Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
File:                     GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft (raw, json)
Hash identifier:          8nUzn6Q2q7O36RRrmaFsW7mygMhuH1w3JT4uDDpV5+Q=
Subject key identifier:   AB:08:FC:FA:C3:0C:60:65:36:A7:AD:D3:65:BB:D3:30:21:22:C6:70
Authority key identifier: 19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
Certificate issuer:       /CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
Certificate serial:       018F3AAF1163C36876E7BBDC24B92C2E88BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
Manifest number:          0EBC
Signing time:             Thu 02 May 2024 19:01:42 +0000
Manifest this update:     Thu 02 May 2024 19:01:42 +0000
Manifest next update:     Fri 03 May 2024 19:01:42 +0000
Files and hashes:         1: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl (hash: 6hKERo6eOx443HdatXcOZqqEHp6zqfsgs8/6lghhzz4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:af:11:63:c3:68:76:e7:bb:dc:24:b9:2c:2e:88:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
        Validity
            Not Before: May  2 19:01:42 2024 GMT
            Not After : May  3 19:01:42 2024 GMT
        Subject: CN=ab08fcfac30c606536a7add365bbd3302122c670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:f4:76:93:a9:2d:a7:a2:11:bb:73:2a:fd:
                    bb:3e:74:21:b0:29:69:78:6f:bc:ab:63:ae:79:fa:
                    43:3c:8d:2f:51:fd:d0:0e:cd:a1:54:41:f8:9d:82:
                    f3:ac:4c:7f:58:6d:66:81:86:d9:b1:21:5f:98:05:
                    81:13:58:e5:36:86:39:d8:f1:4c:e2:78:6e:cf:07:
                    0d:bb:75:ce:61:c1:ea:9f:47:1c:82:bd:99:b3:1b:
                    b1:cb:5a:03:a1:7b:5d:02:6d:05:e5:51:56:91:64:
                    e2:86:0a:17:58:37:a0:06:d9:94:b9:b3:69:55:34:
                    e0:e2:c3:92:69:3e:c8:e7:59:a3:9f:a5:81:c1:d9:
                    59:ce:f9:5f:c5:bd:17:99:f3:f3:2d:2e:3b:df:4c:
                    79:21:dc:9f:41:9f:f5:08:e3:d4:d6:56:89:8b:ca:
                    f4:6d:67:4a:73:4f:58:d0:30:d4:71:19:2d:b0:8b:
                    fd:03:8c:17:93:6c:b4:1a:8a:dd:12:7e:2c:6e:e3:
                    e5:14:01:c2:f5:1b:fa:49:4c:cd:de:07:02:d3:f3:
                    19:3b:3d:58:85:46:35:dc:88:55:e3:a2:c1:0f:af:
                    cb:d2:da:50:76:0b:1b:b0:30:df:6a:60:f0:d3:68:
                    2e:cf:6e:d2:39:a1:24:be:11:78:65:54:4c:09:d9:
                    02:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:08:FC:FA:C3:0C:60:65:36:A7:AD:D3:65:BB:D3:30:21:22:C6:70
            X509v3 Authority Key Identifier:
                keyid:19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:14:ab:d8:4a:94:65:a3:05:f9:4f:8e:5d:a5:74:16:86:4e:
         a8:bd:a0:96:dd:f1:9d:ab:ef:d6:1f:fa:27:b4:3d:6b:92:59:
         67:99:ba:47:8f:4a:b4:52:67:e8:a4:18:5d:21:bc:8d:63:a9:
         0a:f3:77:a6:6d:ee:97:b8:1a:ce:14:6e:2a:29:95:df:e3:ea:
         36:e6:a6:fe:a0:d9:34:92:4a:8d:1c:37:4b:79:ae:90:5e:78:
         81:fe:6c:c6:dd:1c:7a:6a:df:61:91:ef:25:40:b9:50:2d:85:
         4f:7b:0b:7b:38:55:f4:0b:a5:38:13:0a:df:0b:37:95:af:df:
         3c:3e:6e:a5:89:04:9f:89:4a:76:e9:e1:c2:4a:0f:f2:76:6a:
         8b:87:72:b2:79:00:ea:28:5c:0a:c1:1c:82:e2:17:53:73:c5:
         d3:79:a8:69:5c:76:97:da:b2:b0:d4:ac:a9:56:6c:d1:f3:6d:
         08:a8:02:21:f4:18:23:79:8a:23:ab:a7:5c:6c:59:d5:02:e5:
         fb:fc:7a:33:6d:73:de:98:0d:2f:13:6e:51:18:75:84:e1:94:
         a8:b1:36:d8:22:0f:13:04:dc:7e:a9:13:75:d2:19:c9:37:45:
         a8:b6:15:d2:f5:ce:51:69:78:5f:9c:0e:c4:87:0f:6d:1e:6c:
         d6:e4:b5:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY86rxFjw2h257vcJLksLoi9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NTA0M2E1NGU2MjMzZDIyZTU2ZGI3NGM5Zjc4ZTJkNmQx
Yzk3OTQwHhcNMjQwNTAyMTkwMTQyWhcNMjQwNTAzMTkwMTQyWjAzMTEwLwYDVQQD
EyhhYjA4ZmNmYWMzMGM2MDY1MzZhN2FkZDM2NWJiZDMzMDIxMjJjNjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxj0dpOpLaeiEbtzKv27PnQhsClp
eG+8q2OuefpDPI0vUf3QDs2hVEH4nYLzrEx/WG1mgYbZsSFfmAWBE1jlNoY52PFM
4nhuzwcNu3XOYcHqn0ccgr2Zsxuxy1oDoXtdAm0F5VFWkWTihgoXWDegBtmUubNp
VTTg4sOSaT7I51mjn6WBwdlZzvlfxb0XmfPzLS4730x5IdyfQZ/1COPU1laJi8r0
bWdKc09Y0DDUcRktsIv9A4wXk2y0GordEn4sbuPlFAHC9Rv6SUzN3gcC0/MZOz1Y
hUY13IhV46LBD6/L0tpQdgsbsDDfamDw02guz27SOaEkvhF4ZVRMCdkCeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsI/PrDDGBlNqet02W70zAhIsZwMB8GA1UdIwQY
MBaAFBlQQ6VOYjPSLlbbdMn3ji1tHJeUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1ZCRHBVNWlNOUl1VnR0MHlmZU9MVzBjbDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hNTJhZDMtOTMxMy00YWQwLTkyNTkt
M2I1MjdjYjk4Njg1LzEvR1ZCRHBVNWlNOUl1VnR0MHlmZU9MVzBjbDVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hNTJhZDMtOTMxMy00YWQwLTkyNTktM2I1MjdjYjk4Njg1
LzEvR1ZCRHBVNWlNOUl1VnR0MHlmZU9MVzBjbDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBSr2EqU
ZaMF+U+OXaV0FoZOqL2glt3xnavv1h/6J7Q9a5JZZ5m6R49KtFJn6KQYXSG8jWOp
CvN3pm3ul7gazhRuKimV3+PqNuam/qDZNJJKjRw3S3mukF54gf5sxt0cemrfYZHv
JUC5UC2FT3sLezhV9AulOBMK3ws3la/fPD5upYkEn4lKdunhwkoP8nZqi4dysnkA
6ihcCsEcguIXU3PF03moaVx2l9qysNSsqVZs0fNtCKgCIfQYI3mKI6unXGxZ1QLl
+/x6M21z3pgNLxNuURh1hOGUqLE22CIPEwTcfqkTddIZyTdFqLYV0vXOUWl4X5wO
xIcPbR5s1uS1+g==
-----END CERTIFICATE-----
Generated at Fri May 3 02:22:18 2024 by rpki-client on console-fra.rpki-client.org