Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
File:                     GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft (raw, json)
Hash identifier:          jeAw7hLT0ohHH4nm2N9h2PqRKgtb1smrjMOv4lu0z+A=
Subject key identifier:   80:70:B7:49:32:C5:6E:46:DC:83:BC:84:F0:82:7D:FF:60:AB:E1:58
Authority key identifier: 18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70
Certificate issuer:       /CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
Certificate serial:       019367EABB394D65057014DCC4FF2FDE4694
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
Manifest number:          104A
Signing time:             Tue 26 Nov 2024 10:00:56 +0000
Manifest this update:     Tue 26 Nov 2024 10:00:56 +0000
Manifest next update:     Wed 27 Nov 2024 10:00:56 +0000
Files and hashes:         1: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl (hash: sE9owcokVYjH1bEpigSRhdJQr0N6AGmrCQd9liPESps=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ea:bb:39:4d:65:05:70:14:dc:c4:ff:2f:de:46:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
        Validity
            Not Before: Nov 26 10:00:56 2024 GMT
            Not After : Nov 27 10:00:56 2024 GMT
        Subject: CN=8070b74932c56e46dc83bc84f0827dff60abe158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5a:92:b0:ec:f5:4c:43:f0:b7:b4:9a:ba:b9:
                    77:d0:c4:e7:6e:4d:5e:00:1c:98:73:fb:47:20:d1:
                    5a:0b:d8:ca:82:80:2d:c4:67:23:72:c4:b5:a5:76:
                    54:6d:73:a5:e0:43:a8:46:88:1e:36:11:5a:1c:a6:
                    05:c4:39:47:f4:aa:2c:49:9b:37:1b:5f:7a:be:7c:
                    c5:26:5a:37:d8:cd:05:41:a8:26:1e:49:1b:80:2f:
                    38:03:67:75:87:ba:f6:16:71:bf:6b:e1:ad:71:6f:
                    ff:ff:13:12:4e:7e:da:78:92:00:e0:d5:35:5d:41:
                    93:5a:74:16:db:a0:55:a1:bd:1b:1b:85:78:db:91:
                    79:4b:60:d7:42:06:aa:ac:33:d1:43:01:e0:73:97:
                    3d:b7:90:0b:fc:ff:26:d3:ef:87:89:24:ff:6e:c8:
                    68:12:16:6f:7f:17:d8:4f:0e:2c:c4:30:fd:8b:7b:
                    98:4a:74:fd:1a:b4:b0:c0:30:3f:e7:0f:e1:ee:99:
                    61:d7:37:f4:01:ed:26:b9:d7:28:37:2b:96:1c:2e:
                    86:cf:73:0d:83:a7:87:58:76:00:3a:ef:93:74:56:
                    b4:4d:cd:a8:3f:24:44:50:3b:4b:f8:82:c0:bc:81:
                    bb:34:52:f1:f3:e8:ce:22:c0:81:1a:de:3a:f0:7b:
                    e2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:70:B7:49:32:C5:6E:46:DC:83:BC:84:F0:82:7D:FF:60:AB:E1:58
            X509v3 Authority Key Identifier:
                keyid:18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:7c:7b:48:c8:c8:2f:16:23:d3:15:03:10:81:fb:eb:9e:97:
         d5:e4:d5:50:ad:5d:2a:90:b0:a7:b1:9e:15:6d:ef:27:d2:e1:
         87:cf:0a:7a:aa:20:70:e8:00:64:f0:c8:87:8a:b6:0b:03:13:
         d3:15:34:79:32:23:45:c8:53:53:56:27:71:b6:c0:b3:01:d8:
         70:85:d7:e9:5e:15:4b:67:10:cf:76:a5:da:d8:a9:77:d6:06:
         2f:a0:50:61:07:1a:64:69:e8:e5:26:39:93:71:a2:c1:92:46:
         79:e1:33:9e:29:ab:21:01:2d:a0:7f:22:c9:ed:3d:e2:61:17:
         9a:d4:69:2d:94:a9:b7:c3:10:7c:11:a2:9b:41:a7:59:1a:7b:
         c1:95:36:3e:1f:8a:e0:29:a2:07:01:b1:da:fb:8f:1d:48:0d:
         e9:2b:0d:a2:f6:a2:ce:8e:f6:85:9d:57:e3:36:5d:d7:55:af:
         b5:52:26:9a:73:77:96:12:6f:27:b1:4a:e0:16:4a:d8:7b:61:
         f9:60:49:38:44:0c:ee:63:c6:8b:a5:42:1c:9f:4d:e8:9f:39:
         a6:e4:08:92:56:eb:9c:72:12:8f:6a:a3:36:99:59:ba:eb:41:
         5f:d2:46:13:d9:45:97:ff:25:12:2c:52:a1:cb:f4:67:3d:73:
         57:ca:3c:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNn6rs5TWUFcBTcxP8v3kaUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZDAwZjY1MmU1ZjZkYjM1NmNiOTNkMjQzYTZjN2FjNmI5
NDVjNzAwHhcNMjQxMTI2MTAwMDU2WhcNMjQxMTI3MTAwMDU2WjAzMTEwLwYDVQQD
Eyg4MDcwYjc0OTMyYzU2ZTQ2ZGM4M2JjODRmMDgyN2RmZjYwYWJlMTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FqSsOz1TEPwt7Saurl30MTnbk1e
AByYc/tHINFaC9jKgoAtxGcjcsS1pXZUbXOl4EOoRogeNhFaHKYFxDlH9KosSZs3
G196vnzFJlo32M0FQagmHkkbgC84A2d1h7r2FnG/a+GtcW///xMSTn7aeJIA4NU1
XUGTWnQW26BVob0bG4V425F5S2DXQgaqrDPRQwHgc5c9t5AL/P8m0++HiST/bsho
EhZvfxfYTw4sxDD9i3uYSnT9GrSwwDA/5w/h7plh1zf0Ae0mudcoNyuWHC6Gz3MN
g6eHWHYAOu+TdFa0Tc2oPyREUDtL+ILAvIG7NFLx8+jOIsCBGt468HvimQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBwt0kyxW5G3IO8hPCCff9gq+FYMB8GA1UdIwQY
MBaAFBjQD2UuX22zVsuT0kOmx6xrlFxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR05BUFpTNWZiYk5XeTVQU1E2YkhyR3VVWEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi81NmU2ZjAtZTM2Ni00NWNjLTliOGQt
NDcxMTM3MmRiYTE2LzEvR05BUFpTNWZiYk5XeTVQU1E2YkhyR3VVWEhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi81NmU2ZjAtZTM2Ni00NWNjLTliOGQtNDcxMTM3MmRiYTE2
LzEvR05BUFpTNWZiYk5XeTVQU1E2YkhyR3VVWEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnx7SMjI
LxYj0xUDEIH7656X1eTVUK1dKpCwp7GeFW3vJ9Lhh88KeqogcOgAZPDIh4q2CwMT
0xU0eTIjRchTU1YncbbAswHYcIXX6V4VS2cQz3al2tipd9YGL6BQYQcaZGno5SY5
k3GiwZJGeeEznimrIQEtoH8iye094mEXmtRpLZSpt8MQfBGim0GnWRp7wZU2Ph+K
4CmiBwGx2vuPHUgN6SsNovaizo72hZ1X4zZd11WvtVImmnN3lhJvJ7FK4BZK2Hth
+WBJOEQM7mPGi6VCHJ9N6J85puQIklbrnHISj2qjNplZuutBX9JGE9lFl/8lEixS
ocv0Zz1zV8o88Q==
-----END CERTIFICATE-----
Generated at Tue Nov 26 17:39:29 2024 by rpki-client on console-ams.rpki-client.org