Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
File:                     GBcXXqrhCxakFTtwpc_XaMe1GZA.mft (raw, json)
Hash identifier:          aNWpgsrGQf8iklAsOZqk3zzzzRaLGVAxdKrEybEF/ts=
Subject key identifier:   84:C3:3E:82:73:F9:E3:C0:73:21:17:C0:56:B7:0C:19:EC:20:95:4F
Authority key identifier: 18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90
Certificate issuer:       /CN=1817175eaae10b16a4153b70a5cfd768c7b51990
Certificate serial:       018F43B2D408E1382C695EDD59622772A7DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
Manifest number:          0D84
Signing time:             Sat 04 May 2024 13:02:24 +0000
Manifest this update:     Sat 04 May 2024 13:02:24 +0000
Manifest next update:     Sun 05 May 2024 13:02:24 +0000
Files and hashes:         1: GBcXXqrhCxakFTtwpc_XaMe1GZA.crl (hash: qU/qNz9nOPTerXWYAX9FM0JptM1TDSeGddETAMI9Vqc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b2:d4:08:e1:38:2c:69:5e:dd:59:62:27:72:a7:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1817175eaae10b16a4153b70a5cfd768c7b51990
        Validity
            Not Before: May  4 13:02:24 2024 GMT
            Not After : May  5 13:02:24 2024 GMT
        Subject: CN=84c33e8273f9e3c0732117c056b70c19ec20954f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:22:1a:1e:45:9f:de:40:02:4b:2f:d2:4d:02:
                    21:d3:0e:b4:81:cc:d6:23:6d:63:16:20:a4:24:e9:
                    33:49:ee:a9:e6:d0:68:6d:31:60:96:30:b4:41:c7:
                    19:06:a6:08:5c:8e:78:14:50:71:e2:c6:80:e7:96:
                    21:e7:10:6f:70:ba:5a:af:38:cb:21:1d:3e:eb:69:
                    1d:bb:72:85:be:07:05:81:86:ae:5b:14:d2:0d:b0:
                    f4:01:f6:92:7e:f1:c7:f7:09:8e:76:2e:d5:1d:7b:
                    6a:29:51:c1:d8:b9:a3:15:7f:e8:cf:5d:e8:83:f7:
                    99:6c:61:db:9e:06:65:d7:c1:f1:05:af:92:5e:a1:
                    cc:51:6e:2f:0d:27:4e:b0:d3:7a:4a:23:a0:84:3e:
                    44:57:9f:e3:9b:e0:a4:f6:13:a1:2f:5f:79:c2:bc:
                    b2:4d:83:cd:34:90:9f:3f:d4:59:cd:75:dd:1e:80:
                    66:12:95:25:39:49:6e:23:ba:80:b5:cc:11:64:98:
                    9f:6b:33:fb:e4:ed:af:ed:97:ab:b3:88:46:4b:74:
                    88:5f:b0:74:ab:f1:d3:27:c3:70:3e:b9:6a:c5:8a:
                    9e:e5:bb:48:c1:71:51:69:cd:e3:ac:c6:b3:67:dc:
                    9b:4e:59:ff:08:36:ff:d3:f5:47:9e:b0:45:d5:a9:
                    c4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C3:3E:82:73:F9:E3:C0:73:21:17:C0:56:B7:0C:19:EC:20:95:4F
            X509v3 Authority Key Identifier:
                keyid:18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:31:e6:40:f5:f8:d6:ef:1c:bf:1a:3e:17:90:2a:b7:f9:49:
         e8:73:36:b9:9c:8b:60:00:f4:7f:37:7c:34:b7:8f:24:08:83:
         ae:b1:a4:24:15:91:1e:b6:b5:96:ec:f8:b0:07:cc:51:39:89:
         ba:c0:ef:fc:fa:b9:f9:b1:70:6b:5d:9e:2e:17:55:a5:15:84:
         3f:ae:0e:00:7a:8c:74:59:9f:29:ea:6c:c6:91:05:6b:96:e4:
         16:86:24:05:2a:6b:75:a8:4a:ec:c0:0a:be:b4:75:b0:f9:fe:
         1f:48:8c:78:e4:a3:b5:85:8c:bd:22:dc:bb:60:da:b8:6f:a7:
         8d:d3:d9:be:51:e1:80:63:d5:f1:34:7f:0b:a2:3a:07:eb:d7:
         8d:c8:69:e1:ba:a9:7d:25:a9:b0:60:c3:e1:af:17:89:63:6d:
         7e:7b:01:a8:09:20:42:e2:2e:60:18:a8:0c:9a:ad:6f:b7:4d:
         18:fe:c9:7e:cc:34:7d:0f:1d:a3:ec:a2:d4:72:93:85:80:76:
         b9:bc:dc:ca:7b:87:e8:ae:b5:50:51:b6:92:08:c9:fc:84:14:
         b3:37:56:c7:a3:63:b1:51:29:7c:27:2a:66:47:18:e5:d8:11:
         21:79:eb:3d:7f:cb:a2:95:62:4c:2f:ba:42:e2:33:2a:f7:51:
         24:4d:fc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 21:56:55 2024 by rpki-client on console-fra.rpki-client.org