Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04df92-a979-421f-8046-1415c9779e17/1/GE0cAC8GDslW5k5c_k8dwJhYf9Y.mft
File:                     GE0cAC8GDslW5k5c_k8dwJhYf9Y.mft (raw, json)
Hash identifier:          n65RRBAfkk4htUYNRL72zLbZkNwwQCBdlcqGy+wb4k0=
Subject key identifier:   1A:74:DB:03:F9:6D:94:AE:25:F7:56:8E:1B:A4:41:BB:9B:AE:EA:F6
Authority key identifier: 18:4D:1C:00:2F:06:0E:C9:56:E6:4E:5C:FE:4F:1D:C0:98:58:7F:D6
Certificate issuer:       /CN=184d1c002f060ec956e64e5cfe4f1dc098587fd6
Certificate serial:       018F3DE7EDEF33942D6A50BDEC51877CB01A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GE0cAC8GDslW5k5c_k8dwJhYf9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/04df92-a979-421f-8046-1415c9779e17/1/GE0cAC8GDslW5k5c_k8dwJhYf9Y.mft
Manifest number:          08BE
Signing time:             Fri 03 May 2024 10:02:40 +0000
Manifest this update:     Fri 03 May 2024 10:02:40 +0000
Manifest next update:     Sat 04 May 2024 10:02:40 +0000
Files and hashes:         1: GE0cAC8GDslW5k5c_k8dwJhYf9Y.crl (hash: 4TdmusGFfP9S4cXTiB9+r5gBroNZmI+V6T/sDnHDfQ8=)
                          2: kxRECUmp1SPKrXenzK2WAMICDg8.roa (hash: ZJsOauj7MYd2DqkUCO6HOTVfCXIjTbkgQK/HJxoFsMQ=)
                          3: zXMFsEBmwMk1xPawM3nI2kDvaTc.roa (hash: rto2+7A3FmVTYH/U4YIWyweq7N5r+Xq5eTQ6ntX/P2k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/04df92-a979-421f-8046-1415c9779e17/1/GE0cAC8GDslW5k5c_k8dwJhYf9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/04df92-a979-421f-8046-1415c9779e17/1/GE0cAC8GDslW5k5c_k8dwJhYf9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GE0cAC8GDslW5k5c_k8dwJhYf9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e7:ed:ef:33:94:2d:6a:50:bd:ec:51:87:7c:b0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184d1c002f060ec956e64e5cfe4f1dc098587fd6
        Validity
            Not Before: May  3 10:02:40 2024 GMT
            Not After : May  4 10:02:40 2024 GMT
        Subject: CN=1a74db03f96d94ae25f7568e1ba441bb9baeeaf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c7:6d:4b:67:b8:c8:59:1d:70:d4:2a:1d:62:
                    e4:01:8e:91:a8:56:3b:12:e3:ae:5f:2e:ef:4f:41:
                    bd:a9:47:e7:28:e0:25:19:38:dd:9c:30:4e:70:50:
                    93:81:3d:a4:cc:b6:3b:09:7d:4f:2f:0d:24:3a:22:
                    8d:81:8a:ba:a7:fc:85:d1:26:77:73:fc:d0:fa:7a:
                    6a:9e:b1:2c:5c:50:31:03:c9:63:76:85:9c:ed:01:
                    6c:4e:ab:0c:55:35:70:28:d3:4d:a7:6b:88:c7:09:
                    cc:76:0a:c8:87:d0:b4:b3:40:8b:ef:be:1c:1d:ba:
                    c1:64:c0:1d:91:74:e9:ee:ff:8a:39:eb:1f:2d:0a:
                    3a:18:a1:a0:6c:d3:63:00:5b:48:7f:89:e7:c0:82:
                    47:80:b0:77:57:bf:23:e6:ef:c9:2c:d3:1d:b9:81:
                    a9:57:7b:d1:b2:06:eb:54:05:db:fe:a8:c3:72:92:
                    a6:90:fa:ce:18:bd:63:d3:f4:fa:f1:30:63:d7:4d:
                    c2:8c:6b:29:0b:bd:77:4f:28:aa:d9:17:02:d5:54:
                    1e:2f:03:88:de:dc:ba:ae:10:a9:33:86:f7:4c:2b:
                    aa:43:4f:31:bb:24:97:92:d8:77:08:3b:52:85:f8:
                    ef:e9:54:dc:32:e0:a4:78:d4:30:ad:9e:3f:ab:24:
                    2a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:74:DB:03:F9:6D:94:AE:25:F7:56:8E:1B:A4:41:BB:9B:AE:EA:F6
            X509v3 Authority Key Identifier:
                keyid:18:4D:1C:00:2F:06:0E:C9:56:E6:4E:5C:FE:4F:1D:C0:98:58:7F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE0cAC8GDslW5k5c_k8dwJhYf9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04df92-a979-421f-8046-1415c9779e17/1/GE0cAC8GDslW5k5c_k8dwJhYf9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04df92-a979-421f-8046-1415c9779e17/1/GE0cAC8GDslW5k5c_k8dwJhYf9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:f8:b8:59:75:94:e5:45:86:ca:b7:b7:a1:b1:f6:d9:3e:2d:
         38:f1:bd:31:45:51:8a:2e:3f:2d:f8:49:2d:f8:ee:e8:33:e2:
         7e:c6:5f:66:c6:6a:c0:b3:6f:4c:f0:65:d0:05:43:52:55:24:
         ec:05:9e:9f:34:3e:70:b4:0e:5e:ca:2f:69:27:34:1e:3a:d8:
         9c:fb:d9:8f:41:52:f8:59:45:2c:df:b9:3f:58:ca:e8:a4:b6:
         83:1a:0f:3f:f6:dd:b4:7d:3c:ac:ee:a4:63:45:45:ea:19:64:
         4b:22:5e:19:5f:d9:1d:a5:d3:77:d2:b4:a1:25:67:51:b0:07:
         88:08:58:55:81:03:3e:5b:a8:e6:e6:d8:8d:02:b2:41:97:82:
         12:30:e4:fe:f7:d0:cf:6d:6c:05:ad:05:67:5a:29:be:da:d5:
         2f:39:e8:2f:78:a9:92:fa:d0:fe:8d:5d:89:cb:09:87:5c:9b:
         8a:03:6e:83:29:7a:60:4f:c6:75:17:be:98:ea:b2:b6:ba:43:
         84:c6:f8:ed:ef:79:f2:1b:92:08:8d:3d:48:31:08:93:f3:a0:
         60:97:ea:7f:bf:b7:1d:cc:2d:2b:42:40:c8:fd:0d:b3:97:35:
         87:c1:67:c4:13:8c:16:67:f4:af:63:a3:bf:e3:0b:f0:74:e3:
         d6:de:53:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 18:15:51 2024 by rpki-client on console-fra.rpki-client.org