Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
File:                     GWRkVJwHkby2YRd_l67c851Uw5U.mft (raw, json)
Hash identifier:          gDL09vBz7p6mJMByrWT54mmOymNErPad0cG0ep8+VJI=
Subject key identifier:   4A:3A:13:A3:25:C5:18:B2:EA:22:64:BE:1D:AB:83:B3:0F:A2:D6:14
Authority key identifier: 19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95
Certificate issuer:       /CN=196464549c0791bcb661177f97aedcf39d54c395
Certificate serial:       018F4CB55631B6D6E0A87579F849041F258C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
Manifest number:          1155
Signing time:             Mon 06 May 2024 07:01:43 +0000
Manifest this update:     Mon 06 May 2024 07:01:43 +0000
Manifest next update:     Tue 07 May 2024 07:01:43 +0000
Files and hashes:         1: GWRkVJwHkby2YRd_l67c851Uw5U.crl (hash: QUPbc5F76fOIU0MJp/5yNXoh0uEVev+4dtdWVtXIvjI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:b5:56:31:b6:d6:e0:a8:75:79:f8:49:04:1f:25:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196464549c0791bcb661177f97aedcf39d54c395
        Validity
            Not Before: May  6 07:01:43 2024 GMT
            Not After : May  7 07:01:43 2024 GMT
        Subject: CN=4a3a13a325c518b2ea2264be1dab83b30fa2d614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fe:e7:ce:63:1b:7f:29:db:16:bb:e3:56:a7:
                    eb:c8:a5:31:d8:0b:2d:fa:c0:38:3d:f4:15:ba:47:
                    db:45:4c:ca:38:24:75:a6:9c:52:6d:13:d7:00:45:
                    db:b7:24:51:3d:bc:b5:af:41:59:75:be:4f:f9:71:
                    e3:40:49:96:df:82:c8:00:7b:a6:49:af:fa:8a:cd:
                    1f:18:08:b1:93:7e:c9:de:98:8f:bf:cd:51:94:fd:
                    f0:02:9c:39:74:0c:0f:21:a8:fa:9f:b2:69:7d:03:
                    fc:99:f2:1e:99:28:1c:4e:68:65:7b:3b:07:b7:b4:
                    2f:ab:c6:e7:28:6c:fe:22:88:fb:dc:a0:71:3c:a8:
                    19:0d:03:4c:49:35:b2:82:e2:0b:a9:80:3a:ca:e2:
                    f7:8c:2b:90:b7:88:57:ca:c9:34:6a:21:df:b2:85:
                    df:5d:ea:ed:4f:6a:51:5c:d9:42:4c:a6:97:d1:24:
                    a5:f5:7b:1b:fa:94:2f:5c:d8:73:5d:7a:6b:78:0d:
                    4e:63:a6:fb:49:e6:4e:6f:01:be:9b:41:79:d9:46:
                    a1:d9:6f:c7:15:14:88:40:b2:0e:5f:2a:30:9d:fe:
                    2e:5f:89:08:44:b1:2c:13:b5:2b:3a:72:01:58:d9:
                    8b:ce:87:d9:8a:9f:4c:d5:da:78:3c:f1:d2:3c:9d:
                    2a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3A:13:A3:25:C5:18:B2:EA:22:64:BE:1D:AB:83:B3:0F:A2:D6:14
            X509v3 Authority Key Identifier:
                keyid:19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:bc:ac:43:fa:93:f2:fd:68:fc:a9:51:27:5b:fc:ab:6f:99:
         c0:e0:ef:e1:cc:53:60:e9:c6:86:c6:86:0d:9d:02:91:53:86:
         78:e0:49:d2:e1:29:77:87:b1:2f:89:b2:88:a4:12:cb:9a:de:
         5e:11:e4:c0:7f:66:92:ce:7e:01:6e:3d:d0:15:cc:87:c0:2e:
         bf:18:44:6b:54:52:35:a5:dd:39:ce:ee:5a:14:fb:e6:fd:5d:
         0d:96:cd:a6:86:36:3b:45:77:d6:ff:d3:f6:21:b4:03:0c:20:
         7b:f4:43:2a:e8:e1:49:5e:70:aa:bb:82:02:b1:99:11:2e:ff:
         05:42:ff:81:fa:d3:0b:25:23:6a:43:49:64:d0:96:7b:29:54:
         77:1a:dc:0c:00:a0:dc:c7:34:4f:87:65:37:d6:61:16:7b:dd:
         cf:ad:6f:99:68:79:22:53:db:98:08:27:5b:34:33:2a:08:96:
         fe:46:fb:8e:f9:c0:cb:07:a8:a4:04:0e:29:b9:07:70:5a:bd:
         65:c0:88:75:ec:28:35:9e:e5:69:78:57:ba:ac:93:87:3c:3a:
         da:2c:e3:87:14:12:3e:3f:40:04:89:9b:58:18:61:8d:93:e5:
         f1:d3:5e:fe:8b:f1:83:2f:07:fd:1a:30:47:d1:f6:38:b5:c9:
         45:30:1e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:32:39 2024 by rpki-client on console-ams.rpki-client.org