Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
File:                     GjrGrWXloJkgm4i4ec9KCK8IaN4.mft (raw, json)
Hash identifier:          JRmTmRQ+hiPDZgyhUgB6QXALLSPD2rEbWpkDS8xqjSY=
Subject key identifier:   27:D4:B4:37:F1:80:17:E1:F2:5B:DA:36:7E:E3:5D:2E:F5:36:F4:C9
Authority key identifier: 1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE
Certificate issuer:       /CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
Certificate serial:       018FC95FB50C4E793D58FDE3808BF3D1E23A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
Manifest number:          1089
Signing time:             Thu 30 May 2024 12:00:43 +0000
Manifest this update:     Thu 30 May 2024 12:00:43 +0000
Manifest next update:     Fri 31 May 2024 12:00:43 +0000
Files and hashes:         1: GjrGrWXloJkgm4i4ec9KCK8IaN4.crl (hash: 9E8l+/XmiuIsAbuqKW1Jc3SfERkCvoy+OpJenhQSCBA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 31 May 2024 12:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:c9:5f:b5:0c:4e:79:3d:58:fd:e3:80:8b:f3:d1:e2:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
        Validity
            Not Before: May 30 12:00:43 2024 GMT
            Not After : May 31 12:00:43 2024 GMT
        Subject: CN=27d4b437f18017e1f25bda367ee35d2ef536f4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7d:64:88:b7:da:f7:c5:90:d0:43:5e:43:fb:
                    41:d2:1b:b9:f5:56:46:84:fa:90:46:6d:87:95:6b:
                    1c:5e:43:e9:1a:66:fd:17:40:51:64:12:e3:0d:45:
                    f5:97:2a:a2:c3:0c:dc:6a:7a:10:d6:09:8e:a9:67:
                    45:8a:e2:0b:72:f3:ac:90:03:c3:05:4f:6b:0e:da:
                    45:56:a9:bc:0a:81:cf:12:f8:7b:76:09:28:a8:26:
                    c9:ab:03:98:04:4c:a0:a8:4e:64:e2:4a:0a:ef:12:
                    ff:c6:a4:6c:8e:3e:12:d6:e3:9f:d5:31:93:a6:71:
                    d1:18:73:ed:d2:1c:76:5f:5b:2f:80:c9:4a:55:62:
                    3b:78:93:a8:f2:ce:2e:aa:a9:dd:49:49:41:da:d1:
                    0d:30:b3:56:69:d3:54:12:0f:42:9c:75:21:9a:35:
                    1f:a8:7d:b4:9f:81:1d:11:ef:37:6d:0c:65:bc:41:
                    74:1b:cb:0c:1a:b4:e5:dd:2c:3b:4d:d1:f7:b2:e6:
                    69:50:36:a5:95:22:b7:28:4c:d4:75:0b:87:63:11:
                    f6:e8:93:e1:cc:3e:86:fa:30:fc:a9:0a:7f:54:26:
                    55:95:9a:21:a7:8b:13:19:38:5d:47:de:f2:92:ae:
                    78:04:e7:65:95:df:47:5f:36:45:87:d8:a4:01:8e:
                    10:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D4:B4:37:F1:80:17:E1:F2:5B:DA:36:7E:E3:5D:2E:F5:36:F4:C9
            X509v3 Authority Key Identifier:
                keyid:1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:22:62:5c:c8:d7:5f:a7:b5:b0:a6:97:64:fc:11:22:3f:14:
         a9:f3:57:f5:cb:16:3c:3c:cd:10:ad:67:09:1b:ea:7e:7a:84:
         87:5d:a3:d4:cc:9a:66:b0:55:03:ed:1a:93:cb:00:ce:96:45:
         ee:f7:0b:ce:5c:66:b8:21:4b:56:3e:5a:33:25:d9:07:7f:ee:
         01:96:1a:44:13:55:00:fd:fb:53:b4:ef:40:33:58:1f:77:17:
         1d:a8:be:75:33:5c:44:0c:27:2d:e5:7a:d7:39:d5:29:d9:2d:
         02:ef:b0:78:dd:82:f8:cf:4c:ba:8c:83:67:44:39:58:14:33:
         e2:1b:8e:fd:a8:4e:6f:6b:f1:99:18:a9:14:d8:5a:af:cf:2f:
         05:95:8f:1c:c2:41:db:5c:f7:cc:a3:7e:bc:a2:ab:1b:4d:b7:
         92:d0:7a:ed:71:bf:c3:33:50:b5:b0:49:88:ca:4a:0c:09:5d:
         15:a8:88:36:77:71:cf:d4:8e:cb:b9:d5:d4:ce:ed:4c:e3:82:
         8e:d1:86:51:2c:b0:d4:7e:41:f1:5e:cf:16:76:89:00:cf:3f:
         2e:68:ff:ed:cf:c7:52:de:d8:b9:d7:69:6e:0a:82:7e:d7:56:
         d9:d7:1b:4c:31:c4:40:3d:ce:d6:31:c7:40:e0:65:ae:19:17:
         1d:ae:13:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----