Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft
File:                     GyN3Poe34e0LVeFQuncWsYJbPiY.mft (raw, json)
Hash identifier:          6WT4KbJduln0ylbV0Ot18yJNze5dmYs42MFjGcwHMyg=
Subject key identifier:   A5:0B:92:A6:2E:DE:CB:81:88:F1:DD:A6:6D:13:DD:0D:23:BB:8E:3F
Authority key identifier: 1B:23:77:3E:87:B7:E1:ED:0B:55:E1:50:BA:77:16:B1:82:5B:3E:26
Certificate issuer:       /CN=1b23773e87b7e1ed0b55e150ba7716b1825b3e26
Certificate serial:       018F45A2387AED2B2F66E06DE20FCA644C72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GyN3Poe34e0LVeFQuncWsYJbPiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft
Manifest number:          0E94
Signing time:             Sat 04 May 2024 22:03:30 +0000
Manifest this update:     Sat 04 May 2024 22:03:30 +0000
Manifest next update:     Sun 05 May 2024 22:03:30 +0000
Files and hashes:         1: GyN3Poe34e0LVeFQuncWsYJbPiY.crl (hash: 7yffm2g0oE/Cbk+fdfaZGD9U7NVrPQ53zsde5CvLBh8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GyN3Poe34e0LVeFQuncWsYJbPiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a2:38:7a:ed:2b:2f:66:e0:6d:e2:0f:ca:64:4c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b23773e87b7e1ed0b55e150ba7716b1825b3e26
        Validity
            Not Before: May  4 22:03:30 2024 GMT
            Not After : May  5 22:03:30 2024 GMT
        Subject: CN=a50b92a62edecb8188f1dda66d13dd0d23bb8e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c9:b9:4f:9a:e8:fe:50:6e:6c:ab:4e:ba:41:
                    07:50:87:7e:91:21:82:cc:ee:43:e1:cd:9b:a7:60:
                    5e:05:04:3d:9c:f2:ca:b2:c5:15:c5:2e:3e:f6:fc:
                    2a:9b:91:72:53:38:d6:c7:e4:b4:da:05:cc:e6:6b:
                    a3:a6:e0:b8:a9:6c:2c:61:5e:bd:21:e1:90:ae:87:
                    3a:fe:83:06:d5:70:76:97:d6:65:5d:cb:45:74:57:
                    d8:b1:0e:53:b8:a7:2d:9b:4a:52:35:57:1d:c5:63:
                    82:ba:e1:06:9b:8e:a6:df:3c:98:18:94:31:cf:7b:
                    d1:15:c1:25:b5:d4:0a:6a:f8:34:39:98:0c:95:d1:
                    ec:03:f1:ee:61:d6:7a:6f:3c:76:69:04:29:67:b6:
                    95:41:64:78:d9:f9:46:26:22:84:b6:0b:ec:d3:a5:
                    5b:65:3b:9f:16:06:5b:59:ed:c0:1e:b7:0c:48:70:
                    26:5d:9a:ea:d4:a5:ec:1d:42:e9:e6:01:e8:29:cf:
                    6a:57:7f:42:f5:b3:29:7c:e4:7a:b5:88:f8:9d:13:
                    fb:18:eb:c1:d4:7b:38:c6:3c:a2:05:63:cc:03:5e:
                    b7:36:26:f5:9a:c0:1d:2c:a2:89:8a:4c:99:c0:54:
                    9b:7f:c9:c9:72:af:e2:25:b0:ba:eb:eb:73:7a:c1:
                    b9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0B:92:A6:2E:DE:CB:81:88:F1:DD:A6:6D:13:DD:0D:23:BB:8E:3F
            X509v3 Authority Key Identifier:
                keyid:1B:23:77:3E:87:B7:E1:ED:0B:55:E1:50:BA:77:16:B1:82:5B:3E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyN3Poe34e0LVeFQuncWsYJbPiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:69:54:e3:65:69:1c:68:f3:d3:21:59:f3:b3:d4:32:93:69:
         10:08:8d:70:52:a7:19:12:d5:b6:cd:e2:f5:10:90:b6:c5:8c:
         a1:f3:f0:c5:1c:f8:49:48:61:a4:4d:4a:d3:d9:dd:18:65:01:
         f8:a3:85:0e:6c:43:33:58:71:33:51:50:a3:15:56:26:2f:42:
         1f:b8:3c:66:a8:a6:8d:a0:f6:59:ad:85:b9:68:49:87:ea:7c:
         f9:b9:24:f6:07:3b:34:e9:41:91:a0:db:19:b2:8a:f5:b2:15:
         ac:36:f4:53:c7:78:44:63:f0:ac:a2:5d:bf:96:85:13:71:ba:
         66:13:a9:39:48:09:ec:ac:dd:d8:7d:9b:17:3f:e7:ed:4b:b8:
         7b:f3:b7:16:72:17:a9:f8:31:78:c1:b3:38:b6:d4:e2:06:e2:
         08:11:75:f7:49:0e:01:dd:a5:5b:5d:13:f5:f6:e3:1a:f5:e8:
         a8:eb:4b:24:12:ad:e1:33:3b:9a:bb:2f:bd:ee:7b:95:ff:72:
         7c:e8:b9:41:bf:0a:61:d1:5e:53:48:92:1c:54:1d:34:2d:13:
         c5:ad:2d:33:bc:e5:56:0e:d0:93:f3:2a:61:f0:26:5f:ba:02:
         9e:8e:6b:82:fa:b7:e2:86:ad:d5:e0:b0:23:ac:c9:e1:a3:a1:
         98:a4:ba:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:22:57 2024 by rpki-client on console-fra.rpki-client.org