Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
File:                     G0ILeZxSBqGe93F-48cxL9iDMK4.mft (raw, json)
Hash identifier:          zX1vejdRgYgq7SaiZsY4j9Xhqj+fngLuowuzIfGtPn8=
Subject key identifier:   65:72:96:6B:98:4F:44:94:66:F2:32:F0:3D:99:53:66:A0:AA:8C:5A
Authority key identifier: 1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
Certificate issuer:       /CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Certificate serial:       018F885AD790256B41E9634A957CF40C38A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
Manifest number:          037A
Signing time:             Fri 17 May 2024 21:00:05 +0000
Manifest this update:     Fri 17 May 2024 21:00:05 +0000
Manifest next update:     Sat 18 May 2024 21:00:05 +0000
Files and hashes:         1: 0s-egozASf6GRFCeT9R7BOcNlfk.roa (hash: CySmtTPeNCP0nBWJp7gZo+alMvYcGYox0tPzGUf+FRo=)
                          2: G0ILeZxSBqGe93F-48cxL9iDMK4.crl (hash: VmdjVDVQ7HHI6HaM57Bu/cZKOfkY+MtoXrc+nHLk0ds=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:d7:90:25:6b:41:e9:63:4a:95:7c:f4:0c:38:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
        Validity
            Not Before: May 17 21:00:05 2024 GMT
            Not After : May 18 21:00:05 2024 GMT
        Subject: CN=6572966b984f449466f232f03d995366a0aa8c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e7:95:88:4d:61:3b:4c:0e:8b:e2:3c:ed:fb:
                    e9:be:73:50:67:a8:40:48:1b:36:32:26:87:72:d8:
                    5e:fa:5e:e9:ad:42:53:c0:62:2b:ad:62:87:d9:2a:
                    8f:62:d5:38:c9:1b:8b:48:d0:49:6d:0d:d9:5a:d5:
                    c8:05:e6:78:c2:ca:3b:23:a9:d6:fb:ec:29:3b:f5:
                    67:cc:cd:b2:c9:40:ef:e0:dd:7d:4f:38:b5:1a:78:
                    21:98:34:a9:9a:98:9a:17:74:4b:56:e4:55:01:2e:
                    9b:26:ed:27:ab:af:ff:14:7b:15:c9:34:e4:9f:19:
                    a7:41:8b:a3:1f:13:22:a6:de:6f:c0:55:af:a7:4e:
                    79:63:b3:3c:3c:5f:63:80:8e:a4:58:5d:14:5e:59:
                    e0:75:a0:81:fe:e7:42:00:0b:92:66:45:53:91:b4:
                    ad:45:27:37:c4:7d:25:47:ff:ef:0b:01:7a:bc:50:
                    0b:bc:ea:7f:a4:ff:dc:c7:0e:a7:9a:d5:36:c6:8e:
                    bb:f9:d8:49:ef:21:1c:08:99:68:75:28:7e:1c:21:
                    4e:8e:5d:cd:7e:93:fd:92:2c:5e:17:47:71:6d:ec:
                    13:47:46:b4:4e:a3:d6:cd:05:6c:8a:37:b4:b8:bf:
                    8c:84:89:1b:c1:fd:e0:42:7d:5e:84:d6:d1:ff:bc:
                    6c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:72:96:6B:98:4F:44:94:66:F2:32:F0:3D:99:53:66:A0:AA:8C:5A
            X509v3 Authority Key Identifier:
                keyid:1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f6:1c:28:8d:95:1f:e5:d9:e6:7b:b8:8f:c0:94:79:48:db:
         db:66:0b:92:04:83:5e:7d:02:71:8b:6d:4b:6a:fc:d3:bd:0d:
         87:24:47:46:7a:0a:00:e5:86:50:e3:d7:06:26:f2:55:63:0f:
         5c:03:90:35:d6:a4:bc:81:8e:d1:01:7b:1c:77:9b:69:52:0b:
         d7:d0:eb:9d:0c:68:4e:48:32:b4:3c:c9:50:6d:d4:94:34:fc:
         ef:18:13:dd:33:f8:c0:6e:ae:51:8b:e1:09:78:09:e1:b8:47:
         eb:40:db:f3:08:aa:ba:ed:3f:3e:8f:49:5f:94:c7:41:13:4d:
         19:c8:12:09:1c:b5:82:a3:89:7b:79:26:1d:e9:ce:78:f9:0d:
         33:98:51:57:fb:8e:7c:bd:6e:fc:86:e6:88:80:94:05:e5:57:
         8d:cd:ae:dd:64:4d:f4:ec:ed:65:26:ed:f0:9e:87:51:cd:69:
         4c:c6:df:2a:ff:d3:06:03:9e:06:93:d5:c4:c7:84:fa:a9:7e:
         ac:c8:d8:0f:89:4c:f3:8c:6e:02:34:de:b5:5e:54:0c:63:6d:
         95:89:5a:d5:ec:98:93:19:16:45:c1:82:5f:84:c4:df:1d:d4:
         04:67:f4:4d:1d:b7:bc:19:d0:41:62:7c:60:ca:cc:fe:ec:4a:
         d9:a2:46:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:55:44 2024 by rpki-client on console-fra.rpki-client.org