Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
File:                     GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json)
Hash identifier:          bFxq1deWlQyfwJx7w2tZGGNRkJz3pS82/SYGOMWNGDQ=
Subject key identifier:   FF:71:2A:2B:02:1C:9D:0D:AF:4C:09:2C:81:F9:31:8E:03:11:60:FB
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       0193523E02939ECE154D6CCB45E1D52D2081
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
Manifest number:          1367
Signing time:             Fri 22 Nov 2024 05:00:15 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:15 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:15 +0000
Files and hashes:         1: 4lwVG1bD2QCCuymLdKICzqk5Xh0.roa (hash: x3JEQC6BlkPD/39Y4KcmG1Qb7J6NIhxPRPtkXVEUKXo=)
                          2: 6spe-Z-WPppBJBlHaydnAS4q4dU.roa (hash: UurQ39M2tDzHsfJG0CmGF/02ARXkukk90uaNjwJYtUc=)
                          3: 9EvgLkXcD5z1yMacnFd67G_n0Yo.roa (hash: FYaTan8YNXOSwmIGifLrDElRPFxbFtY1kIADzyDghnw=)
                          4: BmdjaS1vNDjNh4B-1vZW2TqI1s0.roa (hash: vayW4tRByKqm24S2h0GGsg37A5tclZ3fyFJ5m4wiogo=)
                          5: EAmAN7Fw8CRLrAi-wjzlxoclIFU.roa (hash: Xgou1ZdsrQuHiGvk6ABuM2NQMHmxiAd+nnKP5xJGL2Q=)
                          6: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: cVXrP21turOawm3kVaMrIrQ+mWxHxnoHUNu4MDxCpP0=)
                          7: M_0EWQ-S6oRhYKpDKPlGFevPi3E.roa (hash: qQnPDOAo1JdAJrkyRa3xK6LV+dYljF63JzCx1Bo/bUk=)
                          8: TRyxfiyJxt-8QKrN302pgPN2aeA.roa (hash: YPXhUnz+yeoxDZ2Hd/eBcsG5z69fSD0ys05j1dHqf8s=)
                          9: U-WYw2aFQF1bksK7_MJQKVOR5sA.roa (hash: J4jGn15i+W9PjwNd2R8kmkIG0gY5Djr3EuP9oRdvY9o=)
                          10: WQemVUwa8HxrW5goF2k6y4OORDE.roa (hash: JaGpjVOSEFKYfQwsF5fhGTwZmOeoiBghT/00dEDg6xw=)
                          11: Ww-HGz8DaNTEkcIce9ym0I_rOeA.roa (hash: jNNxfQFFewdiFBAaOdS8EvqifrtmNYJMexogZCV8vIs=)
                          12: XzG0wK6NKOomj9iAgqAl48XVloQ.roa (hash: tM7PFJNzwDdoePfyF/2D6qDSesfIEJ6J2o4dD63N2CA=)
                          13: cw4i9_rju5qfpltGYM4WAWOc57Y.roa (hash: IjUnsTLLMojD/667nA2vMdb0Uo9iHDHiVz4ngcTv8Xs=)
                          14: dp2dTM0gcVnhqE5TemzrFaAij4o.roa (hash: Udlk4wxCbwmHl+EXnwe/a6Jb4joon5eFTjReM32oGaM=)
                          15: eyscAc5Wy6iLIHTRZtv21y3soo8.roa (hash: 3H5it5/OK1kof6vD4SjmVamBRI8pJlG3b8HsqfE4yxc=)
                          16: fBR_ShCHwMbUZ2BaDczKo-_jMUI.roa (hash: q+xAbCLdKjW8jkuTwKgvKQD82qnOLwY4ZSA6f9M1dQk=)
                          17: iTsYIYGMEILzzTqPD6HL_IpWULA.roa (hash: HKZXv97DDddVrt6fYnTx+wRMS2caItgz6HV/ZWxUTQQ=)
                          18: jLXy7U84-pujNwCX8FoB4TUzii4.roa (hash: X4pZf3ZlkwQrMjdZUBKB5VNGdW/dNnziV7WNdulfJEs=)
                          19: kKwX08ZswU2GmmWJBHJ9inQatNA.roa (hash: d350c+a2bPKOjBUc3aqRqkp6TGssgDuOfXpapNeKFVw=)
                          20: k_XU4Df8ZVERk8Ig8FmCPOq1PLY.roa (hash: m8mSFvZrAjstrKpHQH3jqpL/gnemlQaabeYrewju10Q=)
                          21: uAhJSfXz0z0VqG9c7B2yaqz4CbU.roa (hash: wjhIYnE1IwAU0gRH6YVx7QY1pW7ja/VuZpzOqNCDvKA=)
                          22: y1JPRqOFN5hGJcQVDznGCnOd_ms.roa (hash: NEWwO/i929geT9k9bm9C2rBWm5F87xxQ/lX1Ws9iEP8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:02:93:9e:ce:15:4d:6c:cb:45:e1:d5:2d:20:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Nov 22 05:00:15 2024 GMT
            Not After : Nov 23 05:00:15 2024 GMT
        Subject: CN=ff712a2b021c9d0daf4c092c81f9318e031160fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:46:45:8e:0e:81:14:fb:15:a1:6f:93:dc:20:
                    93:6b:32:8a:c9:e9:17:92:06:7f:d1:40:94:92:07:
                    ba:04:63:c6:0f:94:6b:ca:b2:bd:71:4a:d6:8d:32:
                    3e:9e:af:26:47:5d:3c:cf:85:fd:44:7f:75:76:77:
                    f7:be:9c:fd:30:2a:46:ba:a2:4a:84:ff:8f:f7:55:
                    5c:8e:3d:88:0c:4d:3c:d7:5e:3d:fc:fe:a2:77:02:
                    5c:9e:cc:e3:7c:11:01:c7:de:b1:df:b0:76:14:8f:
                    3c:09:35:20:af:a3:7f:d5:ce:82:35:58:82:77:7c:
                    3d:b7:f5:eb:3d:49:f1:ee:5d:08:20:03:d4:3f:7e:
                    7b:84:87:e2:12:af:c4:6d:ab:0b:f5:17:ef:5c:e8:
                    3a:7e:bf:a1:48:60:9e:a9:65:1b:80:c4:03:66:e6:
                    4b:1e:84:c0:6e:6c:ef:b2:7b:7e:d1:b6:81:77:d1:
                    17:91:64:c7:58:71:bc:26:4f:78:11:ab:61:a1:5f:
                    6e:41:86:ff:c8:38:10:cc:96:87:b0:42:19:ff:ff:
                    30:93:b2:d0:45:54:46:2a:00:0a:c6:d3:0a:c3:59:
                    a4:da:20:0a:0e:e5:20:14:52:2e:a6:ea:90:3a:8d:
                    b4:89:d0:96:c2:15:dd:37:9c:e9:48:e8:53:21:cf:
                    77:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:71:2A:2B:02:1C:9D:0D:AF:4C:09:2C:81:F9:31:8E:03:11:60:FB
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:66:54:07:87:a3:dc:a1:69:f3:d0:42:1d:32:01:8c:7f:c7:
         7a:ae:be:fd:28:f8:0c:e1:b6:bd:3b:e3:8c:55:20:6b:93:00:
         84:26:91:16:f4:9a:a3:7a:44:d9:bc:61:52:a9:ca:6c:8e:37:
         7e:70:4b:95:ad:4b:24:ae:79:03:ec:e4:21:6e:d4:37:a9:d8:
         1f:68:d9:cc:c1:25:ed:82:85:4c:4f:b9:96:b9:cb:02:fc:3d:
         36:16:38:83:70:96:98:27:8e:f5:70:98:7e:15:96:12:2a:5e:
         da:4c:91:84:a5:fa:3d:72:d8:fa:47:c2:53:8a:9b:e3:30:08:
         d7:3a:df:70:47:5b:c9:8f:c3:2c:55:f6:87:3c:fa:1f:f4:7e:
         99:83:e2:90:69:17:08:00:d6:b1:cf:17:f2:76:09:b4:80:f6:
         82:39:33:a9:f3:f3:e7:8a:e7:e0:51:01:62:fa:46:1b:50:5c:
         38:53:d6:c1:37:6d:ed:1c:1f:df:bf:31:6d:c9:25:11:62:15:
         7e:df:7a:ee:b7:6f:e5:9e:60:a0:06:c9:db:8c:85:52:14:12:
         a7:fa:87:cf:d7:28:04:18:3a:e1:ac:e0:7c:bf:7f:d3:d1:04:
         64:3c:e4:5c:77:d5:fd:22:1e:7e:85:37:62:c8:b7:84:b6:47:
         b3:7a:65:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:39:49 2024 by rpki-client on console-ams.rpki-client.org