Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
File:                     GWImUASBB5GK3xsizfCHyKg095w.mft (raw, json)
Hash identifier:          AmDZLGH3aKp5TT0ucqFdUB9ZUBYTyk9WnaVC7lVZoRY=
Subject key identifier:   FD:17:45:A3:4A:E2:3A:97:11:FD:84:E5:02:50:77:3C:85:2D:B5:C5
Authority key identifier: 19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
Certificate issuer:       /CN=19622650048107918adf1b22cdf087c8a834f79c
Certificate serial:       018F5138ECABDFFD91C05B64C5D95FC01BBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
Manifest number:          055C
Signing time:             Tue 07 May 2024 04:03:56 +0000
Manifest this update:     Tue 07 May 2024 04:03:56 +0000
Manifest next update:     Wed 08 May 2024 04:03:56 +0000
Files and hashes:         1: GWImUASBB5GK3xsizfCHyKg095w.crl (hash: FRfQ8J1Htp9+/20bAmhvI2AcPS/mhhChg3U96L2pYzI=)
                          2: g_QkSsvUuF1Hn-Tl_L_iucBafw0.roa (hash: Xc0u5c58ztd3GA9s5zFZg9xgeTImVG0YzkCEC4mdLFA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:38:ec:ab:df:fd:91:c0:5b:64:c5:d9:5f:c0:1b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19622650048107918adf1b22cdf087c8a834f79c
        Validity
            Not Before: May  7 04:03:56 2024 GMT
            Not After : May  8 04:03:56 2024 GMT
        Subject: CN=fd1745a34ae23a9711fd84e50250773c852db5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:ca:ad:4d:0f:08:e4:da:8e:6b:f0:c9:e8:
                    52:55:d1:a1:18:aa:3c:64:a8:6e:c6:52:f7:68:5d:
                    79:5d:d0:87:57:49:a2:e5:3c:31:cf:9f:74:9a:27:
                    02:5a:f4:af:00:43:ef:a1:3e:45:58:87:81:62:43:
                    39:7b:70:11:68:14:8e:19:e3:4a:b7:07:5e:8a:3a:
                    8c:fb:48:81:dd:31:77:f9:be:b6:c4:17:41:92:48:
                    a0:84:12:cc:2e:96:05:7b:b4:b3:a5:f9:d4:af:a2:
                    9a:4f:89:ec:d5:a5:ad:33:ed:6a:df:f1:d6:34:20:
                    20:92:7e:0b:eb:6d:a0:8a:77:b8:3a:91:10:b9:1a:
                    65:7e:a1:fb:97:ac:3e:30:42:e1:2a:de:5d:45:e0:
                    df:3e:a3:2e:a6:31:80:7a:9e:4f:df:bd:8f:c6:00:
                    15:26:33:df:65:d4:cc:1c:01:34:ca:bf:d7:4c:3e:
                    3a:3a:aa:d2:96:7f:bc:b3:e4:61:0d:f9:09:20:1d:
                    b1:50:e5:ad:1c:4f:28:8b:ea:ba:2e:8b:0d:cf:e8:
                    8d:c7:24:46:86:4f:a8:9d:7e:14:45:a6:de:de:b3:
                    f2:49:c3:0f:aa:78:8c:2c:ad:2c:ed:4e:5f:51:b3:
                    69:6f:47:59:fe:37:7c:c7:9d:9c:4b:eb:22:e0:c7:
                    eb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:17:45:A3:4A:E2:3A:97:11:FD:84:E5:02:50:77:3C:85:2D:B5:C5
            X509v3 Authority Key Identifier:
                keyid:19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:36:7e:70:c5:88:03:79:fe:c5:96:28:f8:60:75:e7:76:4a:
         68:d3:45:74:57:a4:31:db:88:81:5c:9d:de:de:6c:15:d9:46:
         69:ca:65:2f:ba:d2:0a:33:e9:0a:de:7f:77:0d:09:01:c6:b1:
         36:79:88:a2:77:e0:0b:da:84:eb:d4:c0:06:52:50:08:e4:ca:
         a3:27:70:07:92:2c:93:09:67:da:5c:3a:b1:30:d5:e6:a5:75:
         9e:ab:ec:88:d1:71:98:f9:3c:08:94:0a:ba:7f:1d:e6:25:03:
         a9:44:25:9c:84:3f:ea:23:db:fa:ba:fa:a1:f7:97:a2:cc:3c:
         0d:e7:d2:4b:6b:16:9a:57:2e:f0:67:eb:d7:d2:60:c0:11:d5:
         b3:6a:de:b5:e0:d5:95:18:5b:a3:1b:88:48:3d:bb:8c:95:66:
         9e:d9:7f:52:b3:cf:a2:98:d5:62:c1:1d:df:36:c6:75:06:dd:
         d0:6a:4c:24:c0:2c:1e:28:c8:f1:a2:73:68:86:8c:ed:55:18:
         f7:7b:7a:d0:19:85:c5:5a:ed:3b:0a:4f:44:ec:3b:ae:23:a4:
         0f:95:3e:d7:de:70:89:4f:77:3f:09:b5:8a:ba:22:88:4a:06:
         3c:a5:cc:db:a5:c1:7e:0f:8c:b2:37:d9:2d:83:aa:42:49:07:
         18:f4:cd:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9ROOyr3/2RwFtkxdlfwBu7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NjIyNjUwMDQ4MTA3OTE4YWRmMWIyMmNkZjA4N2M4YTgz
NGY3OWMwHhcNMjQwNTA3MDQwMzU2WhcNMjQwNTA4MDQwMzU2WjAzMTEwLwYDVQQD
EyhmZDE3NDVhMzRhZTIzYTk3MTFmZDg0ZTUwMjUwNzczYzg1MmRiNWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsELKrU0PCOTajmvwyehSVdGhGKo8
ZKhuxlL3aF15XdCHV0mi5Twxz590micCWvSvAEPvoT5FWIeBYkM5e3ARaBSOGeNK
twdeijqM+0iB3TF3+b62xBdBkkighBLMLpYFe7SzpfnUr6KaT4ns1aWtM+1q3/HW
NCAgkn4L622gine4OpEQuRplfqH7l6w+MELhKt5dReDfPqMupjGAep5P372PxgAV
JjPfZdTMHAE0yr/XTD46OqrSln+8s+RhDfkJIB2xUOWtHE8oi+q6LosNz+iNxyRG
hk+onX4URabe3rPyScMPqniMLK0s7U5fUbNpb0dZ/jd8x52cS+si4MfrwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0XRaNK4jqXEf2E5QJQdzyFLbXFMB8GA1UdIwQY
MBaAFBliJlAEgQeRit8bIs3wh8ioNPecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1dJbVVBU0JCNUdLM3hzaXpmQ0h5S2cwOTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jNTAyYzEtZjMxNC00MGIxLWEwMjQt
OGQxMGZlZTU4NGZlLzEvR1dJbVVBU0JCNUdLM3hzaXpmQ0h5S2cwOTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jNTAyYzEtZjMxNC00MGIxLWEwMjQtOGQxMGZlZTU4NGZl
LzEvR1dJbVVBU0JCNUdLM3hzaXpmQ0h5S2cwOTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTZ+cMWI
A3n+xZYo+GB153ZKaNNFdFekMduIgVyd3t5sFdlGacplL7rSCjPpCt5/dw0JAcax
NnmIonfgC9qE69TABlJQCOTKoydwB5Iskwln2lw6sTDV5qV1nqvsiNFxmPk8CJQK
un8d5iUDqUQlnIQ/6iPb+rr6ofeXosw8DefSS2sWmlcu8Gfr19JgwBHVs2reteDV
lRhboxuISD27jJVmntl/UrPPopjVYsEd3zbGdQbd0GpMJMAsHijI8aJzaIaM7VUY
93t60BmFxVrtOwpPROw7riOkD5U+195wiU93Pwm1iroiiEoGPKXM26XBfg+MsjfZ
LYOqQkkHGPTNfg==
-----END CERTIFICATE-----
Generated at Tue May 7 07:42:43 2024 by rpki-client on console-fra.rpki-client.org