Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
File:                     G02ANz4-NNAKhbhBKNQFOZvPikU.mft (raw, json)
Hash identifier:          ch3uScKOvuU9EjOpeiAgHPO8OXYQVMGdEugDpqtlz/A=
Subject key identifier:   50:2E:F3:8C:C6:2E:97:09:18:AD:42:1A:75:CA:5C:69:F4:F0:9D:6B
Authority key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
Certificate issuer:       /CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Certificate serial:       018F8938E9B07D3D8A17C82E4E0EE1326D69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
Manifest number:          014B
Signing time:             Sat 18 May 2024 01:02:39 +0000
Manifest this update:     Sat 18 May 2024 01:02:39 +0000
Manifest next update:     Sun 19 May 2024 01:02:39 +0000
Files and hashes:         1: G02ANz4-NNAKhbhBKNQFOZvPikU.crl (hash: vl+KbQU8TH+jmzM9bt2H4DXn6EwkU8guecQWbCKIAe4=)
                          2: YcQVJAJ7RQcDxHkFcm0NnsK-zeA.roa (hash: R+Au9rvYtTsYBXdOfFaLDnyD2zSxBaAeIC6V1SToUnE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:e9:b0:7d:3d:8a:17:c8:2e:4e:0e:e1:32:6d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
        Validity
            Not Before: May 18 01:02:39 2024 GMT
            Not After : May 19 01:02:39 2024 GMT
        Subject: CN=502ef38cc62e970918ad421a75ca5c69f4f09d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:25:89:3f:de:37:2c:65:88:95:c3:9c:3a:
                    ff:57:f7:cc:ea:32:88:c7:2f:f0:70:35:d0:9a:4c:
                    c9:70:e9:3b:86:62:8e:18:6f:c2:85:eb:df:11:cf:
                    b3:7c:c6:ab:94:50:f1:84:2d:19:27:3f:f1:0d:64:
                    0a:12:ed:7d:16:56:6d:8b:7d:9b:ec:c9:aa:38:00:
                    68:9b:74:d5:cd:3a:e0:2c:fc:e5:d4:d1:3a:57:99:
                    d6:8c:9e:95:b6:03:a6:8c:f9:fe:61:44:c9:a3:d1:
                    a0:e2:dc:32:e9:44:2b:fa:7b:39:46:71:a3:f6:5b:
                    75:e2:62:54:b5:05:33:28:41:72:43:16:bb:7c:31:
                    96:fe:07:39:82:9a:49:ea:52:66:ce:25:aa:c3:fc:
                    f5:11:2c:69:48:4d:91:b5:1e:31:a2:ec:7e:f1:fe:
                    4d:35:ff:62:1b:2d:cb:15:a8:a9:03:28:99:fb:4e:
                    81:d5:70:c6:9e:22:a1:20:63:a4:14:b2:63:ee:3f:
                    24:49:83:b3:31:ba:d3:fa:ea:a0:a7:a0:39:77:f5:
                    d9:00:78:af:7f:89:f6:ad:e7:c4:1c:94:6c:4f:20:
                    14:c8:7f:71:e0:d3:38:95:dc:dc:bd:10:52:0c:88:
                    ff:82:d6:6d:51:95:cd:8d:9f:32:e2:f6:27:86:06:
                    43:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2E:F3:8C:C6:2E:97:09:18:AD:42:1A:75:CA:5C:69:F4:F0:9D:6B
            X509v3 Authority Key Identifier:
                keyid:1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a1:ad:5e:aa:e8:f3:96:85:94:8b:92:ab:3b:ca:5a:b7:08:
         fc:25:55:37:bb:ba:3d:c7:d4:13:3e:d3:f9:f0:83:ec:ef:76:
         26:36:b8:8a:28:9c:0d:25:47:9a:c7:c9:02:8f:ad:15:68:e7:
         16:2a:98:71:3d:9e:2b:7d:be:00:c1:07:36:1d:c9:86:e7:f5:
         89:7e:8a:da:1e:98:d8:35:59:d4:e4:16:46:9b:42:05:51:9b:
         25:c3:02:74:81:4e:67:35:42:89:c0:88:f9:9f:26:7e:e3:cd:
         f7:70:20:85:84:e0:ef:93:5e:ac:be:5e:c7:c2:d3:21:98:71:
         e9:f5:cb:68:68:39:7f:bf:08:57:87:57:79:30:c7:b7:d5:51:
         76:2c:a6:11:77:bb:1f:ad:91:63:87:8d:93:60:ec:eb:84:88:
         ed:94:0c:63:c6:db:cb:d2:3a:d2:95:16:b5:40:07:ec:57:89:
         8e:0c:e8:31:06:45:98:55:15:71:99:cd:81:5b:be:37:7c:f8:
         8a:5a:03:ce:fa:e6:c2:b0:21:85:bb:ee:c7:86:ab:89:94:6e:
         cc:48:45:21:99:db:df:08:0e:dd:89:f6:37:26:30:dd:c5:3c:
         e0:f4:76:bf:f9:f0:c9:71:cb:ef:07:0b:37:65:4b:d7:09:55:
         63:10:83:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:12:55 2024 by rpki-client on console-ams.rpki-client.org