Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.mft
File:                     Ga7XMnKJFnAJuWxA44gK3maACj8.mft (raw, json)
Hash identifier:          +ulxr1UXXfIXnWlDQGLlmOeOhSHbutg5VT14qVeoVNg=
Subject key identifier:   32:3C:0C:29:E2:2B:08:7F:E5:3C:46:BD:DD:9F:60:E4:EF:DA:31:5B
Authority key identifier: 19:AE:D7:32:72:89:16:70:09:B9:6C:40:E3:88:0A:DE:66:80:0A:3F
Certificate issuer:       /CN=19aed7327289167009b96c40e3880ade66800a3f
Certificate serial:       018F38F78BBD64DE599CFBD87D7EFD07E051
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ga7XMnKJFnAJuWxA44gK3maACj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.mft
Manifest number:          07E2
Signing time:             Thu 02 May 2024 11:01:38 +0000
Manifest this update:     Thu 02 May 2024 11:01:38 +0000
Manifest next update:     Fri 03 May 2024 11:01:38 +0000
Files and hashes:         1: Ga7XMnKJFnAJuWxA44gK3maACj8.crl (hash: Pf67BfdUzFTLdBMIucYlOZunrNW2sBye32nLgkQKWBA=)
                          2: o9Wow6kC1jQPUQ45bI2bbxLFrlY.roa (hash: duJSB3HlrJUcSu+CCQ0txCqS1lnv2uSTuUMJl+oCDD4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ga7XMnKJFnAJuWxA44gK3maACj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:f7:8b:bd:64:de:59:9c:fb:d8:7d:7e:fd:07:e0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19aed7327289167009b96c40e3880ade66800a3f
        Validity
            Not Before: May  2 11:01:38 2024 GMT
            Not After : May  3 11:01:38 2024 GMT
        Subject: CN=323c0c29e22b087fe53c46bddd9f60e4efda315b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:50:f9:af:75:54:1f:60:3e:9f:06:9b:6b:bd:
                    94:a7:35:63:de:ce:fe:7b:96:2f:cd:8a:a8:c0:b6:
                    21:d6:e6:16:46:c4:fa:64:d8:11:d9:73:7c:ff:cb:
                    f7:2c:27:0c:34:fa:78:2c:26:8e:ff:9d:24:e7:25:
                    c3:45:61:e5:aa:1c:33:a5:6a:44:b8:6b:81:69:94:
                    6e:ac:8a:b2:e3:52:f2:95:c8:ad:79:c5:54:f9:af:
                    f2:3a:c8:e3:64:c9:db:d6:bd:d7:0f:1e:05:ca:2d:
                    1a:a3:fb:c0:c5:1f:94:8a:2f:6a:61:da:e2:b9:4d:
                    c7:84:8e:14:db:c2:f3:2c:24:fd:40:7d:60:12:ef:
                    5d:96:31:a9:52:6b:6e:f8:c8:47:20:56:7b:f6:02:
                    bf:2b:31:a1:cc:dd:17:37:45:a4:46:80:7d:58:bb:
                    c4:7e:62:d6:e1:9f:24:fb:69:aa:2f:89:f4:63:73:
                    e7:ec:02:78:2c:02:16:9f:ea:3c:74:db:a4:c1:7c:
                    91:84:42:8d:29:7f:a4:e7:0a:5b:c4:53:ac:db:70:
                    4f:41:00:80:e3:2d:d5:0e:a3:c4:95:a9:10:29:47:
                    2e:36:1c:36:65:69:06:11:1d:e9:0a:55:6d:c1:30:
                    c9:fa:2f:d2:3d:5d:d4:44:a6:ae:d7:55:46:9a:a5:
                    8f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3C:0C:29:E2:2B:08:7F:E5:3C:46:BD:DD:9F:60:E4:EF:DA:31:5B
            X509v3 Authority Key Identifier:
                keyid:19:AE:D7:32:72:89:16:70:09:B9:6C:40:E3:88:0A:DE:66:80:0A:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ga7XMnKJFnAJuWxA44gK3maACj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:13:ce:12:9c:77:22:c6:2a:86:ad:2d:5f:5d:61:2a:3a:d1:
         86:82:6a:c6:6c:5f:a7:fa:b4:65:17:05:7b:84:c3:fb:b8:dc:
         8d:a2:7d:e1:6e:c7:7f:26:be:38:a1:bc:fe:47:e8:dd:42:01:
         06:79:41:00:56:9e:6f:86:17:59:b4:7d:16:d3:cb:1a:82:0b:
         3f:53:30:8f:a4:8b:a3:7a:91:09:df:b8:b4:87:e1:07:fe:a8:
         c9:fa:c3:4a:72:e3:06:94:9d:16:5b:7b:8a:3a:e1:a8:ac:0a:
         ad:64:0c:8a:99:ec:bc:64:ec:9e:f8:7e:18:97:19:50:73:ef:
         94:8d:6b:e5:08:da:de:3b:12:0d:b5:57:b9:1e:dc:b7:47:26:
         72:04:82:f9:12:87:c3:c4:b3:f4:46:27:f0:63:d4:13:c6:77:
         19:d2:10:b6:51:b3:f5:0d:1f:7e:5a:ce:72:25:0c:d5:2c:00:
         c1:8d:a4:58:14:ed:46:b9:c7:c3:a5:d8:f5:9f:b6:c9:05:ea:
         a4:8c:92:09:fd:61:5f:94:09:54:62:94:78:e2:5e:bc:f6:df:
         60:63:1c:07:c0:65:38:d2:b1:5b:32:2b:8c:ea:ca:23:d3:59:
         fe:61:fe:e8:3c:46:17:95:4a:f7:e7:6a:7e:b2:85:c2:66:92:
         3a:4f:eb:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8494u9ZN5ZnPvYfX79B+BRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YWVkNzMyNzI4OTE2NzAwOWI5NmM0MGUzODgwYWRlNjY4
MDBhM2YwHhcNMjQwNTAyMTEwMTM4WhcNMjQwNTAzMTEwMTM4WjAzMTEwLwYDVQQD
EygzMjNjMGMyOWUyMmIwODdmZTUzYzQ2YmRkZDlmNjBlNGVmZGEzMTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlD5r3VUH2A+nwaba72UpzVj3s7+
e5YvzYqowLYh1uYWRsT6ZNgR2XN8/8v3LCcMNPp4LCaO/50k5yXDRWHlqhwzpWpE
uGuBaZRurIqy41LylcitecVU+a/yOsjjZMnb1r3XDx4Fyi0ao/vAxR+Uii9qYdri
uU3HhI4U28LzLCT9QH1gEu9dljGpUmtu+MhHIFZ79gK/KzGhzN0XN0WkRoB9WLvE
fmLW4Z8k+2mqL4n0Y3Pn7AJ4LAIWn+o8dNukwXyRhEKNKX+k5wpbxFOs23BPQQCA
4y3VDqPElakQKUcuNhw2ZWkGER3pClVtwTDJ+i/SPV3URKau11VGmqWPpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDI8DCniKwh/5TxGvd2fYOTv2jFbMB8GA1UdIwQY
MBaAFBmu1zJyiRZwCblsQOOICt5mgAo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2E3WE1uS0pGbkFKdVd4QTQ0Z0szbWFBQ2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zNDk2MTYtZTEwZS00MWQ3LTk4OTgt
MDlhZWY4MDQzYjM1LzEvR2E3WE1uS0pGbkFKdVd4QTQ0Z0szbWFBQ2o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8zNDk2MTYtZTEwZS00MWQ3LTk4OTgtMDlhZWY4MDQzYjM1
LzEvR2E3WE1uS0pGbkFKdVd4QTQ0Z0szbWFBQ2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhPOEpx3
IsYqhq0tX11hKjrRhoJqxmxfp/q0ZRcFe4TD+7jcjaJ94W7Hfya+OKG8/kfo3UIB
BnlBAFaeb4YXWbR9FtPLGoILP1Mwj6SLo3qRCd+4tIfhB/6oyfrDSnLjBpSdFlt7
ijrhqKwKrWQMipnsvGTsnvh+GJcZUHPvlI1r5Qja3jsSDbVXuR7ct0cmcgSC+RKH
w8Sz9EYn8GPUE8Z3GdIQtlGz9Q0fflrOciUM1SwAwY2kWBTtRrnHw6XY9Z+2yQXq
pIySCf1hX5QJVGKUeOJevPbfYGMcB8BlONKxWzIrjOrKI9NZ/mH+6DxGF5VK9+dq
frKFwmaSOk/rPw==
-----END CERTIFICATE-----
Generated at Thu May 2 15:21:36 2024 by rpki-client on console-fra.rpki-client.org