Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
File:                     GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft (raw, json)
Hash identifier:          75WihrCPAjGmuRugYttU5gnhQxqWZ4Clx2iEQvbCn+g=
Subject key identifier:   2A:53:45:8D:A7:18:8D:74:83:FB:53:DF:9A:1E:5C:1B:83:53:44:AC
Authority key identifier: 18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70
Certificate issuer:       /CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
Certificate serial:       018F41C342504FE09E25F43A6DB36F83BD75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
Manifest number:          0E24
Signing time:             Sat 04 May 2024 04:01:06 +0000
Manifest this update:     Sat 04 May 2024 04:01:06 +0000
Manifest next update:     Sun 05 May 2024 04:01:06 +0000
Files and hashes:         1: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl (hash: cL+LN/N6cYmzP/93Tq+lV40hEw7Yqq1sJmajIOuVSG0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c3:42:50:4f:e0:9e:25:f4:3a:6d:b3:6f:83:bd:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
        Validity
            Not Before: May  4 04:01:06 2024 GMT
            Not After : May  5 04:01:06 2024 GMT
        Subject: CN=2a53458da7188d7483fb53df9a1e5c1b835344ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5e:82:c3:e2:54:b0:21:05:e9:d1:94:1e:30:
                    20:e8:37:70:bb:32:d7:ef:2c:66:68:2f:56:6b:b1:
                    a6:89:12:9d:fc:d9:25:1b:12:00:f1:be:0a:6b:6a:
                    d1:94:31:46:98:e8:9b:30:d3:19:89:01:17:3c:05:
                    b6:9b:8f:a3:3e:87:b1:de:22:5f:1f:50:a6:79:b9:
                    e0:8d:7f:8f:d0:c3:be:99:f4:73:f2:05:ed:aa:5d:
                    54:5e:68:de:87:1d:86:66:37:ff:cc:33:fb:97:a5:
                    38:72:cd:f1:3a:7d:46:3a:53:63:69:e5:99:6d:12:
                    1b:ef:95:55:56:aa:c5:f1:03:ea:90:8e:37:8b:84:
                    f5:ed:90:21:ad:42:c1:66:4d:01:8a:83:63:54:86:
                    00:b5:1d:21:be:ee:8a:cf:8c:3f:7d:32:24:5f:0a:
                    90:34:ba:e5:9a:e9:01:05:0f:88:99:6c:99:79:b7:
                    91:a8:4c:ce:af:83:51:e7:14:47:88:6e:88:cf:fe:
                    5c:07:dd:b2:d0:73:db:fa:1b:ca:80:91:d8:9e:7d:
                    a0:ee:e5:12:1c:43:b2:54:96:e0:cb:6a:50:14:83:
                    82:90:b9:a6:36:f1:34:91:a6:f4:17:64:89:51:15:
                    78:3d:e3:15:dd:bd:7a:62:59:1a:07:e7:fe:34:7b:
                    ab:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:53:45:8D:A7:18:8D:74:83:FB:53:DF:9A:1E:5C:1B:83:53:44:AC
            X509v3 Authority Key Identifier:
                keyid:18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:95:b2:36:b5:fd:57:cb:d2:27:c4:fe:60:c2:98:60:81:aa:
         af:73:67:ca:e7:10:19:81:b3:6a:03:1c:7d:ca:42:32:6f:a6:
         f1:53:03:c3:54:41:b8:a6:bb:9a:59:65:cc:a9:95:ab:3a:14:
         91:00:e8:27:84:7d:f4:83:78:3d:5d:64:fa:f1:40:28:e7:e1:
         97:88:8b:80:e4:7a:47:64:cc:bf:f8:93:e8:fb:21:d2:b8:ad:
         ec:28:4a:17:97:1f:9c:73:da:0d:6f:3c:1e:89:a9:03:bd:82:
         d1:10:8d:88:32:30:ab:c9:0f:49:8a:38:a2:51:c4:d2:8e:27:
         bd:7d:44:3f:3c:55:a2:e8:a4:d3:fe:cb:88:24:58:40:07:f3:
         75:89:1f:c8:bd:41:a4:98:b5:3b:0f:6c:e5:c1:8b:77:6b:cf:
         1c:24:c5:98:db:52:3a:ba:a1:50:bf:12:a7:33:53:c9:16:27:
         c1:91:be:16:3e:dd:29:2d:58:7d:31:78:b5:ce:ed:20:17:dd:
         2a:3a:bd:85:5f:77:1b:4c:69:c9:81:d9:cd:ba:b8:c7:2e:31:
         6e:79:c9:86:ed:57:5e:01:1d:8a:61:97:7b:bc:cd:31:ba:22:
         04:8b:43:41:4b:6f:2e:7d:a7:e1:f6:fb:b0:f1:d5:17:3c:06:
         30:f5:7b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:49:55 2024 by rpki-client on console-fra.rpki-client.org