Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
File:                     gV_CISVyYlbWo189oo91E90xwf4.mft (raw, json)
Hash identifier:          7pSGQrw1BAE3ff4N832WZfEymXOWJbK9Uk8GHBRBO+w=
Subject key identifier:   82:86:2F:06:DD:B9:80:73:6B:D4:6A:32:54:C4:3D:15:69:F4:52:EA
Authority key identifier: 81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE
Certificate issuer:       /CN=815fc22125726256d6a35f3da28f7513dd31c1fe
Certificate serial:       018F874B02773BC85A91BE9B05B41D377581
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
Manifest number:          1108
Signing time:             Fri 17 May 2024 16:03:10 +0000
Manifest this update:     Fri 17 May 2024 16:03:10 +0000
Manifest next update:     Sat 18 May 2024 16:03:10 +0000
Files and hashes:         1: cZI5xlK00Anhl9D-jmOWUEP0xj4.roa (hash: t0sFSdpdAHxrtlSgwAcNpqxxUR6xUgaft2oH2PYds0s=)
                          2: gV_CISVyYlbWo189oo91E90xwf4.crl (hash: n079jBVkmO9Y9ZdV/C8yF3UrOWyJoJj2Lr3OC9bT0Nk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:02:77:3b:c8:5a:91:be:9b:05:b4:1d:37:75:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815fc22125726256d6a35f3da28f7513dd31c1fe
        Validity
            Not Before: May 17 16:03:10 2024 GMT
            Not After : May 18 16:03:10 2024 GMT
        Subject: CN=82862f06ddb980736bd46a3254c43d1569f452ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:70:48:8d:4f:19:60:07:f1:f4:71:07:e6:23:
                    bd:f4:96:e7:67:44:ea:87:a6:dd:a2:1b:a4:c5:f1:
                    2f:60:2c:08:33:9b:b3:c7:6d:6d:d5:7b:61:78:a4:
                    00:4e:69:4c:b0:80:5d:d9:14:4e:0b:b8:fe:00:b9:
                    d3:80:15:85:38:3c:90:27:71:63:ce:16:1c:2b:53:
                    e9:b8:0c:f2:62:59:47:9c:91:87:98:77:e4:2c:76:
                    91:fe:03:01:4c:45:3b:a9:d2:04:d5:29:98:88:71:
                    94:2e:6e:ca:83:ad:a3:97:22:f1:48:0c:d2:bd:5b:
                    c8:57:c4:57:e4:df:7e:d7:39:72:38:0e:be:50:89:
                    60:54:16:b9:da:61:52:a3:5d:70:86:fc:6d:39:27:
                    32:4b:62:14:63:a1:15:f7:52:58:4d:4c:1a:7e:07:
                    cf:38:23:5e:c3:bf:e8:7e:83:f1:96:ef:33:4f:fc:
                    a6:ad:c9:6c:c6:40:a5:0a:9f:36:2e:73:c8:98:12:
                    09:9d:5d:62:80:ca:ce:b1:0e:46:a5:26:a6:12:a8:
                    d4:9c:65:68:82:c2:f6:7e:83:45:e6:1b:83:c2:11:
                    f1:38:b5:c5:cd:99:3f:3c:ff:c9:28:92:3a:11:4a:
                    d5:83:6f:6d:34:21:04:3e:9f:cf:fd:f4:08:70:81:
                    8f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:86:2F:06:DD:B9:80:73:6B:D4:6A:32:54:C4:3D:15:69:F4:52:EA
            X509v3 Authority Key Identifier:
                keyid:81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c2:14:12:19:c9:eb:e2:16:7e:5d:dc:27:a0:3d:42:17:12:
         97:b1:68:0d:44:3b:38:1a:74:e4:48:50:15:be:20:14:ff:03:
         1e:5b:cf:fe:1b:d4:70:76:26:90:68:85:e5:7a:8b:49:2f:b9:
         76:c1:fa:bb:d5:d8:07:2e:29:16:84:e8:eb:43:c4:d1:e5:02:
         d8:99:5d:56:b6:89:b8:7a:a9:14:f7:41:26:18:17:21:8e:5e:
         4a:b8:d5:c1:94:f5:fe:68:6d:26:21:3c:a9:a6:97:72:ef:b4:
         a8:72:71:19:9f:92:34:60:97:74:ee:2a:d2:e8:57:60:78:89:
         35:87:e8:1a:41:b6:04:94:f2:d4:e0:97:7d:de:54:11:79:a7:
         29:2b:3c:16:43:d1:47:c4:14:0e:8b:b3:f6:5e:d6:1e:b0:18:
         6a:a9:c8:5a:1a:a2:78:eb:32:47:ae:0f:f2:fe:c3:11:74:78:
         09:af:14:b3:a4:fe:f0:d2:50:0a:15:be:65:16:08:85:3c:5d:
         a9:ef:50:d5:54:0b:63:b5:46:a3:1a:3c:63:be:f6:85:7a:3b:
         c8:34:3f:da:f5:f4:ec:09:cd:3a:82:14:71:71:00:c7:5d:ad:
         ba:83:0e:b4:fd:70:4a:9f:45:3c:b4:d1:97:d7:a2:e6:11:6b:
         04:03:25:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:33:38 2024 by rpki-client on console-fra.rpki-client.org