Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
File:                     GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json)
Hash identifier:          4ZSvmZxfKAxagzJ2Z+lb/YlBskFf4RbC7Nvy5CQrb2I=
Subject key identifier:   50:04:1E:8B:40:D5:95:C8:20:0F:17:D4:1F:8F:D2:24:F6:C5:30:09
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Certificate issuer:       /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial:       01905210407F8054B4132C26D15C57A024D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
Manifest number:          0387
Signing time:             Wed 26 Jun 2024 01:01:54 +0000
Manifest this update:     Wed 26 Jun 2024 01:01:54 +0000
Manifest next update:     Thu 27 Jun 2024 01:01:54 +0000
Files and hashes:         1: DR6pbK0LP3GZMQHggpj64_3YZF4.roa (hash: I9mZRfUPqd24c83XJ6xnU7jKluT/6/mYiLbm4+dJHD0=)
                          2: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: LZkL9gsKeNeWgX3PWdDI4ZsrNKL6DAIu9v4xOg6Qh3c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:10:40:7f:80:54:b4:13:2c:26:d1:5c:57:a0:24:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
        Validity
            Not Before: Jun 26 01:01:54 2024 GMT
            Not After : Jun 27 01:01:54 2024 GMT
        Subject: CN=50041e8b40d595c8200f17d41f8fd224f6c53009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3a:7e:6b:82:78:f7:af:25:30:8a:81:1e:7e:
                    91:2d:e8:a7:49:8b:02:70:25:08:0e:df:5d:e9:d7:
                    f6:ab:5e:4a:ed:2d:09:24:8c:f1:a6:85:b4:fd:14:
                    b0:f3:48:f6:c4:fa:7f:99:1f:ec:90:a6:80:3e:47:
                    33:75:79:a3:b1:8c:ec:a2:ab:93:7d:28:86:1e:ff:
                    1f:3f:98:b3:69:e0:88:a7:7e:4c:ca:8d:c9:5f:cf:
                    c6:5c:d4:cf:e8:d7:66:33:f2:7a:00:33:f0:0a:4e:
                    ad:cb:01:73:2c:20:ef:41:ef:2a:75:d6:1e:9d:c0:
                    85:1c:49:70:02:ec:df:9f:33:a3:2e:06:7c:a5:d0:
                    e5:6e:3d:93:57:52:8e:76:4b:d1:2a:b5:ad:83:a8:
                    73:62:1a:17:98:2d:c7:b0:1a:05:35:a2:ba:27:ca:
                    dd:aa:77:4f:91:e9:8c:c3:16:01:c4:31:88:99:82:
                    9c:90:fe:30:87:39:83:b2:26:72:0a:31:f4:bb:ef:
                    bf:3f:90:ed:e2:88:7c:97:01:d0:ae:8b:59:0d:b9:
                    9d:8f:95:bd:ce:2e:83:37:af:e3:40:bb:8f:2b:61:
                    a0:f1:10:11:49:82:28:43:f1:2d:be:b9:91:48:66:
                    dc:2f:27:da:a5:0c:63:0e:8d:e7:79:6e:37:c8:16:
                    06:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:04:1E:8B:40:D5:95:C8:20:0F:17:D4:1F:8F:D2:24:F6:C5:30:09
            X509v3 Authority Key Identifier:
                keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:40:22:db:94:86:27:28:e8:b1:57:2c:55:d7:cb:b0:ad:26:
         fe:ec:bd:bc:32:51:27:26:71:22:6e:5f:a2:e5:e2:91:9c:f1:
         31:e0:15:e6:ca:e1:f8:a9:34:16:22:f7:5e:29:b8:83:32:df:
         31:d0:5f:d4:60:8f:48:10:d6:26:8b:33:3b:3b:e2:a7:6d:d8:
         55:d8:c8:45:85:56:75:00:29:9a:b5:a8:59:63:ca:46:9c:36:
         f4:0c:d4:af:9a:fa:82:91:6f:46:8a:75:3f:49:b9:27:d7:ac:
         00:63:8e:cf:b9:b2:42:c5:7a:9f:44:de:09:13:ba:ca:5c:3c:
         80:db:03:01:d3:79:e0:8c:10:f9:68:ca:d9:20:2c:d1:68:47:
         1b:cf:14:ea:7f:02:08:4d:f7:07:56:6a:3b:ad:6b:b1:bd:6c:
         c3:4c:3b:51:99:49:1b:83:87:4c:97:98:69:cb:4f:ec:7b:08:
         19:fb:cf:48:d2:2b:90:66:ad:9c:25:4d:aa:e5:1b:42:f1:0d:
         f9:37:07:2b:10:90:49:ea:5e:a1:0b:cb:17:94:2b:da:f4:c4:
         ad:f0:4a:29:d5:c7:5f:9c:ae:5e:56:d9:e3:c0:51:f6:84:29:
         c4:fb:21:22:0c:a6:45:12:5a:51:0b:56:fa:10:f2:b6:f1:a4:
         38:a1:c7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:48:22 2024 by rpki-client on console-ams.rpki-client.org