Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
File:                     G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft (raw, json)
Hash identifier:          CBfccz/70doQcQZxMg4S/u5UUKX9XNGvteGrR8rArpM=
Subject key identifier:   87:7E:F3:E8:96:AC:1E:19:A5:48:C5:02:94:64:4C:ED:18:66:DB:97
Authority key identifier: 1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3
Certificate issuer:       /CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
Certificate serial:       018F4B6D2CBA0C3E0AFA1FC10EA2753BA752
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
Manifest number:          061E
Signing time:             Mon 06 May 2024 01:03:17 +0000
Manifest this update:     Mon 06 May 2024 01:03:17 +0000
Manifest next update:     Tue 07 May 2024 01:03:17 +0000
Files and hashes:         1: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl (hash: m9Liq6MIa1TtKaCLSizkIWB/QGdXGC4qHnhdndM0CMc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6d:2c:ba:0c:3e:0a:fa:1f:c1:0e:a2:75:3b:a7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
        Validity
            Not Before: May  6 01:03:17 2024 GMT
            Not After : May  7 01:03:17 2024 GMT
        Subject: CN=877ef3e896ac1e19a548c50294644ced1866db97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:06:31:8e:28:b3:ef:3a:05:da:58:f7:f0:98:
                    40:b7:a5:5c:c4:ff:1a:ce:b1:0f:a3:c0:1a:94:fa:
                    29:b0:5f:61:05:fb:01:18:13:10:67:97:a6:db:dd:
                    19:d4:cf:21:4f:94:61:2e:a1:93:d2:ab:29:e0:f7:
                    f8:f6:32:cf:a0:ae:58:ca:6a:11:0b:32:5e:a7:49:
                    fb:0f:3c:30:b4:94:56:84:ed:ea:5a:4b:9c:06:d8:
                    de:0b:19:fc:f2:bb:97:60:44:83:ae:31:77:23:1a:
                    db:32:52:cd:80:1d:ab:02:ea:fe:b9:f9:3f:6f:b9:
                    ed:05:0c:f9:e7:cf:aa:2c:a7:f8:bd:8b:f1:6d:bd:
                    6f:c1:f4:94:1b:f9:bc:bb:b2:c5:7e:9d:c4:79:ee:
                    bc:c8:1d:c5:c7:47:80:40:50:87:a6:a7:b2:3a:58:
                    d9:83:48:37:20:b9:06:e2:b9:fb:e0:4e:96:92:ec:
                    6f:88:38:ba:7b:c2:45:55:b8:ab:40:14:30:9c:83:
                    33:13:34:3a:f8:76:74:a8:6b:39:e2:04:c2:7b:aa:
                    da:bd:8c:be:40:d6:03:6c:3b:6a:32:84:97:4c:cc:
                    90:be:12:67:48:75:40:4b:f6:a2:f2:ac:98:19:44:
                    ab:ce:ca:6f:7e:63:82:f7:56:32:42:ec:88:b6:d3:
                    73:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7E:F3:E8:96:AC:1E:19:A5:48:C5:02:94:64:4C:ED:18:66:DB:97
            X509v3 Authority Key Identifier:
                keyid:1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:89:65:78:39:fa:da:27:4a:1d:f9:03:cf:15:00:2f:31:cb:
         c0:1d:b4:60:e7:1e:7b:74:af:9d:89:64:46:08:3b:9c:e3:17:
         cf:08:3c:ba:8a:30:8c:ec:c6:ec:ad:0e:bb:27:c1:20:a7:65:
         09:b4:43:fe:17:e6:dc:c1:e6:8f:75:fa:b3:7f:09:38:97:ac:
         cc:5d:02:12:b4:f4:34:32:e5:f7:cb:47:15:1d:21:64:64:58:
         ae:79:27:cb:0d:cd:ee:48:80:34:6a:49:c5:bf:f8:db:56:12:
         af:dd:f3:9e:11:dc:5b:6a:fc:2b:9e:6a:41:82:ac:5d:37:9b:
         8e:fe:c6:19:b4:02:29:ec:2e:a7:12:99:1d:45:02:e1:9d:27:
         bd:e3:78:2a:d3:96:82:ae:dc:1d:32:3e:e1:3c:37:70:6c:95:
         92:ed:dc:2b:fe:44:04:ae:a3:24:27:28:e1:20:18:95:23:48:
         57:8f:68:cb:05:ba:0b:d7:53:d4:ab:57:a3:1d:7a:47:8f:b0:
         43:91:cc:17:32:d6:71:68:02:bc:d9:d2:f2:5e:09:92:ac:8c:
         a5:d9:7d:3f:aa:ef:4e:6b:7f:b6:60:15:e0:52:6d:c1:c3:fc:
         2b:08:89:74:a1:9d:07:c3:5d:22:80:cd:9b:48:0b:f7:a0:a6:
         7d:5d:7d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:41:40 2024 by rpki-client on console-ams.rpki-client.org