Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File:                     G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier:          2Gr59so6BvMIjeAIkoBAovJH0uGd9mPUB4FRMoWa8WE=
Subject key identifier:   B4:8C:B3:F4:06:9C:57:8E:CD:A2:A9:05:D2:A0:4C:87:CF:80:52:A4
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer:       /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial:       018F418C3CE9B37501EEA5BC5F578E6A20FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number:          04F1
Signing time:             Sat 04 May 2024 03:01:00 +0000
Manifest this update:     Sat 04 May 2024 03:01:00 +0000
Manifest next update:     Sun 05 May 2024 03:01:00 +0000
Files and hashes:         1: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: xT1+Os9tfkUk5LQDJFYjbOt82rOzVhz9ZbP6gWUrEq0=)
                          2: M9J_JYRNSBdvzr2gEYsoH-HlnDk.roa (hash: ln8gdm4IGIv1VR3bBlF2WppfExKn29Y/iJzJ9JvYF4I=)
                          3: gFDwYtNl12zP-JM4U-i-m1jfMSY.roa (hash: FS/Ra1fr6TKk0bh7nkoK4V6bISKqT/ZYhvcJS52rZWs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:8c:3c:e9:b3:75:01:ee:a5:bc:5f:57:8e:6a:20:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
        Validity
            Not Before: May  4 03:01:00 2024 GMT
            Not After : May  5 03:01:00 2024 GMT
        Subject: CN=b48cb3f4069c578ecda2a905d2a04c87cf8052a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:76:79:15:7d:5d:ac:99:9d:5b:d7:8b:ca:52:
                    64:99:24:db:24:29:b8:3e:81:b5:54:d7:98:a9:55:
                    b8:36:d2:61:e7:b3:76:65:2f:4a:4f:80:ba:5e:29:
                    0b:c7:dc:e6:16:d6:60:11:3a:26:3c:b3:6a:23:93:
                    95:8a:46:e2:93:8c:20:d6:76:00:3b:f7:d4:10:01:
                    e9:bc:8d:c8:f4:80:01:fc:8e:a4:d4:b5:85:70:16:
                    f4:4c:7a:7c:e6:c5:ad:a7:4f:8c:93:97:91:6e:09:
                    64:c7:cd:d9:1c:21:35:da:54:a7:ab:3a:ca:f4:c7:
                    94:7c:d1:cd:54:b3:e5:69:e3:24:bd:ad:bb:98:7f:
                    6d:e5:d7:76:3d:52:74:a2:e9:1b:f1:1d:ba:d1:60:
                    9f:48:37:1f:7d:6d:7b:a5:47:56:0b:35:c7:bd:ab:
                    4d:7e:11:54:4d:f4:78:05:39:b6:2e:52:06:52:ec:
                    bb:5f:1e:a3:6a:dc:f6:06:f2:0e:1a:6e:3d:90:48:
                    75:2d:bd:25:bc:59:57:cb:1a:dc:ef:39:d2:a2:64:
                    85:b2:6c:e2:36:10:30:0d:bc:d8:77:5c:30:a0:5e:
                    b3:55:97:9d:cc:04:fc:71:c7:2f:41:fd:f2:92:93:
                    7f:e4:51:62:6c:f5:8b:f2:dd:b0:f5:92:24:2a:03:
                    59:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8C:B3:F4:06:9C:57:8E:CD:A2:A9:05:D2:A0:4C:87:CF:80:52:A4
            X509v3 Authority Key Identifier:
                keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:1e:fd:9b:a6:fe:59:58:60:60:b3:f9:8c:6b:a4:cc:fa:1b:
         e2:3d:0d:22:80:98:7d:29:38:00:8c:e9:7c:72:bc:4a:17:21:
         d9:ed:87:f4:12:af:1f:12:4f:36:26:13:26:c5:e1:b4:56:15:
         50:27:83:3b:e9:ab:24:09:65:b2:6c:9e:39:16:34:6d:7b:59:
         61:0c:f1:b0:6a:88:a6:a9:75:4e:76:5a:ba:a4:db:93:0d:40:
         ec:22:e7:39:96:0d:1c:31:0a:3b:a9:24:f5:ca:cb:8b:9c:54:
         5d:05:84:cf:e1:6f:5a:03:6b:32:58:df:69:56:a7:4d:c7:15:
         4b:26:cd:3d:a2:68:83:7f:92:57:19:cc:30:ca:58:b7:2c:e8:
         d5:f1:fb:cf:b6:a6:10:3c:eb:6c:0d:f0:7d:7b:dc:21:17:e9:
         5f:7c:ee:27:9b:9a:3e:e6:8b:ae:a4:01:68:48:0d:85:9d:0d:
         e2:45:e3:78:1d:19:40:b2:1a:b9:64:09:00:5e:34:41:98:21:
         48:07:6b:7a:89:5e:e6:d9:69:28:02:04:a3:25:2d:63:6f:e2:
         8c:94:ee:1d:ef:ee:c9:e3:fc:81:88:34:20:78:44:b1:9f:f9:
         0e:3e:f8:93:e5:9b:13:9e:cf:8c:e7:8f:be:30:59:f4:c4:45:
         85:5f:b3:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9BjDzps3UB7qW8X1eOaiD6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZjI2ODE3NWM1YTA5YTdhZmQwZDg3ODUxODI0ZTFkYjcz
ZjdlN2IwHhcNMjQwNTA0MDMwMTAwWhcNMjQwNTA1MDMwMTAwWjAzMTEwLwYDVQQD
EyhiNDhjYjNmNDA2OWM1NzhlY2RhMmE5MDVkMmEwNGM4N2NmODA1MmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXZ5FX1drJmdW9eLylJkmSTbJCm4
PoG1VNeYqVW4NtJh57N2ZS9KT4C6XikLx9zmFtZgETomPLNqI5OVikbik4wg1nYA
O/fUEAHpvI3I9IAB/I6k1LWFcBb0THp85sWtp0+Mk5eRbglkx83ZHCE12lSnqzrK
9MeUfNHNVLPlaeMkva27mH9t5dd2PVJ0oukb8R260WCfSDcffW17pUdWCzXHvatN
fhFUTfR4BTm2LlIGUuy7Xx6jatz2BvIOGm49kEh1Lb0lvFlXyxrc7znSomSFsmzi
NhAwDbzYd1wwoF6zVZedzAT8cccvQf3ykpN/5FFibPWL8t2w9ZIkKgNZAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSMs/QGnFeOzaKpBdKgTIfPgFKkMB8GA1UdIwQY
MBaAFBvyaBdcWgmnr9DYeFGCTh23P357MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82NjY1MGEtNTk4YS00Mzg5LTk0MWYt
NTM0YjhjZDY1MmU5LzEvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82NjY1MGEtNTk4YS00Mzg5LTk0MWYtNTM0YjhjZDY1MmU5
LzEvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfh79m6b+
WVhgYLP5jGukzPob4j0NIoCYfSk4AIzpfHK8Shch2e2H9BKvHxJPNiYTJsXhtFYV
UCeDO+mrJAllsmyeORY0bXtZYQzxsGqIpql1TnZauqTbkw1A7CLnOZYNHDEKO6kk
9crLi5xUXQWEz+FvWgNrMljfaVanTccVSybNPaJog3+SVxnMMMpYtyzo1fH7z7am
EDzrbA3wfXvcIRfpX3zuJ5uaPuaLrqQBaEgNhZ0N4kXjeB0ZQLIauWQJAF40QZgh
SAdreole5tlpKAIEoyUtY2/ijJTuHe/uyeP8gYg0IHhEsZ/5Dj74k+WbE57PjOeP
vjBZ9MRFhV+z4A==
-----END CERTIFICATE-----
Generated at Sat May 4 03:49:06 2024 by rpki-client on console-ams.rpki-client.org