Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
File:                     GlBzFFuSbpppBeupGOIetM8crhA.mft (raw, json)
Hash identifier:          MVpwsObp2bm8so/IhHiv1M05+MriUV/WtLU7NS2LjlM=
Subject key identifier:   0E:01:CB:6F:23:3A:B6:CB:CB:2A:48:50:22:FF:F6:8F:3B:6D:38:75
Authority key identifier: 1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
Certificate issuer:       /CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Certificate serial:       018F2012E3D265ABAA865216C7E70FBAF6E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
Manifest number:          1141
Signing time:             Sat 27 Apr 2024 15:00:59 +0000
Manifest this update:     Sat 27 Apr 2024 15:00:59 +0000
Manifest next update:     Sun 28 Apr 2024 15:00:59 +0000
Files and hashes:         1: GlBzFFuSbpppBeupGOIetM8crhA.crl (hash: 0osWG5okDWSocwXbAuvdDCSQtZJSvu3UfgwRjPh/kA0=)
                          2: Ndu8ER6kYPJU5KpyeeZrw9JaQdo.roa (hash: xcgBL36CoZfay7uGkptCFVgP6/NpUU31qgNP5IYSAWM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:12:e3:d2:65:ab:aa:86:52:16:c7:e7:0f:ba:f6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
        Validity
            Not Before: Apr 27 15:00:59 2024 GMT
            Not After : Apr 28 15:00:59 2024 GMT
        Subject: CN=0e01cb6f233ab6cbcb2a485022fff68f3b6d3875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:14:54:71:f3:d4:9e:4a:c7:c7:d3:92:dd:4a:
                    7b:12:c6:1b:3a:b0:e8:c6:95:1a:ff:5c:eb:1a:b6:
                    05:92:4d:ab:ce:0c:e5:57:bb:4a:6a:62:e6:ce:25:
                    00:2d:eb:e1:1b:5c:8c:55:46:67:cd:55:75:8e:25:
                    27:57:00:c8:5e:05:66:63:cf:d3:3d:a7:1a:33:e9:
                    81:09:f7:3d:27:83:d5:b7:db:0c:5f:82:91:c2:e3:
                    f3:83:55:8f:04:3f:9f:be:d8:f1:f6:ae:19:ad:92:
                    d1:43:bc:20:d4:36:7f:22:cc:0c:bc:f3:c7:63:7d:
                    ba:02:a7:91:34:19:ad:49:76:18:0d:fd:23:34:57:
                    93:31:f0:a7:f4:81:2e:6f:2b:98:f6:b8:43:82:98:
                    20:37:68:48:80:77:5d:bf:e4:de:6b:b5:76:3c:60:
                    33:fb:ae:7f:14:d9:f5:0e:17:2d:2c:b5:8b:db:eb:
                    ba:c2:3f:34:9f:6e:8e:79:46:33:ad:ae:f4:a0:7f:
                    a4:8e:3f:a1:22:59:b0:02:48:c5:3e:6d:a7:a2:17:
                    2b:e7:48:79:b2:8b:3e:5c:41:de:bc:79:8c:6d:ee:
                    14:94:36:23:a5:ce:36:d5:a3:3f:93:de:d7:7d:95:
                    8a:8a:98:88:ad:8d:ba:43:66:a1:02:e2:32:d0:3b:
                    ba:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:01:CB:6F:23:3A:B6:CB:CB:2A:48:50:22:FF:F6:8F:3B:6D:38:75
            X509v3 Authority Key Identifier:
                keyid:1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c1:44:1d:ff:8f:c2:8b:9f:ae:be:3d:67:4b:87:05:d5:e8:
         74:89:8f:8a:92:84:79:1e:89:e0:77:f1:76:99:aa:6c:12:8c:
         51:c3:43:e3:17:7d:aa:15:ce:5a:23:dd:8a:d1:60:97:2c:0f:
         d9:e1:79:10:02:09:c0:90:c8:0a:d1:f2:55:16:f5:10:cf:3e:
         59:f1:ff:6f:ab:ff:51:a0:a5:ae:08:b3:0f:ac:a7:c8:93:37:
         84:de:23:e3:96:9b:db:42:e1:1a:25:5b:82:16:0b:ad:44:72:
         99:ed:19:07:26:59:fa:44:93:19:bb:de:7c:33:17:c8:c7:34:
         e4:1e:89:48:4e:2e:7e:1b:c7:88:87:55:f2:0b:fe:d8:6c:09:
         5d:d4:8c:04:69:5d:da:d0:a5:d0:68:17:c6:17:af:f0:ac:e9:
         9c:c3:bb:fb:b7:07:ac:a9:ac:ab:de:30:d7:a3:ce:fb:4a:2a:
         68:81:11:8b:4a:fc:6c:91:b2:c6:2b:8b:12:7e:d8:c9:34:69:
         5c:68:c0:c2:67:0e:f6:12:34:7b:f0:97:a0:f0:66:94:59:f2:
         28:9b:5b:2e:c7:36:60:35:78:e7:82:8d:f1:6a:3c:69:d9:40:
         7e:f7:4c:7a:14:93:82:84:c9:14:71:4d:73:ca:28:6f:04:59:
         5c:e8:f6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:18:17 2024 by rpki-client on console-ams.rpki-client.org