Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.mft
File:                     GJabxilVETwNBJme7JG92p0vo6U.mft (raw, json)
Hash identifier:          0fuc6Pm7X6TcO8ocAX5QSni4KT0s6Zay2x2HQtUbB28=
Subject key identifier:   3D:D9:BC:EF:8C:E6:ED:09:D5:0D:CC:79:2F:02:45:C0:EE:1C:24:F5
Authority key identifier: 18:96:9B:C6:29:55:11:3C:0D:04:99:9E:EC:91:BD:DA:9D:2F:A3:A5
Certificate issuer:       /CN=18969bc62955113c0d04999eec91bdda9d2fa3a5
Certificate serial:       018F3D42097A8F0703AA79DB074B10B67484
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJabxilVETwNBJme7JG92p0vo6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.mft
Manifest number:          1152
Signing time:             Fri 03 May 2024 07:01:28 +0000
Manifest this update:     Fri 03 May 2024 07:01:28 +0000
Manifest next update:     Sat 04 May 2024 07:01:28 +0000
Files and hashes:         1: GJabxilVETwNBJme7JG92p0vo6U.crl (hash: T/LX43YZBgtTjYcyzCuVjR6Ese5i7y4boC5F+xQqwlI=)
                          2: vA17c7buLZ33zMI2A_m2TXDGjzk.roa (hash: Xiri/OJDJVZTRsDL+RpWknrIC9tXIN7P98uZjMEWs4w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJabxilVETwNBJme7JG92p0vo6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 07:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:42:09:7a:8f:07:03:aa:79:db:07:4b:10:b6:74:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18969bc62955113c0d04999eec91bdda9d2fa3a5
        Validity
            Not Before: May  3 07:01:28 2024 GMT
            Not After : May  4 07:01:28 2024 GMT
        Subject: CN=3dd9bcef8ce6ed09d50dcc792f0245c0ee1c24f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:66:21:a3:4d:3c:de:e6:c6:36:6d:9c:38:
                    ba:ee:63:4c:58:4d:83:cc:d9:b3:81:e4:de:6e:92:
                    c6:2b:2d:b2:d4:fd:d1:90:fc:d8:90:bf:fc:c2:d1:
                    8c:f8:da:25:55:af:89:d5:6b:42:de:53:89:05:df:
                    de:38:32:b5:6b:83:a0:9f:2d:7f:37:3b:f6:f4:91:
                    32:f6:0d:6f:3f:1f:4a:a1:16:4a:f8:b0:71:7b:f3:
                    0e:d9:88:c3:db:e6:41:db:f4:74:9c:0c:ee:fe:30:
                    93:34:66:7d:ea:af:99:3e:80:a2:47:95:00:be:9d:
                    bb:07:a6:ec:c2:b7:f6:84:55:68:23:d3:84:cb:c3:
                    30:23:f4:39:1c:de:0e:e3:62:6b:31:dc:91:8a:42:
                    5f:bf:1c:98:e0:02:11:e1:be:c3:73:23:0c:b2:1e:
                    c6:1b:86:2d:0d:54:6e:15:66:03:e1:13:f4:db:a9:
                    f6:ad:1a:01:af:0d:cd:d3:f7:11:94:a5:0a:9e:d8:
                    e0:33:b8:3f:11:5d:15:2b:12:bd:55:b5:e7:9d:60:
                    35:20:86:6e:18:73:89:bc:45:fe:ae:b1:ff:d0:81:
                    fc:16:7d:04:ec:1a:ba:e1:29:a1:e3:9b:70:01:a3:
                    d1:10:b2:78:4b:0b:65:f4:34:33:d3:59:59:c5:aa:
                    b3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D9:BC:EF:8C:E6:ED:09:D5:0D:CC:79:2F:02:45:C0:EE:1C:24:F5
            X509v3 Authority Key Identifier:
                keyid:18:96:9B:C6:29:55:11:3C:0D:04:99:9E:EC:91:BD:DA:9D:2F:A3:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJabxilVETwNBJme7JG92p0vo6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:07:77:e9:11:43:34:cc:c4:2f:e3:39:da:01:8d:c8:11:db:
         a4:56:bc:e3:70:e0:13:34:0c:d0:fb:c1:3c:71:c3:de:26:96:
         de:07:82:2a:71:37:f5:9e:97:0b:7b:26:81:84:41:57:df:68:
         62:81:32:c0:6f:5c:28:1f:5a:21:9f:e3:e3:49:eb:2a:fd:f3:
         fe:78:40:09:e7:41:8a:ba:68:1f:f5:11:2d:8d:04:79:d5:3a:
         4b:93:e5:14:88:b7:f5:0e:cc:3a:02:1b:14:46:11:c0:70:b1:
         a9:29:55:fa:f8:d2:77:04:6f:5c:db:ba:53:91:e3:70:2f:8a:
         a7:33:ce:c0:36:13:33:de:4d:ae:f7:18:e5:c7:73:9f:9e:0e:
         f3:b5:d8:c2:ea:30:74:8e:e7:20:34:16:e4:bd:33:ee:71:87:
         1d:e9:88:33:c9:f8:d2:9c:a0:ab:76:3b:8a:70:52:52:c4:67:
         98:8d:df:28:ad:ea:5b:a1:e8:bc:69:2a:f1:30:29:f8:b7:7e:
         13:dd:59:e9:1b:e7:8e:55:57:e3:29:17:7a:37:e7:7b:97:72:
         d4:8b:5c:6c:e2:fd:88:14:8d:3b:7a:80:a8:51:24:f1:53:de:
         e4:80:83:09:04:a2:ea:ad:b0:02:48:a2:e5:02:5f:a5:a2:f3:
         74:a5:ea:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:18:03 2024 by rpki-client on console-ams.rpki-client.org