Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
File:                     GTWdi0RPJzSynpueCQG-CLAPQOM.mft (raw, json)
Hash identifier:          cZF8KBGROSvAaIrVbFdHJyP3NQRED3RcH6NonIET9hE=
Subject key identifier:   96:20:FA:A5:22:3E:28:46:53:E3:A3:D9:96:B2:52:D7:70:51:AC:3F
Authority key identifier: 19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3
Certificate issuer:       /CN=19359d8b444f2734b29e9b9e0901be08b00f40e3
Certificate serial:       0191FA477A7C0BD95C8023CDF733F08CF23D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
Manifest number:          0E3B
Signing time:             Mon 16 Sep 2024 10:01:14 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:14 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:14 +0000
Files and hashes:         1: GTWdi0RPJzSynpueCQG-CLAPQOM.crl (hash: NOGwD0HlQq9BLXayQ0pFKvJe307jTj7y1CwGabVeVC0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:7a:7c:0b:d9:5c:80:23:cd:f7:33:f0:8c:f2:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19359d8b444f2734b29e9b9e0901be08b00f40e3
        Validity
            Not Before: Sep 16 10:01:14 2024 GMT
            Not After : Sep 17 10:01:14 2024 GMT
        Subject: CN=9620faa5223e284653e3a3d996b252d77051ac3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fc:a6:65:ac:1a:c7:0b:bf:a5:ca:9d:6f:fc:
                    1b:34:75:1c:ce:56:27:6d:0c:c6:bf:50:c8:d4:26:
                    8e:e7:08:04:f5:e5:b5:cc:46:85:0f:5c:6f:06:09:
                    23:c3:52:6f:f8:0d:1b:f9:e6:e7:bb:e9:56:d9:39:
                    78:09:15:90:66:b7:4b:1b:71:a3:94:68:51:85:b3:
                    1a:fc:80:68:d1:27:75:a6:2b:9c:e4:b6:32:b4:32:
                    0c:8c:50:2d:b9:a7:fd:e8:83:55:00:e6:07:42:51:
                    c2:a4:00:dc:8b:67:c4:35:b4:9e:a9:49:23:91:bd:
                    53:a2:ea:58:ef:84:d7:84:38:40:e9:92:d5:65:05:
                    67:d9:63:78:45:64:f0:7d:bd:ca:93:5c:ea:87:77:
                    23:eb:b6:21:fa:2d:19:8d:ba:a8:94:41:d3:24:0e:
                    e7:25:29:e8:e0:7d:cd:f6:aa:e8:d1:3a:60:14:b2:
                    71:5b:4f:7a:ee:92:94:e4:fa:8d:15:74:7c:68:b4:
                    8e:06:59:d7:71:72:20:dd:1e:e7:5a:86:04:e5:52:
                    88:f6:d0:2b:1a:7d:9c:9f:29:b8:27:fc:33:40:86:
                    e6:a7:d9:95:3e:80:8d:be:7b:54:f4:7f:31:6f:a0:
                    22:9d:28:46:00:50:d0:58:c5:93:af:cc:fb:78:b0:
                    5b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:20:FA:A5:22:3E:28:46:53:E3:A3:D9:96:B2:52:D7:70:51:AC:3F
            X509v3 Authority Key Identifier:
                keyid:19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:59:4c:10:9c:88:00:fc:e5:fe:28:d6:cf:62:98:05:4e:46:
         08:73:04:7e:17:9d:a5:31:10:fd:78:33:1a:2e:be:0c:6c:1e:
         0c:ad:83:bd:8e:50:20:3f:79:a1:09:1c:8f:95:a3:ff:d5:b9:
         8f:1f:4d:cf:15:b1:7e:0e:b9:7a:bd:53:5a:c6:03:f1:66:54:
         5f:5a:01:10:03:c4:92:33:53:98:4f:18:b5:70:1b:3a:9a:ee:
         b8:d2:63:2c:73:db:5b:7d:e9:6c:ae:1f:38:b8:1b:a0:fb:e6:
         e1:e4:fa:63:52:9c:36:c3:31:52:22:d7:a9:e0:64:0f:ca:15:
         94:b2:15:83:6a:64:32:da:f9:57:09:18:96:c3:f4:a7:ff:19:
         d0:a7:35:da:3f:b0:7f:05:61:6e:54:b7:6f:d7:5f:af:1d:c1:
         02:f3:16:d4:3e:6f:78:e6:8c:63:37:5a:b9:65:2a:e5:0e:22:
         e6:e3:86:91:be:45:ff:47:37:2b:0e:b6:47:1b:09:9b:58:70:
         2a:98:5d:2c:ba:36:7c:d8:d3:13:85:49:80:a2:ac:8e:e1:ac:
         18:2b:d6:21:f7:f7:ab:96:98:16:34:2b:a2:f2:61:83:08:6c:
         cf:8a:21:3b:55:26:90:89:cf:7c:37:00:08:94:7f:a4:d8:0b:
         30:01:f4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:17:58 2024 by rpki-client on console-fra.rpki-client.org