Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
File:                     gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft (raw, json)
Hash identifier:          bdS3PHWHOm3bQ3PDOfG+cwrsOuTID93URaHsLiRzNSs=
Subject key identifier:   0A:10:DF:FA:9C:03:A2:DD:44:94:77:16:33:C4:84:F9:F8:83:FA:A5
Authority key identifier: 83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
Certificate issuer:       /CN=83020637e89655e299d91843769254af07714994
Certificate serial:       01936AB4E331AFE7761A7BAFB03D8B0EE85E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
Manifest number:          07E3
Signing time:             Tue 26 Nov 2024 23:00:59 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:59 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:59 +0000
Files and hashes:         1: CDsriLWRoUDvW_6hL3L1H2lTL_I.roa (hash: jMm8TVhZ6r7tITAjvezylNcnO0x38OYOdZOqXPaCL40=)
                          2: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl (hash: nMoqQcqHJR9i8wqFBNVPazdAnTon33VZJrdpB0CNSjw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:e3:31:af:e7:76:1a:7b:af:b0:3d:8b:0e:e8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83020637e89655e299d91843769254af07714994
        Validity
            Not Before: Nov 26 23:00:59 2024 GMT
            Not After : Nov 27 23:00:59 2024 GMT
        Subject: CN=0a10dffa9c03a2dd4494771633c484f9f883faa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:fc:f9:20:b4:e8:e2:11:81:40:3a:cd:a7:
                    15:a7:03:d4:53:42:12:27:76:a1:64:9c:07:67:e8:
                    be:76:be:82:64:cd:70:2f:b8:0a:04:64:1d:0f:d0:
                    14:04:83:b5:8b:2a:df:83:6a:f4:12:b9:94:58:fd:
                    11:d0:dc:c2:d6:18:28:73:1d:fa:4b:f4:74:94:05:
                    7e:35:16:0f:fb:8d:a7:f0:bf:d0:b2:07:a5:16:79:
                    50:2e:91:2a:33:3b:ec:c2:83:94:3a:f0:57:07:12:
                    f1:47:70:47:36:54:72:64:a0:39:89:11:83:3c:bb:
                    6e:61:75:54:b6:eb:7e:f2:58:05:17:5e:c1:f0:db:
                    2d:06:63:d9:16:34:d5:b0:5c:52:f2:81:b5:93:47:
                    07:c6:c5:bc:2f:ee:ed:df:68:e4:8b:b8:68:98:35:
                    2b:5f:b9:58:e4:b9:2d:d3:c9:97:01:ed:ad:a9:11:
                    9e:e5:aa:dc:b2:93:5e:ae:d7:c8:c0:c7:4a:a9:ae:
                    51:d6:11:a5:f6:dc:e9:a2:d8:b8:9f:cc:a3:94:53:
                    68:7a:4d:79:db:82:10:53:52:8e:8d:73:90:09:b6:
                    fe:f5:48:5a:85:4a:b8:f1:2c:a2:0e:2c:ae:90:6a:
                    12:5f:4e:89:79:62:1b:11:ae:55:d9:35:04:ed:19:
                    c2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:10:DF:FA:9C:03:A2:DD:44:94:77:16:33:C4:84:F9:F8:83:FA:A5
            X509v3 Authority Key Identifier:
                keyid:83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:72:30:3d:23:b6:15:a0:d6:c9:a3:55:9c:02:94:79:19:77:
         61:08:64:ec:b8:28:3b:e1:3f:ef:2f:92:46:a6:7e:57:c8:80:
         a4:99:f8:a9:56:54:b7:0b:cd:55:18:07:1d:b8:f1:77:83:ce:
         2d:e1:8d:00:d6:9b:8e:c3:a5:85:d1:a9:e1:c6:a0:73:8f:c1:
         5c:39:9d:54:4f:2e:3c:dd:12:36:c7:c9:56:e5:0d:87:8d:ec:
         4f:27:ae:5f:7d:c6:c9:f8:b0:89:4b:e8:79:61:63:e1:01:65:
         2a:ee:15:8f:87:f2:8c:74:0d:87:3b:48:92:5a:40:59:9f:25:
         4f:d7:f1:12:ff:93:01:df:fd:cf:f9:75:24:1a:44:b6:80:03:
         50:8f:b6:d2:1c:a4:3a:7a:cf:0d:74:10:33:0a:71:d6:ec:a1:
         1b:83:b0:cb:81:06:bb:b1:29:ae:ee:58:34:28:fa:3b:4b:f2:
         f7:b4:a0:ad:b9:36:c1:c5:ec:90:ff:40:d9:56:fc:8d:0a:0f:
         ea:83:23:6a:3c:a8:3a:48:f8:8f:cb:d5:92:0c:60:9f:1e:c9:
         32:8a:fe:00:49:e3:3a:51:20:60:2c:cd:f7:40:8c:16:4e:a6:
         6e:e0:7f:d1:4c:6c:21:b6:2c:35:b7:61:47:3d:cb:29:df:e7:
         d6:b5:ba:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:20:06 2024 by rpki-client on console-ams.rpki-client.org