Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
File:                     GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft (raw, json)
Hash identifier:          Qe2nSVuKyWCdhCfs/ovWfhIbIoeV4sdhegS4uqXDZnc=
Subject key identifier:   15:19:D8:5C:51:9A:05:0B:F7:B2:75:9F:7B:DB:86:75:57:E2:43:BB
Authority key identifier: 18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19
Certificate issuer:       /CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
Certificate serial:       018FC51606BB9AE5B872A5B739E699C3DC73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
Manifest number:          1195
Signing time:             Wed 29 May 2024 16:01:46 +0000
Manifest this update:     Wed 29 May 2024 16:01:46 +0000
Manifest next update:     Thu 30 May 2024 16:01:46 +0000
Files and hashes:         1: GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl (hash: OdP/ObzvnJT8H6zPsGU4YpJSD4+aRGB2bWp0YO6xP8M=)
                          2: oBEWp-o92Jtwpn4k7KxuXyRcDhs.roa (hash: OqY9DI46vvCPiYHxi6E71OdJZPp3MyhNtEGXzGL8cuk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 May 2024 13:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:c5:16:06:bb:9a:e5:b8:72:a5:b7:39:e6:99:c3:dc:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
        Validity
            Not Before: May 29 16:01:46 2024 GMT
            Not After : May 30 16:01:46 2024 GMT
        Subject: CN=1519d85c519a050bf7b2759f7bdb867557e243bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:09:27:86:a1:33:ea:76:47:8f:4e:55:cc:
                    72:ad:c7:4a:41:fd:cc:4b:19:33:d3:9b:7b:84:04:
                    95:01:57:6c:7c:15:f8:91:d5:72:aa:b1:68:58:5e:
                    56:64:c1:ae:11:e0:44:73:4b:d7:48:b8:98:cb:5b:
                    4f:4f:11:6d:ac:50:11:26:f2:01:cb:60:9b:31:63:
                    ad:76:15:55:29:84:c3:3d:f4:f4:e7:83:3c:2d:79:
                    0a:3b:8e:5e:a7:60:d1:72:3e:cd:2a:b9:c5:db:38:
                    3b:3b:a0:14:80:81:d0:fa:27:82:d6:11:34:88:51:
                    74:28:2c:7b:04:6c:f4:09:5e:03:2c:20:2e:17:02:
                    eb:60:4e:61:b9:65:e8:6d:ed:d1:82:a0:b5:73:d2:
                    ad:ff:97:a7:e3:fc:81:f1:88:e4:d4:0a:69:be:0d:
                    09:87:ac:90:11:2b:5d:56:fb:85:63:a3:ee:11:64:
                    55:0e:5e:9b:df:ef:55:dd:8b:b8:63:77:56:d8:71:
                    18:75:b0:6f:02:03:19:8c:95:6b:c3:1a:b9:4c:03:
                    c1:57:f3:e1:0a:29:34:83:a1:5d:9c:20:de:cf:31:
                    95:a1:e7:01:64:82:ae:3d:af:81:01:29:ba:41:a4:
                    d0:6e:70:67:c1:d7:8f:89:eb:df:6d:4c:0d:0e:7d:
                    89:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:19:D8:5C:51:9A:05:0B:F7:B2:75:9F:7B:DB:86:75:57:E2:43:BB
            X509v3 Authority Key Identifier:
                keyid:18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:51:fb:57:be:e6:0d:38:9e:11:af:15:a8:29:4e:d8:59:1b:
         28:cc:fa:3a:8b:ae:b2:c9:6d:5e:42:b1:a4:58:8e:6e:dc:9b:
         90:48:e4:57:73:7e:c5:3d:ab:9f:6c:ce:e2:17:a9:32:49:dd:
         5b:b9:32:06:4a:2a:32:09:54:2e:3b:3f:d9:54:64:61:af:c1:
         83:15:3c:4f:85:10:92:76:59:11:39:43:76:58:5f:8d:10:f6:
         31:f1:96:82:d3:59:29:6e:45:d3:28:f2:e0:c9:98:0d:cd:b6:
         2a:b2:8e:38:bb:0c:d9:f7:7b:8c:cc:33:05:e5:44:ec:a1:5e:
         d1:a2:89:74:e3:49:37:6e:b2:94:b1:ba:c4:49:ed:10:7d:22:
         99:c6:35:e3:f0:aa:08:ea:44:fc:fb:9c:ce:41:2d:3a:52:14:
         79:28:39:b8:35:e8:50:29:58:24:3e:8b:55:fe:48:81:f3:7e:
         c7:03:45:ca:03:1f:eb:b3:5c:de:1f:8a:7d:c9:28:2d:06:00:
         e6:b7:df:c6:ae:ca:bc:70:47:9f:52:f7:47:67:ab:68:93:3b:
         37:58:02:6c:f9:7b:81:b9:a8:0a:5e:ce:33:e3:10:b6:cf:11:
         ed:31:b0:27:8d:fb:77:d9:12:cf:c0:ec:c3:62:9a:b2:59:db:
         69:bb:57:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 23:10:52 2024 by rpki-client on console-ams.rpki-client.org