Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
File:                     G1NNR62NtYlKX8k0LkVY-U5PF_E.mft (raw, json)
Hash identifier:          JvYi5nPu7BhcApxFleAr3f9EL/tfVPybWn2brxH3OOE=
Subject key identifier:   B1:68:5A:2A:09:A6:75:E5:FD:96:56:D0:CF:F0:A3:80:D8:3D:CA:3D
Authority key identifier: 1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1
Certificate issuer:       /CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
Certificate serial:       018F430D3B2BE6B21D5E05DA79D218667B2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
Manifest number:          10AA
Signing time:             Sat 04 May 2024 10:01:31 +0000
Manifest this update:     Sat 04 May 2024 10:01:31 +0000
Manifest next update:     Sun 05 May 2024 10:01:31 +0000
Files and hashes:         1: G1NNR62NtYlKX8k0LkVY-U5PF_E.crl (hash: oxiC/faE7s78g9wVLvVpzMfBfOunC9Gi7bQZ9jAlCwM=)
                          2: ZadXmpcwizt6YUTZbfn34lXbwvw.roa (hash: X1mZi6oW1yi+ZFN8GF2A1pWee8MgDZkWAnva9pqaT4E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:0d:3b:2b:e6:b2:1d:5e:05:da:79:d2:18:66:7b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
        Validity
            Not Before: May  4 10:01:31 2024 GMT
            Not After : May  5 10:01:31 2024 GMT
        Subject: CN=b1685a2a09a675e5fd9656d0cff0a380d83dca3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:2c:3d:33:18:e9:ad:07:17:dc:dd:d3:93:
                    ba:ca:3c:2c:cc:d2:c5:3c:7b:7a:95:b2:62:1e:35:
                    f7:32:c0:ff:7b:41:aa:3c:41:ed:0d:b4:89:b2:4d:
                    ab:51:f4:2a:20:d3:a0:0d:74:ab:06:1a:a7:a5:7a:
                    cd:f6:59:ac:e7:25:f7:21:e7:a1:00:70:a9:96:73:
                    de:81:0b:b0:48:8f:a5:3b:25:db:7d:a5:23:18:de:
                    df:ef:4d:7d:75:43:cb:a9:98:fd:46:89:7e:40:b6:
                    19:03:17:1e:08:94:72:c4:bc:63:1a:eb:9d:2d:ad:
                    2f:96:e0:bf:db:05:7a:ee:3f:e0:ba:cc:5c:16:64:
                    dc:0e:c8:e2:9e:de:c9:48:05:37:4f:e3:68:3e:fa:
                    09:83:28:fa:9a:f2:7a:54:8d:18:6b:1e:d7:34:ef:
                    3f:14:e9:36:33:46:0d:bb:c0:53:2f:69:d0:cc:18:
                    43:39:64:ab:8e:70:c6:ef:0f:d0:5e:14:76:e2:c8:
                    05:e8:24:43:53:8d:1a:60:7c:f4:84:7b:21:4e:3a:
                    ac:22:e4:a6:0c:f1:82:50:37:5a:c2:28:f0:7c:c1:
                    fb:8a:e7:c7:a7:83:a6:d7:2b:02:7b:a0:28:93:ca:
                    ee:e6:45:f5:34:2b:de:fc:5d:a4:df:5c:b9:83:7e:
                    a9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:68:5A:2A:09:A6:75:E5:FD:96:56:D0:CF:F0:A3:80:D8:3D:CA:3D
            X509v3 Authority Key Identifier:
                keyid:1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f4:de:df:47:ac:b5:e3:3d:9c:37:88:51:59:d6:a6:2f:3b:
         69:3c:c6:4e:9c:b9:a8:37:cf:f4:88:f5:d6:a7:56:90:6b:c0:
         d1:16:c7:52:88:fe:5e:e4:60:e9:83:9e:38:29:2e:5d:fe:e0:
         59:3e:3e:fa:51:be:8d:c6:0f:5a:c3:18:5a:e0:58:86:b5:33:
         3f:ee:da:d8:18:82:b6:e7:de:f3:44:37:e3:f3:f6:7a:fb:28:
         bd:8d:d8:9b:e5:36:16:a5:93:b2:0a:d4:f9:7d:9a:c0:90:c8:
         f0:a5:bf:dc:be:c8:d3:6f:3d:57:6d:57:1e:53:cc:af:ac:ea:
         fc:46:e8:08:58:46:c9:4b:52:26:87:92:f6:55:01:2b:b8:83:
         ca:0f:b9:cb:4b:3f:38:97:59:dd:d0:45:d2:13:49:df:3e:10:
         10:63:d2:fe:89:b1:c8:4b:25:ed:48:62:dd:46:f5:20:da:a7:
         ad:bf:39:ee:99:ea:74:e2:9e:62:ba:90:12:66:34:c0:4b:00:
         1d:67:4c:50:dc:f7:24:32:7d:e9:4c:e4:66:5f:45:55:b3:8b:
         47:08:6a:8d:10:b0:63:b8:78:8d:9e:0c:2a:7c:27:2c:44:f8:
         b2:8d:ea:8b:cd:40:a4:df:1d:3d:59:69:a7:8d:0e:59:92:32:
         dd:90:32:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:24:48 2024 by rpki-client on console-ams.rpki-client.org