQXLuuwyWr35QtipQd6_go.mft (raw, json)
Hash identifier:          pH62b5bZZZhKtH7DvOXaN0T7Y74h8eJU33qM2xq9YfM=
Subject key identifier:   1C:95:4D:8B:FF:01:69:AA:AE:99:68:F3:A9:0A:4B:5E:94:A6:77:6C
Authority key identifier: 82:42:FE:64:F4:17:2E:EB:B0:C9:6A:F7:E5:0B:62:A5:07:7A:FE:0A
Certificate issuer:       /CN=8242fe64f4172eebb0c96af7e50b62a5077afe0a
Certificate serial:       018F8749B188A18B9FBC8FBCD012F17AC930
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gkL-ZPQXLuuwyWr35QtipQd6_go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/ab3d97-cd82-426c-b74a-e0c1dfde824a/1/gkL-ZPQXLuuwyWr35QtipQd6_go.mft
Manifest number:          012F
Signing time:             Fri 17 May 2024 16:01:44 +0000
Manifest this update:     Fri 17 May 2024 16:01:44 +0000
Manifest next update:     Sat 18 May 2024 16:01:44 +0000
Files and hashes:         1: XTozRMhly3IvXhoRW_g50hTRKj0.roa (hash: l/cBNXGXfrSY5YuPlMadO2F6GArICwMLuVhHYHtnimY=)
                          2: gkL-ZPQXLuuwyWr35QtipQd6_go.crl (hash: QZI8W6ri6R3Jfp9nOvD/Ke5HsWWvB7XqyeyGIQRXC4g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/ab3d97-cd82-426c-b74a-e0c1dfde824a/1/gkL-ZPQXLuuwyWr35QtipQd6_go.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/ab3d97-cd82-426c-b74a-e0c1dfde824a/1/gkL-ZPQXLuuwyWr35QtipQd6_go.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gkL-ZPQXLuuwyWr35QtipQd6_go.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:b1:88:a1:8b:9f:bc:8f:bc:d0:12:f1:7a:c9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8242fe64f4172eebb0c96af7e50b62a5077afe0a
        Validity
            Not Before: May 17 16:01:44 2024 GMT
            Not After : May 18 16:01:44 2024 GMT
        Subject: CN=1c954d8bff0169aaae9968f3a90a4b5e94a6776c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:af:25:19:64:4e:73:50:7f:e5:bb:eb:26:7b:
                    6a:c4:56:5d:69:c0:5f:56:9f:e0:be:54:62:c7:59:
                    eb:9a:74:47:f9:af:94:a4:5b:c6:48:f0:40:63:dc:
                    f6:7e:8f:84:a9:2d:15:49:f0:74:32:93:cf:f3:8e:
                    a1:4e:8b:58:79:f8:e3:2e:76:d7:d0:88:f7:3e:00:
                    e6:43:5f:8e:29:83:b4:c8:86:b2:34:66:5f:bc:1e:
                    03:f2:ea:ad:f7:09:ab:2a:10:25:04:d6:22:81:82:
                    2d:6c:90:8b:3f:dd:84:c7:15:9a:c3:03:e7:b9:87:
                    0e:fc:20:9a:a7:c2:35:f5:95:a8:4c:a2:d2:eb:27:
                    4c:62:92:09:5b:c4:d8:73:a3:7e:2e:e1:0a:20:20:
                    26:61:ff:9d:41:e2:75:59:7c:bf:65:4a:0c:28:b7:
                    fd:10:72:f1:b3:85:98:36:e0:fd:43:ea:15:45:85:
                    f6:33:12:98:9b:da:9c:82:db:09:f2:77:40:be:e0:
                    66:78:3b:e5:89:4a:91:d1:98:68:67:a6:ab:d7:3f:
                    9b:02:fb:4f:37:1e:05:75:6e:97:9e:cd:46:02:1c:
                    27:1b:4f:32:bd:ca:8f:13:7a:02:09:ac:2b:b3:b2:
                    67:6e:60:a6:ac:44:f7:d6:67:23:cd:f8:d0:38:ea:
                    2c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:95:4D:8B:FF:01:69:AA:AE:99:68:F3:A9:0A:4B:5E:94:A6:77:6C
            X509v3 Authority Key Identifier:
                keyid:82:42:FE:64:F4:17:2E:EB:B0:C9:6A:F7:E5:0B:62:A5:07:7A:FE:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkL-ZPQXLuuwyWr35QtipQd6_go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ab3d97-cd82-426c-b74a-e0c1dfde824a/1/gkL-ZPQXLuuwyWr35QtipQd6_go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ab3d97-cd82-426c-b74a-e0c1dfde824a/1/gkL-ZPQXLuuwyWr35QtipQd6_go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:0a:d5:c1:78:76:0f:e0:ef:76:04:27:2b:86:ec:07:a3:2d:
         4b:b0:05:79:e0:fc:28:c3:47:e6:d6:b0:2d:38:07:cb:45:4b:
         b2:fe:d7:6a:17:2c:3e:90:df:60:cd:fb:e7:84:e8:2f:1b:64:
         d1:2f:29:2a:c4:4d:0d:58:2b:c8:65:87:96:7f:c4:e8:53:f7:
         e6:68:99:9b:40:90:86:ab:a2:f4:7d:fc:d5:a9:34:fa:f6:33:
         e7:0f:7c:ea:1f:f8:c3:cf:14:0d:9c:0a:8a:9f:d1:e6:e5:bd:
         fc:3b:13:dc:48:8c:ba:d4:d3:c9:d9:20:38:2c:d3:e7:17:05:
         b6:8a:4c:0b:7a:ac:92:57:7d:65:60:34:03:35:d6:1b:72:06:
         ef:e6:0b:e8:7b:c8:a8:13:ee:11:9d:46:09:c9:a9:9d:db:92:
         09:d9:e2:98:23:88:67:1f:80:50:d0:3a:49:19:07:9f:e6:6b:
         10:da:93:c3:23:61:72:2b:f7:8f:74:c7:a7:6a:78:5b:c9:e7:
         73:61:09:ad:12:9d:d2:f3:ad:2c:04:df:eb:ea:51:e5:56:c5:
         34:b6:5d:2e:10:ce:e6:d3:46:d1:3c:da:2a:92:f8:a4:2c:f1:
         b9:da:b5:ff:2e:f0:5b:2a:4b:43:ab:97:1c:7b:7d:a0:28:e9:
         1c:99:4e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:03:04 2024 by rpki-client on console-ams.rpki-client.org