Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
File:                     GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft (raw, json)
Hash identifier:          i5L7KPSKGZA89fpTXS0XuHadALwSslmN30KSDP7YyKg=
Subject key identifier:   20:5E:68:D9:20:A3:3D:96:55:BF:E3:5D:4B:8F:A1:D1:82:E4:F5:B3
Authority key identifier: 19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
Certificate issuer:       /CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Certificate serial:       018F4A8F77C8E179C7C0CF17879BA6A1DF2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
Manifest number:          0FF8
Signing time:             Sun 05 May 2024 21:01:06 +0000
Manifest this update:     Sun 05 May 2024 21:01:06 +0000
Manifest next update:     Mon 06 May 2024 21:01:06 +0000
Files and hashes:         1: GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl (hash: hQAb+GQhXDOG9JfpkXs+LZ2F9RtK3FrhgGU4wNaOvAU=)
                          2: fQVEtKDzussz1PRDw8t4hQlQL3E.roa (hash: 4pW0vjjiFOuF9QS+P79WQbJ3SbBvyVwpixLrgw2HXuY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:8f:77:c8:e1:79:c7:c0:cf:17:87:9b:a6:a1:df:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
        Validity
            Not Before: May  5 21:01:06 2024 GMT
            Not After : May  6 21:01:06 2024 GMT
        Subject: CN=205e68d920a33d9655bfe35d4b8fa1d182e4f5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:83:3d:ae:83:4c:93:27:17:92:69:a8:fd:
                    78:ff:d3:e6:b1:20:ee:22:1c:fb:24:64:47:f0:9c:
                    d7:aa:bb:a0:54:4c:a3:33:de:1b:b4:be:47:85:bc:
                    a6:e2:4d:87:cb:b6:30:f1:a9:41:7b:f6:2f:83:a9:
                    50:c1:84:d1:c4:db:7f:f6:f0:2e:fc:82:87:4e:fd:
                    09:17:56:81:79:c3:84:dc:9d:ca:bf:f7:80:48:cd:
                    d3:64:88:ad:21:64:09:24:67:d8:5f:6a:14:63:b6:
                    da:c5:42:75:e7:b3:13:ef:0e:25:92:3e:4a:ff:cf:
                    fb:57:1f:ac:35:8c:d3:81:18:4c:d6:eb:a5:3e:22:
                    5b:3a:6e:06:5a:42:e2:9a:87:25:0f:75:2b:ff:77:
                    1d:c2:1b:9a:6f:fa:1e:25:db:fb:50:cc:7e:96:0d:
                    88:3e:3f:24:39:d8:44:8a:67:2e:d3:c1:db:7f:0f:
                    f1:e4:f8:a6:36:c0:33:92:65:0a:63:01:51:53:8c:
                    3e:12:bd:c3:94:79:f7:c5:96:6f:17:02:10:1e:b4:
                    b8:91:05:7b:4f:f1:8a:1b:65:66:74:61:84:a9:27:
                    9b:f3:e7:55:4a:d7:b7:8c:84:4b:77:89:02:d9:48:
                    d4:8d:89:13:f6:b9:ba:5a:d6:d8:5f:84:18:24:24:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5E:68:D9:20:A3:3D:96:55:BF:E3:5D:4B:8F:A1:D1:82:E4:F5:B3
            X509v3 Authority Key Identifier:
                keyid:19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:79:a0:99:6d:5f:bb:d9:12:44:4e:be:fa:28:be:d7:02:e3:
         d1:81:37:fc:52:4f:46:5e:9c:8f:a5:37:54:32:6b:6b:2a:dc:
         e1:6d:0b:69:ec:7c:e2:13:2c:d2:d0:55:8d:22:9e:a3:a1:f0:
         8f:8b:2e:9b:09:93:a2:ca:a6:2c:ca:e2:1d:a8:b5:a1:00:07:
         59:4d:2c:23:7c:d5:49:45:e1:e8:fa:21:ef:e9:c3:c7:96:69:
         8b:4c:a9:8c:c8:de:75:39:15:84:43:f1:39:85:8d:48:9c:96:
         6e:a0:ac:1d:30:02:4d:0a:c5:d0:83:f5:b8:3a:39:bc:7d:81:
         95:2f:69:9f:ce:96:10:ff:09:33:66:56:83:97:8b:59:2e:1d:
         ae:61:cd:f4:05:24:8f:be:86:a3:0d:19:4f:b6:ce:28:2e:2e:
         a5:dc:c4:bf:d3:6f:9c:df:f9:15:f5:36:07:a9:ae:5f:72:1e:
         60:ee:4a:48:5e:94:01:c6:cc:f8:89:06:83:13:2c:5e:b7:f4:
         68:5a:7e:06:9d:83:c7:b8:50:c6:5e:0c:86:df:dc:40:2f:fa:
         8a:f5:1a:82:5c:54:77:83:fc:e3:6d:9b:31:8c:4d:58:65:b6:
         57:69:88:34:db:aa:02:39:9d:5a:48:52:a9:71:d8:a7:76:35:
         5a:d0:2d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:09:25 2024 by rpki-client on console-fra.rpki-client.org