Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
File:                     GVD3RTAkOmSxG7IywDjVdOf8TSA.mft (raw, json)
Hash identifier:          Xz4Nzd68iE+MN0W8EJN8edd3VabyT+vcmSEwiNh0KxE=
Subject key identifier:   D6:AA:3E:F6:81:14:36:C8:30:FE:C2:E3:19:AF:83:E0:9B:F1:C5:F1
Authority key identifier: 19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20
Certificate issuer:       /CN=1950f74530243a64b11bb232c038d574e7fc4d20
Certificate serial:       018F4DC776C6A76E755A460A53E8747C8DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
Manifest number:          0441
Signing time:             Mon 06 May 2024 12:01:08 +0000
Manifest this update:     Mon 06 May 2024 12:01:08 +0000
Manifest next update:     Tue 07 May 2024 12:01:08 +0000
Files and hashes:         1: GVD3RTAkOmSxG7IywDjVdOf8TSA.crl (hash: Ii3HfsSxQtwK1eyEEzxYbBln+7F5KuhkXThjpDXS7xw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:c7:76:c6:a7:6e:75:5a:46:0a:53:e8:74:7c:8d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1950f74530243a64b11bb232c038d574e7fc4d20
        Validity
            Not Before: May  6 12:01:08 2024 GMT
            Not After : May  7 12:01:08 2024 GMT
        Subject: CN=d6aa3ef6811436c830fec2e319af83e09bf1c5f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7b:76:1a:b2:d2:55:4a:d0:63:46:7c:3d:42:
                    70:d1:93:6c:50:b4:29:8c:b4:50:76:36:8e:94:16:
                    07:d3:08:6b:31:80:ca:1e:14:c4:da:39:4d:78:b2:
                    6f:fa:5a:c3:64:88:6b:f3:11:df:0b:fd:fe:d3:44:
                    1c:c4:09:22:19:3f:9c:9f:31:99:4b:ae:51:70:9e:
                    ed:37:aa:a7:63:a1:30:a3:39:83:b2:44:2b:9f:e5:
                    b6:55:dd:c6:ee:96:be:bb:a7:37:33:a9:d8:fd:7c:
                    a6:cb:53:f7:a1:64:85:93:30:84:21:b8:29:f6:e6:
                    31:0b:a4:87:f0:5f:4b:4c:b0:5a:d1:97:23:7f:12:
                    41:47:3c:53:d1:16:ed:44:65:26:0b:1e:95:e0:d3:
                    39:41:58:0e:22:ff:8b:69:d7:b9:4b:ea:37:56:4f:
                    6e:82:27:2c:ed:97:d1:61:18:e9:70:f6:6f:49:a5:
                    cd:97:c0:ee:3b:8f:ca:42:dc:0a:e2:c9:60:4a:53:
                    11:d2:8e:3a:50:54:ea:61:5d:e4:50:ed:07:e4:76:
                    28:0f:d3:a7:85:03:c6:09:b2:f2:9e:ae:07:ef:7b:
                    46:5d:4d:f2:3e:e9:b0:34:09:8d:d3:53:f9:23:94:
                    e4:f8:50:3a:f3:6c:b7:21:72:15:11:87:1d:36:32:
                    1b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AA:3E:F6:81:14:36:C8:30:FE:C2:E3:19:AF:83:E0:9B:F1:C5:F1
            X509v3 Authority Key Identifier:
                keyid:19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0b:86:20:0b:50:10:79:4b:d5:9c:02:71:dc:35:46:43:4d:
         83:6f:17:e9:35:1b:d5:21:eb:af:c0:c0:36:d4:57:91:9b:fa:
         12:68:49:2e:2d:28:30:28:b3:41:5a:89:76:28:24:43:26:2e:
         f2:6a:ea:77:0f:bf:62:87:8b:eb:47:ad:fe:32:0c:b6:a5:f4:
         76:21:eb:72:9e:01:ac:46:10:06:37:c3:c4:9f:6c:f4:ee:9f:
         e5:21:e0:5d:75:3f:b2:87:09:55:ac:56:a0:7e:89:14:87:25:
         98:48:19:5e:aa:dd:11:f6:02:2d:2c:51:2c:0b:83:3e:dc:17:
         85:b5:fa:92:e9:cc:15:fd:96:66:4c:01:9a:fe:1e:1d:5f:25:
         a8:d0:4e:a9:f7:03:f6:0e:75:11:2b:2b:22:d3:b6:25:b1:93:
         65:8c:03:ce:2d:61:3a:c8:0a:18:0f:be:ea:90:00:8f:de:1d:
         dc:7b:15:67:26:da:e3:1d:c1:9e:42:86:fb:65:b0:31:0f:b8:
         c0:a0:88:0c:4d:de:be:16:35:cd:36:cc:04:3b:d5:86:89:59:
         e2:3e:4c:ce:5f:5e:e5:da:2e:6b:84:a2:c7:20:e2:69:39:8e:
         45:65:9b:e6:d4:ff:b9:d2:88:9e:aa:48:e1:34:51:52:e1:1b:
         e6:7b:4d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 13:07:44 2024 by rpki-client on console-ams.rpki-client.org