Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft
File:                     GWa02kiR-4CQGCvDO0m1liT8nZs.mft (raw, json)
Hash identifier:          afy10I7Z8GFm2h1iQ9CXwXzcRCwLe6faCeMlwIRAWLg=
Subject key identifier:   0D:24:2F:BC:C9:CB:8C:E0:CD:BF:99:45:B7:81:7A:86:DA:02:C0:7C
Authority key identifier: 19:66:B4:DA:48:91:FB:80:90:18:2B:C3:3B:49:B5:96:24:FC:9D:9B
Certificate issuer:       /CN=1966b4da4891fb8090182bc33b49b59624fc9d9b
Certificate serial:       018F43B2C694848AFD0CD72669CFD9413C17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWa02kiR-4CQGCvDO0m1liT8nZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft
Manifest number:          1041
Signing time:             Sat 04 May 2024 13:02:20 +0000
Manifest this update:     Sat 04 May 2024 13:02:20 +0000
Manifest next update:     Sun 05 May 2024 13:02:20 +0000
Files and hashes:         1: GWa02kiR-4CQGCvDO0m1liT8nZs.crl (hash: Gg0Abzv/dvyhvCj/vyXVboFFCxonZieohojdBi59hGA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWa02kiR-4CQGCvDO0m1liT8nZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b2:c6:94:84:8a:fd:0c:d7:26:69:cf:d9:41:3c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1966b4da4891fb8090182bc33b49b59624fc9d9b
        Validity
            Not Before: May  4 13:02:20 2024 GMT
            Not After : May  5 13:02:20 2024 GMT
        Subject: CN=0d242fbcc9cb8ce0cdbf9945b7817a86da02c07c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:c7:31:c0:b4:82:09:12:a1:78:98:fe:87:
                    47:a4:fe:e5:14:c3:65:5b:1d:d9:aa:6e:f5:a6:e5:
                    91:c7:9c:2c:87:5a:cf:5d:0a:28:8e:c5:ff:2e:05:
                    a0:d9:e4:cd:8d:30:75:5c:4b:55:59:eb:9e:4d:d5:
                    79:c4:95:0a:4e:20:8b:c5:46:bf:58:f8:e2:46:16:
                    97:cc:4f:c0:31:3d:d9:68:8a:dc:bf:4a:46:89:6c:
                    5e:4b:68:a9:0a:b7:28:06:33:a2:a2:65:85:5e:f4:
                    18:e4:c4:d7:29:39:4d:03:5f:de:12:c2:20:80:24:
                    0f:6c:d7:8d:e8:24:4f:77:6a:d1:1f:9f:f2:68:95:
                    38:1f:64:d8:0b:72:4d:42:78:9a:f9:f1:27:4b:f1:
                    24:75:05:93:40:4a:1b:28:68:8a:99:78:7d:e5:21:
                    4b:68:a9:15:e4:9d:18:65:1c:09:ab:f0:4e:64:c0:
                    50:ae:ce:c6:79:e9:9f:8a:de:43:4e:dc:07:a1:d6:
                    56:d4:5f:46:d6:31:ab:0d:40:e7:6e:af:f1:a1:a7:
                    cd:fa:20:cd:92:59:f9:98:1c:5c:a5:dc:27:c3:5b:
                    b8:5a:c4:6c:c8:24:9b:4d:d5:61:7a:01:d4:e7:e3:
                    d1:30:42:8a:74:f8:a1:5c:3c:4d:5f:a2:ee:19:8a:
                    3c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:24:2F:BC:C9:CB:8C:E0:CD:BF:99:45:B7:81:7A:86:DA:02:C0:7C
            X509v3 Authority Key Identifier:
                keyid:19:66:B4:DA:48:91:FB:80:90:18:2B:C3:3B:49:B5:96:24:FC:9D:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWa02kiR-4CQGCvDO0m1liT8nZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:03:61:11:3e:ed:9f:d2:bd:e0:34:eb:25:e2:f6:89:2e:b8:
         c8:30:82:53:b8:57:20:0f:dc:bc:50:5b:60:95:e1:c9:ce:d9:
         3b:0c:44:14:b3:02:0c:b9:75:f3:e2:55:b0:29:21:c5:c9:ac:
         74:24:87:6b:77:08:ed:04:d5:57:c0:46:25:dd:45:18:31:48:
         cc:bd:55:0f:c7:9b:e3:79:18:d2:b1:ba:90:c4:2b:1f:2a:74:
         c7:77:54:be:9f:8c:95:95:90:d7:3c:68:85:4a:79:2d:82:1a:
         59:a0:26:e2:0d:27:55:47:a6:58:9f:04:c2:5d:0a:9b:e3:5b:
         64:07:66:4b:1d:38:f3:b4:ae:bb:39:57:fd:bf:98:44:b5:29:
         d1:50:28:ec:7a:96:de:05:8c:40:ed:a7:6a:75:68:eb:c9:f8:
         68:eb:fe:88:75:37:7c:7d:7d:81:96:ce:9c:9c:d9:39:74:a2:
         d5:6e:db:44:49:d0:12:e2:f6:c3:36:3e:db:97:ee:3d:66:f8:
         dd:bf:de:6b:81:b2:4d:9a:db:4b:44:42:d1:36:cc:06:09:76:
         c0:22:02:96:94:02:89:bd:65:fe:eb:61:e3:53:cb:e9:88:b8:
         a3:f0:81:ca:3a:cc:bc:67:c3:b9:e5:54:f9:04:ae:e9:2d:ab:
         17:e4:ba:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:44:56 2024 by rpki-client on console-fra.rpki-client.org