Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
File:                     GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft (raw, json)
Hash identifier:          KbGzW3mLE+AjoAjQcK/QAKmbtJgG7Ke3C2mMeBm/UYc=
Subject key identifier:   1C:CF:00:1A:0B:58:D8:D1:AA:A6:03:E2:F9:4E:9F:FC:1D:57:B1:0E
Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
Certificate issuer:       /CN=184c7c0364f1093cfc584c93037024104fb4854a
Certificate serial:       0193568AE88937A4EC55A84612C17124060B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
Manifest number:          0D68
Signing time:             Sat 23 Nov 2024 01:02:44 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:44 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:44 +0000
Files and hashes:         1: GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl (hash: wGwB17M+qxxJSy3Hxh9YG2RGL+uhw7Ii4Ez+m8ZlgEg=)
                          2: rEWCkMB3rXxrZBkWTLsZtBapGfc.roa (hash: RY+L+Mmxw+KkG2hlJ+aGk0OhsxAsLxH4vhh+dSX307o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:e8:89:37:a4:ec:55:a8:46:12:c1:71:24:06:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a
        Validity
            Not Before: Nov 23 01:02:44 2024 GMT
            Not After : Nov 24 01:02:44 2024 GMT
        Subject: CN=1ccf001a0b58d8d1aaa603e2f94e9ffc1d57b10e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:df:ae:70:cf:5a:e7:63:2b:b2:b8:55:59:
                    20:92:48:f7:73:5f:94:c0:57:89:6f:20:6b:0f:ec:
                    09:92:f4:f1:3b:ab:dd:58:b9:df:d5:a5:82:16:0d:
                    d4:20:8e:e9:94:71:ad:20:04:4a:85:16:bc:50:9b:
                    07:ba:14:f4:e1:8e:5a:f1:bc:e1:83:83:91:94:ad:
                    b6:8f:78:b9:38:09:7d:2f:2a:51:69:25:72:16:7e:
                    59:49:d0:19:c4:55:0f:e2:e5:20:f5:8b:a2:e5:53:
                    97:89:39:75:af:ad:83:80:ef:10:4c:24:96:c4:b8:
                    65:38:df:5a:ae:46:88:67:ba:3d:eb:55:7b:a9:6e:
                    d5:56:79:a8:dd:87:1f:42:81:6e:d4:f2:9e:c1:4c:
                    8d:cf:75:1c:b1:27:e7:f6:2c:8a:93:d5:1d:bd:d7:
                    89:6a:14:ed:9b:6b:6e:4f:44:3b:43:cb:40:a8:60:
                    28:61:2e:52:c5:c0:76:db:9c:7c:03:3a:8c:79:2e:
                    a1:7b:64:a3:f7:d4:fd:83:fd:84:61:b9:45:d2:db:
                    36:4b:2b:60:d1:8c:77:00:c7:4d:6f:25:b6:80:78:
                    15:bb:c5:f4:60:c1:ea:55:31:bf:63:92:e7:42:eb:
                    c6:9f:6e:32:f3:67:1f:5e:81:e4:8b:c7:35:47:ad:
                    e7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CF:00:1A:0B:58:D8:D1:AA:A6:03:E2:F9:4E:9F:FC:1D:57:B1:0E
            X509v3 Authority Key Identifier:
                keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:59:02:1f:fa:65:b6:67:45:43:d2:fb:fa:4e:17:6c:db:b4:
         d8:e2:43:5a:b7:b9:c8:75:7c:bd:90:11:5b:e5:93:4e:c5:4a:
         9a:1a:2b:3e:4e:d8:73:df:49:31:ed:06:2c:13:08:39:39:bc:
         e2:96:1a:61:7f:71:5e:39:de:4b:79:83:6e:c3:03:9c:34:df:
         72:50:08:78:6b:51:8d:a1:15:13:60:c3:54:4e:e3:23:91:cf:
         26:4e:99:e6:06:15:8d:01:d9:56:8b:fc:ed:37:e4:88:c7:c2:
         a9:12:79:ed:60:a6:18:2a:0f:d6:0a:9e:6c:a2:4c:13:8e:ba:
         60:18:b5:3b:e1:b2:9d:59:f5:75:8e:11:5f:55:98:60:37:e5:
         ad:5b:0f:bc:17:da:65:3e:c9:12:ba:30:26:46:62:ce:65:f2:
         c1:c5:09:cf:98:a9:ce:5f:db:ef:a0:c5:11:f3:b6:fc:2d:89:
         d4:03:f2:ed:db:6d:34:70:3b:ee:7b:0f:b1:da:25:fb:5d:22:
         d2:2f:9d:73:53:a9:03:75:7a:e1:7d:c3:4d:76:82:81:59:14:
         c5:3b:db:48:4f:41:23:8f:71:35:59:3c:df:e3:11:0d:16:4e:
         f8:3f:fe:62:bd:52:1b:45:ad:82:a4:1a:dc:58:88:1a:14:08:
         60:de:5e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:22:16 2024 by rpki-client on console-fra.rpki-client.org