Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
File:                     GbsyomYvkFwNi_JH7ODbxnmha4Q.mft (raw, json)
Hash identifier:          SG2p8lRURkTEo883rUOTWfCPF8ifTwHthRM0f1pp2gM=
Subject key identifier:   FA:5A:BE:7D:5F:82:D5:DC:34:08:0B:FA:A4:6F:20:9F:2D:F4:D5:E6
Authority key identifier: 19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84
Certificate issuer:       /CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
Certificate serial:       019369DACB5283AA187DE71B7B47203D5AA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
Manifest number:          9B
Signing time:             Tue 26 Nov 2024 19:02:46 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:46 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:46 +0000
Files and hashes:         1: GbsyomYvkFwNi_JH7ODbxnmha4Q.crl (hash: MVM9ibJTrDqmV6GXEA05DFuIwsbclJkded86ECCiXMA=)
                          2: L6Xbhw10dCC_xp2CRjOfRz8trDc.roa (hash: LzFA6Fdwh3OCS+LJH3gCiJqzmNuMCQfNnfG1eXmA3+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:cb:52:83:aa:18:7d:e7:1b:7b:47:20:3d:5a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
        Validity
            Not Before: Nov 26 19:02:46 2024 GMT
            Not After : Nov 27 19:02:46 2024 GMT
        Subject: CN=fa5abe7d5f82d5dc34080bfaa46f209f2df4d5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a0:07:4e:cd:b6:bc:53:e6:d9:04:a5:d4:dc:
                    f4:21:71:db:fe:5f:12:1f:fc:b4:74:c3:ae:b7:12:
                    06:d9:e5:c9:44:f9:ae:8e:8a:df:f9:66:43:0f:b1:
                    c0:a7:c7:05:f6:cc:3d:4b:06:24:77:f1:17:4b:e5:
                    27:76:35:ff:d5:a8:97:b6:46:7b:d6:a0:00:b3:2b:
                    3a:ac:3d:39:e1:4e:ca:41:92:68:20:a8:41:b8:4a:
                    a9:ed:2f:93:65:31:a8:6c:95:19:e2:69:42:81:de:
                    c4:6e:66:47:9c:0b:13:fd:2e:7e:e1:68:00:a7:fc:
                    1c:ff:52:9a:8d:2f:23:7b:82:8e:e5:cb:02:f8:03:
                    82:6b:5c:05:71:c4:6a:e1:4c:47:3d:86:80:00:f0:
                    32:35:61:a2:21:f4:af:30:a3:8d:8f:1c:86:07:ed:
                    de:de:51:f6:d8:2d:42:c3:9c:da:bd:48:0c:61:58:
                    2a:96:7f:2c:74:eb:17:90:d4:eb:da:97:ed:9f:79:
                    fd:63:01:e2:ef:d6:08:f7:96:ee:cd:ba:56:ee:bb:
                    85:2d:da:f4:fe:bb:ef:e6:fa:09:99:9f:e2:4e:52:
                    21:d0:4e:d0:1d:df:88:f3:ed:e3:82:f8:bd:7b:0e:
                    3e:be:43:a7:3e:86:52:bd:99:89:12:a4:b9:ec:d9:
                    93:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5A:BE:7D:5F:82:D5:DC:34:08:0B:FA:A4:6F:20:9F:2D:F4:D5:E6
            X509v3 Authority Key Identifier:
                keyid:19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:af:7d:80:0d:fb:26:a7:5f:44:d0:c6:05:7a:1f:b4:11:f3:
         70:db:b1:ed:17:cd:ca:0d:10:4d:3f:ad:70:0e:7d:e2:4e:8a:
         ab:6e:87:8f:91:c3:ba:99:52:f7:c9:27:de:52:8e:73:12:40:
         d4:22:42:3d:3f:57:00:0c:4b:df:69:f2:a6:af:6f:70:ad:e5:
         30:39:0a:1b:17:45:16:40:7c:e0:6e:4b:94:4a:1d:41:99:a4:
         65:2e:fa:08:79:41:e0:27:4c:d8:7c:87:ea:b5:28:11:29:5b:
         bf:9b:23:0a:68:9e:5e:78:9a:d5:4b:1c:21:e8:b7:e0:85:b9:
         fc:aa:d9:52:24:66:b0:94:f3:0f:f7:8d:8c:ff:74:fb:45:65:
         4c:ac:01:84:f1:df:bf:dc:b6:53:67:e1:94:40:36:82:6d:3e:
         65:79:83:64:6e:de:b4:7a:83:53:68:21:c4:aa:9d:c2:f8:bc:
         06:1f:5c:d8:7a:a8:66:f3:89:ef:e3:f2:8c:56:8e:f2:34:2a:
         96:1c:e2:79:94:02:e9:04:71:5b:e0:d5:03:f1:c9:07:b2:9e:
         5f:e0:d9:29:99:b0:13:63:e0:11:f2:0f:08:bb:de:57:a6:63:
         b7:d8:ad:36:2a:81:e9:92:55:f2:6e:f7:a3:18:6d:46:69:16:
         7f:65:d2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:41:46 2024 by rpki-client on console-fra.rpki-client.org