Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
File:                     G04-M_1PbZy08TyiI3HjCzbPp3Y.mft (raw, json)
Hash identifier:          BHrgaeqg49Q8CHlw5xkAE3LjSpHPdEi1K9jxpk72Psk=
Subject key identifier:   97:B2:6C:C4:B0:71:CF:3D:7B:BE:7B:0C:F4:55:67:00:74:7D:54:A1
Authority key identifier: 1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
Certificate issuer:       /CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
Certificate serial:       018FD6E4F35FA8FAB964B4B2F8BC6BC8AB11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
Manifest number:          119D
Signing time:             Sun 02 Jun 2024 03:01:19 +0000
Manifest this update:     Sun 02 Jun 2024 03:01:19 +0000
Manifest next update:     Mon 03 Jun 2024 03:01:19 +0000
Files and hashes:         1: G04-M_1PbZy08TyiI3HjCzbPp3Y.crl (hash: cE46OcF8YFN20SnImtDn1kizBzWx/PFsbkF0VxrGqKc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 03:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d6:e4:f3:5f:a8:fa:b9:64:b4:b2:f8:bc:6b:c8:ab:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
        Validity
            Not Before: Jun  2 03:01:19 2024 GMT
            Not After : Jun  3 03:01:19 2024 GMT
        Subject: CN=97b26cc4b071cf3d7bbe7b0cf4556700747d54a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f1:8f:89:7e:a8:f4:e8:90:13:d0:8f:25:ce:
                    61:ee:58:5b:e2:11:28:15:ca:6c:e0:5e:10:d4:a8:
                    c8:32:76:49:1a:5c:08:8a:d4:a7:28:da:66:f2:fe:
                    37:44:a3:ff:ac:0b:40:7e:cf:95:ba:bd:4c:eb:77:
                    a2:cd:10:6c:d0:cc:81:c1:83:cd:b2:fc:a2:31:31:
                    28:75:bc:4a:21:4f:05:6e:da:20:2b:53:67:f1:cf:
                    73:19:75:37:08:e8:29:a9:e2:16:0c:93:e2:34:d6:
                    18:55:26:6a:5f:a7:0e:07:af:df:b4:80:b3:10:f1:
                    2c:6b:ec:77:bf:4f:74:55:18:e5:dd:ba:db:f0:42:
                    37:5b:e0:2a:d7:7c:8c:c2:e6:d1:d6:82:0b:18:8c:
                    27:e3:78:34:95:a2:cb:f4:2c:09:7d:80:40:d8:d0:
                    c7:85:f6:83:4f:d7:97:d4:2f:3c:33:3f:3f:f8:b2:
                    95:44:63:9d:fb:bd:44:a6:c0:b2:4c:34:b8:10:24:
                    2a:52:82:42:63:a9:f0:4a:a6:ba:f9:b7:2c:16:e4:
                    19:71:cd:ad:72:fd:b2:e1:19:f3:c8:4e:49:95:cc:
                    ec:27:c5:15:14:4c:44:5e:32:b8:38:3c:7e:37:0f:
                    36:e9:15:b9:02:db:0d:3a:24:d4:05:b9:aa:37:73:
                    f2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B2:6C:C4:B0:71:CF:3D:7B:BE:7B:0C:F4:55:67:00:74:7D:54:A1
            X509v3 Authority Key Identifier:
                keyid:1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ef:72:1c:53:43:ce:55:7f:52:34:60:8f:05:c0:a6:73:32:
         73:24:1b:ec:70:31:48:03:8b:be:a7:52:10:cf:55:21:db:a1:
         f3:2d:26:99:5f:1f:36:f3:f9:bc:b4:6a:4c:50:5d:99:90:d3:
         7e:c6:1a:1c:1d:f4:28:e5:48:21:02:7c:ed:08:fd:f5:3c:d8:
         3c:3a:94:fc:e0:05:73:9c:b0:56:2f:a1:b5:80:86:d0:32:4e:
         9f:23:c5:99:3f:df:86:bc:1a:0c:81:c0:ff:df:64:56:e7:c4:
         ed:43:84:1d:2b:35:b9:2d:a9:ef:a3:f0:5a:2e:87:ca:94:c0:
         5b:7d:29:67:b0:6f:27:8f:7d:2c:eb:13:6d:43:34:9e:a8:6d:
         bd:ba:28:60:9b:0c:9e:48:9f:a7:09:8b:fe:85:8a:17:53:55:
         cc:13:f1:4d:3c:be:b0:e6:b2:5e:19:d4:f2:2c:f8:1d:8f:72:
         f0:10:d1:03:79:6a:d0:05:92:97:be:2c:94:fa:9c:09:0c:91:
         5a:ea:0b:61:88:11:1f:09:4d:dd:8c:a8:3e:89:35:41:9c:f8:
         27:1b:04:e2:4f:88:98:6c:43:46:34:ce:5d:cd:38:3d:ad:e3:
         f4:08:cf:eb:cc:56:d0:01:c7:47:d7:9d:1c:b0:3c:d3:7a:d4:
         33:c5:ba:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 05:12:55 2024 by rpki-client on console-fra.rpki-client.org