Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
File:                     GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft (raw, json)
Hash identifier:          +iZtAR4YvjAigs52b5eiIUwW7qj8oFnEg7qgYQ2ub0I=
Subject key identifier:   44:6B:13:41:C5:FB:3D:80:39:5C:3F:DB:46:B8:20:B8:D1:C9:CF:70
Authority key identifier: 19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
Certificate issuer:       /CN=192fc85b01f21a0d685c03001df47ac460937bf1
Certificate serial:       018F3BFADABE0020FD15E881DB56C4470A99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
Manifest number:          0A53
Signing time:             Fri 03 May 2024 01:04:06 +0000
Manifest this update:     Fri 03 May 2024 01:04:06 +0000
Manifest next update:     Sat 04 May 2024 01:04:06 +0000
Files and hashes:         1: GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl (hash: U0VfBDsvt//zjvuoAe7hQhV+rIPIxjWbm3gh8UguZY0=)
                          2: Iapo1sYws9xLqN2XQEc3rQAkpIc.roa (hash: S7/ZN5hIHpyL45/AQUxf0+LWc4UGreVTCdNfqS0+UJs=)
                          3: uyErzlODFqsgUb7YdzdD4VHRiQA.roa (hash: Ae+SPZ8rBaXaMuRG+myVDkh3SUTMrZ6XX/cpdkFlQZs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:04:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fa:da:be:00:20:fd:15:e8:81:db:56:c4:47:0a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192fc85b01f21a0d685c03001df47ac460937bf1
        Validity
            Not Before: May  3 01:04:06 2024 GMT
            Not After : May  4 01:04:06 2024 GMT
        Subject: CN=446b1341c5fb3d80395c3fdb46b820b8d1c9cf70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ef:b6:e5:1b:1b:ea:41:87:01:f5:d4:bf:04:
                    1e:b7:1d:31:53:e7:8d:07:05:f8:ba:5a:d0:23:e6:
                    d6:a2:33:96:a9:77:a7:5e:3e:3e:78:09:a5:69:fa:
                    ff:fe:8e:a1:20:49:c9:25:84:30:37:7f:f6:6c:82:
                    7b:87:f2:6b:90:fb:bd:c2:4a:b7:c3:1c:ac:03:94:
                    30:c6:59:55:eb:20:4a:ee:47:53:94:80:bf:76:e0:
                    e9:f2:48:0d:66:e4:9f:e1:fd:91:f4:f3:ae:9b:1e:
                    d3:d7:7d:ca:35:84:2a:9e:c7:60:6d:64:04:76:de:
                    f2:80:04:2f:da:07:0a:22:14:84:40:65:1b:91:a8:
                    e1:44:39:73:95:31:bc:af:9c:67:39:a4:56:ff:57:
                    dc:ca:5a:f1:16:a1:46:25:bd:47:03:5b:91:a6:c1:
                    2d:db:c8:4f:da:83:bd:b6:20:86:d6:32:75:e1:4e:
                    ec:a7:fc:5f:a4:98:d2:fd:43:7a:7e:f6:90:e2:39:
                    e1:1f:b5:55:54:c8:24:3f:51:64:bc:97:ea:d9:92:
                    12:7c:9e:be:0d:30:88:a7:6e:00:18:bd:a5:de:88:
                    d7:dd:b6:20:10:29:d8:36:ec:19:a0:3d:99:91:66:
                    fd:5b:44:db:11:93:36:1c:72:23:36:9c:1d:08:ad:
                    73:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6B:13:41:C5:FB:3D:80:39:5C:3F:DB:46:B8:20:B8:D1:C9:CF:70
            X509v3 Authority Key Identifier:
                keyid:19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:6d:84:63:4f:72:86:0b:a4:18:f8:e5:f8:b5:af:53:20:b3:
         33:2d:3d:32:47:49:f1:48:7b:1c:d4:19:a8:fb:b4:1d:46:6b:
         19:d4:4e:3a:7f:0a:30:41:f8:dd:72:90:be:50:01:f6:00:ed:
         ef:32:bb:eb:1c:c9:f3:77:d5:44:21:6b:7e:72:e2:65:87:78:
         bc:07:95:ae:c2:1b:de:ca:0b:0f:7c:b6:01:ac:4f:45:c0:91:
         26:66:91:9d:60:0f:13:c4:b6:dc:d8:49:17:63:3b:bd:45:67:
         50:95:bc:cb:89:ff:c8:cf:96:8d:30:db:b7:7f:94:0f:dc:5b:
         e3:36:ac:04:eb:f7:59:58:40:5a:39:ea:fe:46:e8:f4:f2:fd:
         16:c7:36:d8:66:41:41:be:f4:a5:7b:77:ae:4e:b7:ed:5e:1f:
         ad:0f:48:d5:3c:5a:d3:36:e4:4b:e8:a4:a6:d6:fb:57:27:cc:
         26:1b:b5:dc:a2:30:28:b7:a0:12:c6:27:96:88:d6:ce:36:16:
         e3:36:68:77:56:fc:65:e9:93:5d:e8:eb:05:60:7d:3f:a1:61:
         47:c6:36:ae:f8:0f:ae:59:33:14:3b:e6:a0:40:6f:7f:9e:5b:
         a1:c3:d2:bc:56:d6:2e:3d:fc:71:15:a6:6b:c1:e9:11:9d:0f:
         ee:52:90:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:36:09 2024 by rpki-client on console-fra.rpki-client.org