Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
File:                     G28HR08S96M-XCG8L_uwdaF70T8.mft (raw, json)
Hash identifier:          vwvFGfppHZWfTarsV6u+Vb4+Kwid7HsPqR8A5m3V9n0=
Subject key identifier:   35:21:73:7B:6D:E8:6E:C8:10:D3:85:8D:81:9A:84:A0:3F:24:E8:E0
Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
Certificate issuer:       /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Certificate serial:       018F8E262EBDA1AD143D275B6289E521541D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
Manifest number:          0DFF
Signing time:             Sun 19 May 2024 00:00:17 +0000
Manifest this update:     Sun 19 May 2024 00:00:17 +0000
Manifest next update:     Mon 20 May 2024 00:00:17 +0000
Files and hashes:         1: G28HR08S96M-XCG8L_uwdaF70T8.crl (hash: DAttyVSOez8avucKHe8gTe5lo3lp8oe6/kIUh3W5Kt4=)
                          2: Tyspww2y1IE3jEFg_fEN6fKHbPg.roa (hash: LVW7XE8N/dJqd69+RWHNrE+j/855svrPMP4rM3pyB/0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8e:26:2e:bd:a1:ad:14:3d:27:5b:62:89:e5:21:54:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
        Validity
            Not Before: May 19 00:00:17 2024 GMT
            Not After : May 20 00:00:17 2024 GMT
        Subject: CN=3521737b6de86ec810d3858d819a84a03f24e8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ea:14:a2:9c:0c:0b:f9:83:cd:e5:65:65:de:
                    c7:61:04:fd:ff:4f:f9:29:7c:08:e6:98:ef:31:8e:
                    8b:c6:91:17:c5:80:c7:5a:9e:99:2c:87:54:4e:73:
                    b8:fa:e3:2a:5f:a9:a3:94:a7:b0:ee:1f:ca:d5:7d:
                    60:87:a7:b0:ed:a8:72:11:28:18:11:c6:ce:e2:ea:
                    44:c8:a1:6e:15:3b:98:b0:47:30:7e:ef:68:96:f2:
                    c0:7c:f1:75:c1:45:4b:3c:59:db:1d:ae:32:96:88:
                    eb:0e:5f:8c:9b:4c:2f:85:28:20:88:a1:8b:c1:f7:
                    e9:48:7a:bf:3d:97:24:92:b9:91:01:0b:2d:9c:91:
                    df:d5:94:0c:da:71:58:16:67:21:d6:5b:f6:7c:0d:
                    bf:20:ee:b6:ce:c8:f8:bc:62:e1:6d:7b:64:6c:19:
                    3b:03:9f:76:b2:1b:63:02:c0:07:7b:ae:e1:63:6d:
                    48:89:d5:1a:fc:03:37:94:8e:69:f2:f3:85:e8:28:
                    98:16:7c:36:16:9c:8b:c9:08:3c:43:28:af:29:2b:
                    01:5b:cd:84:b3:38:4e:1d:e2:dd:b5:31:ef:bd:59:
                    0d:b5:0d:dd:16:39:cb:c5:85:c2:d4:c5:56:84:ac:
                    bb:2d:b8:81:89:4a:26:89:b3:40:bc:98:da:b2:2a:
                    4f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:21:73:7B:6D:E8:6E:C8:10:D3:85:8D:81:9A:84:A0:3F:24:E8:E0
            X509v3 Authority Key Identifier:
                keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8a:c2:c4:54:0c:9e:84:5c:20:ee:b3:dd:c8:c4:6e:f7:bd:
         4b:54:0a:91:60:05:cf:7d:19:6c:97:41:77:7a:2f:36:36:39:
         e5:fc:07:f3:8b:4d:0b:c7:67:4a:bb:1b:86:6a:cf:97:42:8d:
         14:5a:97:4d:be:08:61:d9:06:5a:a5:cb:cf:76:cb:ee:7e:01:
         e2:1f:52:fb:13:f0:d6:fe:ea:34:50:49:9c:85:99:04:09:06:
         39:c8:9a:fa:42:44:33:b4:78:90:73:05:6e:9a:54:96:2c:f2:
         10:4b:15:5a:72:16:ea:1a:96:d7:cf:99:d2:be:1f:0a:91:b8:
         ef:11:21:7d:27:df:5d:03:f0:56:ca:2e:e2:ed:7b:b5:c1:37:
         c6:1d:80:74:46:ec:c9:a1:4b:b0:11:12:6c:d5:36:97:d7:76:
         67:9d:5b:98:5a:f8:77:63:cf:e5:11:33:93:3c:37:69:b3:d6:
         85:f9:4d:79:c2:2e:b8:cd:71:01:ba:3a:29:ac:45:3c:f0:57:
         17:38:26:ff:8f:96:c0:59:26:b9:12:b3:57:7b:4f:e6:3e:b8:
         6e:f2:20:32:6c:02:8e:78:a5:86:53:9d:bd:18:80:57:eb:d7:
         96:6e:ce:62:91:a3:0f:a2:d1:fd:db:fe:60:8c:59:53:4c:82:
         a0:38:f5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:42:12 2024 by rpki-client on console-ams.rpki-client.org