Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
File:                     GZdiXDlfuGf12AjVNZehHOfzxMs.mft (raw, json)
Hash identifier:          7fkFPYFGwNc1dxwYG68vDA8lioG51ZQE6R5yC/wW7f8=
Subject key identifier:   C7:28:2D:72:23:FF:56:FD:74:E2:4E:BD:22:C0:99:C8:E0:89:2C:19
Authority key identifier: 19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
Certificate issuer:       /CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Certificate serial:       0191F9D9C9B2C127469F9796DEE1B6AC85FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
Manifest number:          12BA
Signing time:             Mon 16 Sep 2024 08:01:25 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:25 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:25 +0000
Files and hashes:         1: GZdiXDlfuGf12AjVNZehHOfzxMs.crl (hash: HNDUQaSKp0IG46olZ5nt/ZdZRe6jjVTNXYG6AOnlyao=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:c9:b2:c1:27:46:9f:97:96:de:e1:b6:ac:85:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
        Validity
            Not Before: Sep 16 08:01:25 2024 GMT
            Not After : Sep 17 08:01:25 2024 GMT
        Subject: CN=c7282d7223ff56fd74e24ebd22c099c8e0892c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:ed:6f:f8:6e:d6:57:ab:d7:48:44:2c:22:
                    1b:0b:39:fa:51:8a:2e:b9:e7:cf:45:27:a6:04:9b:
                    a7:52:b1:72:e5:08:29:97:36:bd:f1:93:7a:a3:57:
                    be:8f:17:a8:52:21:7f:87:81:d0:24:d9:13:9e:3d:
                    fd:17:96:b7:0c:f8:3d:73:cd:78:45:af:94:0b:4e:
                    29:b1:09:3a:fb:9b:0f:c0:32:09:09:63:d7:7b:ca:
                    9d:56:a2:bf:64:39:3b:08:df:94:0b:ef:d8:ac:87:
                    1e:73:bc:ff:80:d6:47:4a:63:5d:1f:f3:86:02:0f:
                    77:bf:8b:23:83:a9:ba:8c:0a:bb:f9:29:4e:49:d1:
                    c9:5d:17:33:61:17:a8:48:e6:ab:2b:f0:02:fd:f5:
                    de:08:85:24:64:e8:23:c7:7b:1d:98:1a:df:ce:21:
                    c2:e9:e7:36:9f:cb:1a:e0:e2:a6:1b:79:e4:d6:11:
                    eb:6d:32:43:88:e0:74:95:e9:14:73:75:e7:a8:2b:
                    07:a9:1c:db:a0:11:32:ee:85:0a:01:76:bc:d4:e9:
                    c7:33:5b:ca:5b:68:c8:68:e2:7d:41:98:b2:f0:93:
                    80:68:ea:22:28:b7:e2:b5:00:f5:12:2e:51:cd:19:
                    da:1c:f9:bb:02:07:5b:c0:ef:f4:16:41:0b:0e:7e:
                    63:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:28:2D:72:23:FF:56:FD:74:E2:4E:BD:22:C0:99:C8:E0:89:2C:19
            X509v3 Authority Key Identifier:
                keyid:19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:34:61:18:93:47:58:7e:15:ab:9a:c0:0f:c4:82:48:bb:e8:
         38:95:fb:2c:9e:7b:f1:8d:22:5c:c6:76:90:c3:e3:39:6a:f1:
         7e:3c:cd:30:78:44:2b:58:5c:e8:c6:f0:ca:a3:f3:94:ed:da:
         59:41:4a:91:80:80:96:c1:8b:ed:ac:58:0d:37:0f:84:c8:4f:
         0c:5b:a3:e8:b2:e5:d2:1a:5b:aa:da:7e:ea:98:53:33:39:d5:
         ed:42:51:04:96:72:b4:84:7a:d2:fb:71:fd:14:7f:f3:e5:fc:
         b9:82:ff:79:a9:ad:4e:06:c3:97:3f:4b:59:35:38:63:cc:13:
         15:8a:1c:f3:36:de:b9:8a:7d:ea:46:93:29:f7:76:b1:97:bd:
         02:ba:7d:27:9c:7e:b1:7f:97:68:00:f2:17:85:78:7a:8a:da:
         f1:d2:c0:10:9b:90:9b:e1:f8:c4:ba:e3:45:d5:cd:85:a5:5e:
         6b:a2:5f:77:57:7f:ba:6f:f4:46:1f:4e:0b:46:19:4e:93:68:
         54:bd:40:34:59:ac:1b:ae:9c:78:fb:3e:c5:4b:b8:ab:51:6a:
         9a:11:3d:6d:f3:e0:d2:a8:39:0c:17:f1:de:d5:dd:45:c8:70:
         c6:d0:64:e9:dc:50:a1:62:35:84:1e:dd:d4:0e:df:c3:b2:ab:
         de:4e:d0:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH52cmywSdGn5eW3uG2rIX8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OTc2MjVjMzk1ZmI4NjdmNWQ4MDhkNTM1OTdhMTFjZTdm
M2M0Y2IwHhcNMjQwOTE2MDgwMTI1WhcNMjQwOTE3MDgwMTI1WjAzMTEwLwYDVQQD
EyhjNzI4MmQ3MjIzZmY1NmZkNzRlMjRlYmQyMmMwOTljOGUwODkyYzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMXtb/hu1ler10hELCIbCzn6UYou
uefPRSemBJunUrFy5Qgplza98ZN6o1e+jxeoUiF/h4HQJNkTnj39F5a3DPg9c814
Ra+UC04psQk6+5sPwDIJCWPXe8qdVqK/ZDk7CN+UC+/YrIcec7z/gNZHSmNdH/OG
Ag93v4sjg6m6jAq7+SlOSdHJXRczYReoSOarK/AC/fXeCIUkZOgjx3sdmBrfziHC
6ec2n8sa4OKmG3nk1hHrbTJDiOB0lekUc3XnqCsHqRzboBEy7oUKAXa81OnHM1vK
W2jIaOJ9QZiy8JOAaOoiKLfitQD1Ei5RzRnaHPm7AgdbwO/0FkELDn5j2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcoLXIj/1b9dOJOvSLAmcjgiSwZMB8GA1UdIwQY
MBaAFBmXYlw5X7hn9dgI1TWXoRzn88TLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1pkaVhEbGZ1R2YxMkFqVk5aZWhIT2Z6eE1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8xNmU4MTItMjdjNi00MDVkLWE0YzUt
YTdmN2I5ODA5MDA3LzEvR1pkaVhEbGZ1R2YxMkFqVk5aZWhIT2Z6eE1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8xNmU4MTItMjdjNi00MDVkLWE0YzUtYTdmN2I5ODA5MDA3
LzEvR1pkaVhEbGZ1R2YxMkFqVk5aZWhIT2Z6eE1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizRhGJNH
WH4Vq5rAD8SCSLvoOJX7LJ578Y0iXMZ2kMPjOWrxfjzNMHhEK1hc6MbwyqPzlO3a
WUFKkYCAlsGL7axYDTcPhMhPDFuj6LLl0hpbqtp+6phTMznV7UJRBJZytIR60vtx
/RR/8+X8uYL/eamtTgbDlz9LWTU4Y8wTFYoc8zbeuYp96kaTKfd2sZe9Arp9J5x+
sX+XaADyF4V4eora8dLAEJuQm+H4xLrjRdXNhaVea6Jfd1d/um/0Rh9OC0YZTpNo
VL1ANFmsG66cePs+xUu4q1FqmhE9bfPg0qg5DBfx3tXdRchwxtBk6dxQoWI1hB7d
1A7fw7Kr3k7QwA==
-----END CERTIFICATE-----
Generated at Mon Sep 16 16:18:36 2024 by rpki-client on console-fra.rpki-client.org