Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
File:                     Gloi28jb0tckjer_R-M5D3f7Sws.mft (raw, json)
Hash identifier:          0SHBQIfiah1Mtyfalg5XSze0DSYhobqdOnqkEQtfqzs=
Subject key identifier:   21:64:2B:2F:AA:70:23:D7:58:E2:35:62:3A:99:3A:A4:60:5B:BB:F8
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Certificate issuer:       /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial:       018F381D0CCF99D34614A2090A8B56AE18AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
Manifest number:          114F
Signing time:             Thu 02 May 2024 07:02:58 +0000
Manifest this update:     Thu 02 May 2024 07:02:58 +0000
Manifest next update:     Fri 03 May 2024 07:02:58 +0000
Files and hashes:         1: Gloi28jb0tckjer_R-M5D3f7Sws.crl (hash: L/G5aKmpLpMZDU9XDzcIm3au0qeGOy9qFiD0efo+Kss=)
                          2: JOZokNamdNswMBjE5nSFpPXPDz4.roa (hash: geUwNVGxSq4RoK2+2XN3osVH9al6i8IxrHyfNTNAD8M=)
                          3: W1lX_7PgzUCMly9EPIced6xcfbU.roa (hash: plPz00m/eM28qHdafp88yl8Knmz9jmdbE/SpjaHmR7o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1d:0c:cf:99:d3:46:14:a2:09:0a:8b:56:ae:18:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
        Validity
            Not Before: May  2 07:02:58 2024 GMT
            Not After : May  3 07:02:58 2024 GMT
        Subject: CN=21642b2faa7023d758e235623a993aa4605bbbf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:94:83:4d:64:45:3d:21:57:a6:c7:c8:81:5d:
                    0c:d4:92:0f:8e:fe:a8:a2:af:cd:ad:b2:38:f4:2a:
                    be:8e:05:d3:88:71:e8:4b:be:9d:b7:00:4d:3c:b0:
                    fe:c7:f4:86:f6:9b:3f:b7:c2:fa:16:31:f0:06:bb:
                    8f:59:ec:19:b6:a5:c9:32:91:26:45:e9:b1:f5:73:
                    a0:22:d8:d5:08:fd:0e:ff:94:4f:f1:8c:84:d6:61:
                    fe:5c:db:71:80:59:65:da:64:5b:26:01:ff:ee:0f:
                    ba:62:29:72:bd:75:19:78:70:cd:d2:9a:63:3d:fc:
                    30:98:dd:29:ff:a1:67:c3:bf:fb:1b:56:e4:dc:9b:
                    a1:7a:1c:cd:4b:40:bb:65:21:7c:64:a4:9a:d7:ca:
                    c7:f5:ca:6f:1f:03:6d:51:80:5d:ea:8d:0b:3b:6c:
                    45:98:dd:7f:1a:3f:68:75:47:fb:54:57:6e:90:45:
                    13:81:12:2d:a9:ad:c3:fe:1d:98:30:4d:f3:84:65:
                    59:eb:a7:59:56:8b:df:c9:45:2b:24:0d:2b:b1:45:
                    64:1b:0a:89:ef:49:bf:16:1f:8b:6d:4e:c8:d4:32:
                    82:47:5e:d8:f9:33:37:85:0f:5e:97:84:5b:f4:14:
                    02:b0:48:94:b8:99:ba:a6:73:c6:a7:7e:2b:0b:35:
                    d6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:64:2B:2F:AA:70:23:D7:58:E2:35:62:3A:99:3A:A4:60:5B:BB:F8
            X509v3 Authority Key Identifier:
                keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:10:04:e1:75:59:34:60:f2:15:37:08:61:a9:5d:10:0e:fa:
         fe:ee:3c:f0:62:d9:8d:5d:20:01:a6:af:10:ca:ad:cd:1d:33:
         b1:07:87:50:db:c6:5c:ef:47:8a:22:e9:85:ad:26:e6:85:f0:
         b2:8e:a1:49:c3:1e:46:2d:9b:90:7c:fc:2e:49:f8:3c:4c:18:
         78:12:0a:1b:3e:d5:9a:4f:38:08:cb:6f:09:51:47:65:b4:a7:
         bd:cb:17:8b:04:87:a1:c8:35:6a:e1:cb:3f:4b:e4:d0:f3:68:
         e9:14:b7:56:60:8f:24:dd:ed:2b:c8:fe:82:6b:2d:7a:b6:95:
         0f:20:aa:71:ca:59:ab:3c:63:1e:d9:15:21:72:60:a0:d9:12:
         07:eb:13:d6:a1:e7:82:ce:74:bb:a1:9e:37:e3:68:e1:d1:e3:
         39:2b:b7:7f:6d:41:70:af:41:92:ae:65:93:b7:fb:3f:da:80:
         f1:fc:58:75:25:30:49:f9:27:52:a1:f7:1b:01:de:d9:a2:19:
         f1:66:30:dd:5e:0b:bd:84:6d:7c:68:0d:32:09:14:17:55:23:
         cf:51:2c:ff:94:3b:b1:02:b7:a4:04:47:2d:02:b4:ca:d9:2f:
         92:2b:3d:01:09:53:cd:19:47:db:f0:4c:26:74:4a:7c:85:16:
         b5:e6:73:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:32:02 2024 by rpki-client on console-fra.rpki-client.org