Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
File:                     GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft (raw, json)
Hash identifier:          wF59ibWWQ3k5YgKL2N8uTFuGEWNQmTL25YnOxCdP2+8=
Subject key identifier:   72:A6:3C:AA:91:2B:9B:06:DF:AE:76:68:50:C5:A1:98:84:3B:65:43
Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
Certificate issuer:       /CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Certificate serial:       018F513679EF117BE56069AAD35A7EA5F325
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
Manifest number:          0F7A
Signing time:             Tue 07 May 2024 04:01:15 +0000
Manifest this update:     Tue 07 May 2024 04:01:15 +0000
Manifest next update:     Wed 08 May 2024 04:01:15 +0000
Files and hashes:         1: GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl (hash: g9+PdB2Xmm1rdpVxr1bAbnb30SJ2JhfDbyqTv+TpzuY=)
                          2: nsPGllSA1WCc0SY6N7F4MmSMDnQ.roa (hash: RgiGnVWsGyyBv+tdEC1rHK6Bnf5QcteJnLC2EEE++hQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:36:79:ef:11:7b:e5:60:69:aa:d3:5a:7e:a5:f3:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794
        Validity
            Not Before: May  7 04:01:15 2024 GMT
            Not After : May  8 04:01:15 2024 GMT
        Subject: CN=72a63caa912b9b06dfae766850c5a198843b6543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0c:89:75:20:00:5f:96:15:83:1e:8e:0f:c4:
                    38:9a:22:d5:9a:ab:35:f3:4f:79:d2:9b:2d:9f:8f:
                    16:80:24:1b:69:4e:11:13:fe:8b:69:5e:ac:4d:98:
                    ae:58:55:55:95:fe:0e:90:74:58:9d:bc:ef:61:73:
                    9f:1a:c6:af:4f:79:57:38:0f:60:8a:fe:d2:94:fc:
                    c6:f6:a5:bb:b5:0a:12:25:87:be:0c:73:16:2b:03:
                    6e:fa:bf:ce:4e:34:62:22:ce:9b:e3:18:63:c0:cc:
                    ce:a6:1f:01:85:f6:5a:a9:52:64:98:8b:60:7b:4b:
                    61:5b:1d:55:47:33:87:1d:f4:ae:aa:49:39:92:99:
                    b5:ad:49:b1:31:b8:3b:56:bf:e1:47:8e:bb:b5:fe:
                    f8:1e:c1:00:14:6a:fb:4f:d4:05:8b:fa:40:9a:1f:
                    b8:70:d1:86:77:db:b9:76:b6:3f:c7:64:20:d6:13:
                    d1:c1:14:31:1e:25:f0:1b:a0:38:05:10:52:97:f2:
                    65:5b:ec:51:06:cf:45:97:fd:c3:d7:ab:86:65:35:
                    2d:e5:20:ed:7b:60:9b:0e:8c:c3:37:92:98:23:95:
                    c3:d9:c9:64:b7:35:e1:d0:77:33:4b:cb:37:17:6e:
                    ff:b6:b7:f8:a7:8d:9f:ba:60:1e:7d:fa:9a:eb:3f:
                    37:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A6:3C:AA:91:2B:9B:06:DF:AE:76:68:50:C5:A1:98:84:3B:65:43
            X509v3 Authority Key Identifier:
                keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:64:bb:4e:f6:05:d3:5d:ac:bb:46:68:b3:44:e1:6e:cf:b6:
         a4:56:7a:37:ea:1f:1b:02:60:ef:63:cd:ba:96:58:ae:ad:c3:
         84:6d:b5:d8:5d:d9:2c:6f:1f:1a:9f:af:8f:83:91:ec:db:3d:
         9b:16:3d:6b:91:19:a8:65:69:03:16:20:75:fc:63:d6:1c:1b:
         52:3b:73:3e:af:7e:ae:b9:c2:64:f6:a2:07:b6:39:b7:91:e3:
         92:97:25:19:bd:fd:23:67:cf:cd:fc:a1:02:dc:86:7a:96:3e:
         8a:38:72:b2:c3:28:8d:1e:2a:dc:0f:5c:f8:99:96:1e:62:3d:
         53:49:ff:42:ea:f2:20:88:05:ce:df:99:5b:c7:2f:28:f5:b9:
         7d:59:52:9f:4b:00:ef:82:88:2f:70:2c:45:c3:fb:de:a4:f4:
         8b:3f:4b:96:03:a7:e5:ae:22:1b:e7:86:be:5a:1f:2c:99:03:
         e5:22:c3:1a:cd:27:cb:2a:b7:93:2f:3d:fb:c6:41:74:9b:39:
         7c:58:2e:e9:96:97:0f:8f:b8:6f:9b:2c:2b:ae:22:0a:8f:92:
         3f:d0:b6:76:56:65:fd:4a:9f:56:54:d5:53:89:d0:25:9e:c3:
         79:db:2a:21:02:dc:4b:ed:a8:4e:c7:77:8d:48:85:73:b6:43:
         45:65:37:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:42:24 2024 by rpki-client on console-fra.rpki-client.org