Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
File:                     Gk0JI-wQZndgrYguavmhVpnAXvg.mft (raw, json)
Hash identifier:          tfKcPBSkpHDBD4yN4+5D4iGJyMFNYPm2NQalH0KN1bY=
Subject key identifier:   54:8F:88:AB:B5:14:F9:86:E4:32:DF:17:95:48:09:88:2E:92:6D:81
Authority key identifier: 1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
Certificate issuer:       /CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Certificate serial:       019235807EBD8D7CD618C4BFD61C58676C65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
Manifest number:          0B70
Signing time:             Fri 27 Sep 2024 22:01:06 +0000
Manifest this update:     Fri 27 Sep 2024 22:01:06 +0000
Manifest next update:     Sat 28 Sep 2024 22:01:06 +0000
Files and hashes:         1: Gk0JI-wQZndgrYguavmhVpnAXvg.crl (hash: PphhmHBuJFIpDWs9l1zYIMQ2yQYuyukpN1BqlPlfWU4=)
                          2: _zIlXljsi9BxoVmf9WdILAiyTPQ.roa (hash: R34Q3li54s+ayOt5OXpxt9uj8CMaQK3WBNg/JLeSWTE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 19:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:35:80:7e:bd:8d:7c:d6:18:c4:bf:d6:1c:58:67:6c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
        Validity
            Not Before: Sep 27 22:01:06 2024 GMT
            Not After : Sep 28 22:01:06 2024 GMT
        Subject: CN=548f88abb514f986e432df17954809882e926d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:58:fa:b7:53:de:c4:b0:27:c0:b1:13:fe:65:
                    ba:7d:bf:5d:30:2f:61:18:d0:f9:af:e9:30:7c:9d:
                    43:88:89:d2:c1:4a:da:6c:92:9e:0d:eb:0b:66:2e:
                    11:f4:1e:10:3b:d6:8d:41:0a:f1:ac:e6:7a:16:96:
                    ee:b5:a5:00:24:2e:aa:dd:46:f5:75:45:e6:2b:57:
                    d7:af:4f:70:69:50:46:d8:a5:a7:9f:81:56:88:24:
                    9e:a3:bd:9d:16:72:82:65:20:f1:4c:1a:2b:0b:41:
                    da:9f:42:c7:e2:4d:3c:a9:8c:68:13:ce:22:6f:8c:
                    52:16:e6:a9:03:87:9d:b1:e1:55:97:ea:2b:a5:ec:
                    73:d8:d3:30:f6:0c:78:8a:c0:3b:81:8f:1d:10:4c:
                    a1:b5:4a:24:8e:21:60:a7:2f:0f:bd:a4:9d:01:54:
                    c3:df:ef:ca:7f:dd:fe:b0:f4:52:93:a8:13:95:27:
                    ed:1f:66:5f:4c:ca:f7:3a:b9:6f:56:5a:1e:53:0f:
                    ec:f8:27:32:f8:0f:92:4b:5c:5c:ca:a1:38:f6:db:
                    26:bb:76:b9:60:3d:26:fc:84:da:f9:4f:05:47:4d:
                    4a:55:a9:a2:51:24:9e:68:45:c6:de:0e:35:cc:98:
                    d3:53:18:0b:ec:98:45:b4:b9:05:0b:c2:af:fd:24:
                    e7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8F:88:AB:B5:14:F9:86:E4:32:DF:17:95:48:09:88:2E:92:6D:81
            X509v3 Authority Key Identifier:
                keyid:1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:83:80:ee:de:93:e4:c1:e8:10:08:88:74:83:0c:da:b3:26:
         27:93:d1:5a:97:db:be:9b:b7:99:81:58:43:11:31:08:9f:49:
         c6:ad:1a:bf:af:23:36:b7:28:5d:79:a5:a6:e0:5e:53:9f:db:
         50:25:ee:5f:20:b6:c9:e5:a4:cd:7f:ed:1a:97:bc:73:ce:26:
         c1:3d:d2:7f:99:9f:ec:0c:6d:71:0d:43:71:13:15:85:e2:4e:
         c9:58:11:f8:59:74:d4:5d:12:dd:db:8b:65:07:6d:81:88:1a:
         60:63:99:c3:b5:69:ac:7b:60:15:ea:be:73:67:48:2a:b2:ae:
         b9:5c:06:96:f3:24:66:c9:8e:35:0b:ae:51:b7:61:6d:9d:47:
         a6:d4:dd:02:8b:98:e1:84:1f:f3:4d:eb:79:3b:99:1f:55:18:
         64:0a:8d:c8:b0:fe:ce:e2:10:e6:60:ca:e0:23:1f:53:51:5e:
         83:57:99:f6:6b:51:83:9e:2a:81:c1:21:ba:00:9a:b3:83:5e:
         24:c0:d5:4a:6b:e4:31:ba:19:e6:a6:2f:53:c7:e8:b5:39:ed:
         c1:bd:eb:0e:31:88:3f:95:73:db:14:a7:2d:f2:b2:91:1a:97:
         94:68:ed:80:28:2b:6b:e0:53:a1:35:94:63:5c:a8:0f:5d:16:
         1a:d9:0d:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI1gH69jXzWGMS/1hxYZ2xlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNGQwOTIzZWMxMDY2Nzc2MGFkODgyZTZhZjlhMTU2OTlj
MDVlZjgwHhcNMjQwOTI3MjIwMTA2WhcNMjQwOTI4MjIwMTA2WjAzMTEwLwYDVQQD
Eyg1NDhmODhhYmI1MTRmOTg2ZTQzMmRmMTc5NTQ4MDk4ODJlOTI2ZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1j6t1PexLAnwLET/mW6fb9dMC9h
GND5r+kwfJ1DiInSwUrabJKeDesLZi4R9B4QO9aNQQrxrOZ6FpbutaUAJC6q3Ub1
dUXmK1fXr09waVBG2KWnn4FWiCSeo72dFnKCZSDxTBorC0Han0LH4k08qYxoE84i
b4xSFuapA4edseFVl+orpexz2NMw9gx4isA7gY8dEEyhtUokjiFgpy8PvaSdAVTD
3+/Kf93+sPRSk6gTlSftH2ZfTMr3OrlvVloeUw/s+Ccy+A+SS1xcyqE49tsmu3a5
YD0m/ITa+U8FR01KVamiUSSeaEXG3g41zJjTUxgL7JhFtLkFC8Kv/STnvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSPiKu1FPmG5DLfF5VICYgukm2BMB8GA1UdIwQY
MBaAFBpNCSPsEGZ3YK2ILmr5oVaZwF74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2swSkktd1FabmRncllndWF2bWhWcG5BWHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zNTY0ZTctMTFkNC00ZDdhLThiY2Mt
YTk1Mzc2OGZkZTJmLzEvR2swSkktd1FabmRncllndWF2bWhWcG5BWHZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8zNTY0ZTctMTFkNC00ZDdhLThiY2MtYTk1Mzc2OGZkZTJm
LzEvR2swSkktd1FabmRncllndWF2bWhWcG5BWHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoOA7t6T
5MHoEAiIdIMM2rMmJ5PRWpfbvpu3mYFYQxExCJ9Jxq0av68jNrcoXXmlpuBeU5/b
UCXuXyC2yeWkzX/tGpe8c84mwT3Sf5mf7AxtcQ1DcRMVheJOyVgR+Fl01F0S3duL
ZQdtgYgaYGOZw7VprHtgFeq+c2dIKrKuuVwGlvMkZsmONQuuUbdhbZ1HptTdAouY
4YQf803reTuZH1UYZAqNyLD+zuIQ5mDK4CMfU1Feg1eZ9mtRg54qgcEhugCas4Ne
JMDVSmvkMboZ5qYvU8fotTntwb3rDjGIP5Vz2xSnLfKykRqXlGjtgCgra+BToTWU
Y1yoD10WGtkNpw==
-----END CERTIFICATE-----
Generated at Fri Sep 27 23:34:39 2024 by rpki-client on console-fra.rpki-client.org