Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
File:                     GpLjfcjPRWNLLNvPPxAFShxhFpc.mft (raw, json)
Hash identifier:          eB9h5O/toTXywpSDGT3FLdOBdHNJJjPdrNpNPDbTxI8=
Subject key identifier:   2D:F0:5F:BF:32:AC:2D:6B:F1:03:F9:3D:72:88:5D:08:F0:2A:09:3D
Authority key identifier: 1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97
Certificate issuer:       /CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
Certificate serial:       018F20128BA6C4A04D712578877382FAA54C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
Manifest number:          1143
Signing time:             Sat 27 Apr 2024 15:00:37 +0000
Manifest this update:     Sat 27 Apr 2024 15:00:37 +0000
Manifest next update:     Sun 28 Apr 2024 15:00:37 +0000
Files and hashes:         1: GpLjfcjPRWNLLNvPPxAFShxhFpc.crl (hash: sTmtC2yc+pQFciY9bgY4sKZLkal3X5pqQkCuSl2vrdA=)
                          2: itkcOlcvGYUHyJQgbunUx_8ZTbI.roa (hash: GRiNSfOMqKyBr0Ye7jNXMlf5W5KImSLe4yvFJj9O8Zk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:12:8b:a6:c4:a0:4d:71:25:78:87:73:82:fa:a5:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
        Validity
            Not Before: Apr 27 15:00:37 2024 GMT
            Not After : Apr 28 15:00:37 2024 GMT
        Subject: CN=2df05fbf32ac2d6bf103f93d72885d08f02a093d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:77:71:9b:b0:f0:0a:65:fd:5e:bc:ce:9c:e5:
                    5a:2d:04:a1:f5:ed:a3:a9:0c:e0:61:74:e0:48:11:
                    91:c9:82:71:c1:c5:fb:9c:59:c9:4b:63:7e:7f:af:
                    a1:71:54:77:e3:ba:18:5c:56:df:05:8b:06:68:93:
                    94:7e:91:fe:8d:a8:01:d4:06:d3:fe:20:de:2b:8e:
                    c9:02:26:fd:8d:ee:72:3e:6f:24:10:0b:93:f1:77:
                    86:e9:f3:9d:a0:3a:e1:99:03:08:fd:7d:df:62:31:
                    b7:93:57:b2:88:e0:45:70:7c:3c:6f:a6:0c:2d:67:
                    56:53:28:9c:e5:ef:6f:16:ce:20:a7:0f:40:0e:17:
                    7d:db:72:f0:d4:46:24:d5:62:00:0f:0f:25:b6:58:
                    4c:49:93:89:ea:a4:3b:fa:10:18:30:62:ee:a0:42:
                    4b:83:08:a1:9f:37:3b:d4:3d:a2:e2:d3:69:a3:8e:
                    fc:b9:96:18:5a:bd:ba:0d:3f:64:0c:28:8d:2e:0b:
                    0e:cb:5c:13:12:16:c1:17:2f:e8:d3:22:d4:34:52:
                    c1:4c:b1:2f:cf:7a:71:30:5b:9d:d2:47:2d:eb:d4:
                    6b:0d:58:5a:8d:4d:8a:34:a7:8a:3d:a4:36:be:31:
                    63:3c:69:1f:fd:08:05:fc:e9:9d:20:f7:ac:68:9c:
                    34:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F0:5F:BF:32:AC:2D:6B:F1:03:F9:3D:72:88:5D:08:F0:2A:09:3D
            X509v3 Authority Key Identifier:
                keyid:1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:45:6e:3b:50:e7:65:29:52:da:8f:7d:b9:83:f2:b0:dc:78:
         37:eb:a6:a0:a9:90:66:f4:5f:dd:0d:11:da:cc:66:6b:1f:1d:
         40:75:92:8d:0e:47:ee:ea:31:7c:a4:dc:8a:44:73:f6:28:f5:
         65:a9:0e:b2:4f:b1:82:c3:4a:c2:05:10:af:60:50:dc:4d:4c:
         35:c7:aa:1d:a3:61:c5:99:6d:c5:62:59:2b:f6:fe:49:a1:a8:
         f4:a7:6e:cf:f5:32:97:9f:e3:86:2f:4f:ab:2c:00:b1:49:8e:
         13:d7:ba:a0:a7:d0:11:f4:67:a0:0d:36:8f:04:4d:bf:47:b9:
         00:c7:46:49:13:40:c5:aa:52:4c:bb:6d:a1:ca:0d:ef:d8:6c:
         48:0f:8f:4d:8d:4b:8d:7d:ca:18:cf:f8:fe:af:f3:f4:f7:f4:
         63:ba:9a:f3:ab:75:40:a5:d6:0e:c4:8c:2b:b5:00:7a:26:14:
         6b:13:6c:64:03:58:b9:23:9d:03:13:2b:dc:75:ff:64:d1:fe:
         aa:5a:a6:23:ae:08:ef:52:2c:3e:41:d8:e3:c6:5e:a1:83:0f:
         16:25:42:04:db:3a:18:1c:2f:d4:98:a4:24:48:70:ba:cd:95:
         3b:10:49:c2:1b:a6:10:8e:02:83:c8:79:06:c2:40:5a:e4:b1:
         46:1b:1f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:21:07 2024 by rpki-client on console-ams.rpki-client.org