Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
File:                     GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft (raw, json)
Hash identifier:          2MMVg1lSPSfC24andNk2UWr2reg4FGEJI4+0OWEFrPA=
Subject key identifier:   E5:69:C7:6A:44:24:2F:FA:03:C6:1A:3A:CB:34:4F:F9:19:5B:E0:47
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Certificate issuer:       /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial:       018F45A282EB594AA0FABC080884FF9DEB39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
Manifest number:          090B
Signing time:             Sat 04 May 2024 22:03:49 +0000
Manifest this update:     Sat 04 May 2024 22:03:49 +0000
Manifest next update:     Sun 05 May 2024 22:03:49 +0000
Files and hashes:         1: FB1kSpEsqenueojYSA6hfV_kN5o.roa (hash: QbjPqlvhFNGii+MNvcX/LOo2lMH8REvBU5pA91JGeNo=)
                          2: GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl (hash: oSYU7Aco+4OC6yfPtdw5cTVnWgpu6PdlB3C1GQwpYPg=)
                          3: fe6Yy9korup9F2kMZiiTL7BvA3M.roa (hash: qqRxkLVN8S1ZpqkTvz7EZDtPY7vfUE+45rJQBLBdb7A=)
                          4: kFSRtmMOtwDfwBC5J8D08nFS8zM.roa (hash: hLpuqDzezNkfZRXiou8HpcUCYeNcwBMGTZWK8AbjUhk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a2:82:eb:59:4a:a0:fa:bc:08:08:84:ff:9d:eb:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
        Validity
            Not Before: May  4 22:03:49 2024 GMT
            Not After : May  5 22:03:49 2024 GMT
        Subject: CN=e569c76a44242ffa03c61a3acb344ff9195be047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:51:44:a4:f3:a5:f0:d7:95:1a:74:10:16:9a:
                    f2:86:3c:37:4b:93:e4:24:50:7e:eb:08:99:dc:32:
                    91:6a:b3:37:68:31:30:be:62:7e:e4:d3:6f:6f:3b:
                    8e:6e:68:20:68:97:8f:df:31:7c:a6:d1:30:6f:be:
                    67:05:0a:30:cd:eb:b0:03:31:40:f3:56:f7:8b:7a:
                    e2:fa:5e:33:73:55:35:7f:6d:37:54:13:d7:a6:99:
                    43:ff:9b:c4:67:31:2a:86:18:b5:96:c1:79:5b:d7:
                    8e:40:83:dc:fb:47:c9:f9:48:76:62:04:9d:66:06:
                    62:69:18:41:43:1e:8f:50:19:56:b7:6b:c0:78:f3:
                    ba:f7:fc:5b:3e:f8:dd:c8:aa:75:41:1f:f9:58:88:
                    c3:cf:e3:e0:8c:f2:55:52:c3:8b:9d:f2:f7:d3:bd:
                    71:19:fe:57:8a:d7:b8:e5:5a:c0:6c:2a:32:c0:5f:
                    65:4f:84:35:66:1c:6c:19:ab:89:1f:3c:92:7b:8f:
                    ee:93:91:61:83:e5:aa:7c:aa:3c:da:a3:ab:e0:a7:
                    16:23:fa:21:9b:7c:68:1a:dd:d1:68:97:ad:89:bc:
                    c1:9e:d3:60:c6:f8:62:7a:0b:a3:ab:bd:dd:e1:da:
                    99:01:a7:43:9c:80:45:dd:86:13:40:2c:9f:9c:5a:
                    0c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:69:C7:6A:44:24:2F:FA:03:C6:1A:3A:CB:34:4F:F9:19:5B:E0:47
            X509v3 Authority Key Identifier:
                keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:92:aa:cd:5b:55:f4:0a:34:47:95:3b:5e:44:f4:26:aa:d2:
         b2:14:80:ec:92:0e:da:e4:e1:63:94:c4:08:77:1e:68:c1:bd:
         89:ee:af:63:d7:c3:5c:3f:31:77:5c:01:91:81:a0:f8:9b:e1:
         19:1e:b0:bc:fb:d8:1a:af:b9:98:34:84:b0:71:ac:cc:e5:ec:
         48:fd:18:5c:8c:01:71:c0:bd:54:d8:f0:6b:28:47:f2:1e:0d:
         3f:d5:e7:6c:9a:ec:18:d1:68:2e:50:56:6b:34:0d:59:29:b4:
         88:0e:6e:de:07:b7:73:92:16:8a:1a:bd:99:00:69:04:9a:82:
         7c:5b:f9:be:64:79:bf:1a:de:c8:00:10:b6:31:fd:a9:7a:fc:
         98:ec:9c:54:8e:78:f3:44:a4:5b:53:65:b6:64:df:b6:54:d5:
         7f:77:5c:de:33:e4:51:50:6e:db:eb:7d:b2:65:e6:a9:54:e8:
         90:f2:70:84:25:e5:11:ab:d0:e0:e7:93:90:2d:3c:dd:8b:a9:
         9f:19:35:5e:a0:24:c0:80:28:41:b6:a7:44:86:6d:50:46:32:
         85:10:b3:11:52:89:0b:7e:ce:90:82:ac:43:e3:41:52:80:39:
         9f:06:70:ee:56:20:44:69:ed:2f:50:08:4b:79:33:16:8a:46:
         2f:cf:14:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:21:28 2024 by rpki-client on console-ams.rpki-client.org