Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
File:                     GckQlAa9oSZuVvZm6MmDWNdD3XY.mft (raw, json)
Hash identifier:          wZmO0TI8/AJpp5G6PKAlhSOE7/43AHi7q7eeBE+seNw=
Subject key identifier:   B1:FE:BB:02:05:92:9F:10:05:28:DB:74:59:79:46:AD:93:B1:56:53
Authority key identifier: 19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76
Certificate issuer:       /CN=19c9109406bda1266e56f666e8c98358d743dd76
Certificate serial:       018F5138E27323E868FEC857F028B44DF819
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
Manifest number:          08BC
Signing time:             Tue 07 May 2024 04:03:53 +0000
Manifest this update:     Tue 07 May 2024 04:03:53 +0000
Manifest next update:     Wed 08 May 2024 04:03:53 +0000
Files and hashes:         1: GckQlAa9oSZuVvZm6MmDWNdD3XY.crl (hash: QXZUslPVlz4ahQuhCKlEy3yNDcubhRL1fccdvCxIBJQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:38:e2:73:23:e8:68:fe:c8:57:f0:28:b4:4d:f8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c9109406bda1266e56f666e8c98358d743dd76
        Validity
            Not Before: May  7 04:03:53 2024 GMT
            Not After : May  8 04:03:53 2024 GMT
        Subject: CN=b1febb0205929f100528db74597946ad93b15653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:31:8c:53:35:96:74:ef:da:f5:5c:09:a1:74:
                    5d:c4:ee:03:a5:ed:89:88:19:12:17:d6:ea:f5:17:
                    9e:8a:65:83:dd:9e:e0:13:42:e6:16:84:fc:a4:d5:
                    70:52:02:e6:92:27:f3:24:4d:a0:1d:86:9d:cf:f1:
                    81:60:35:b3:38:ac:a9:e4:22:af:5a:2f:8e:c9:19:
                    27:81:82:92:5e:7f:77:83:92:96:36:e7:ee:a4:3c:
                    ca:3b:83:28:7e:43:de:77:63:9c:67:f3:6a:8a:aa:
                    23:19:b5:f9:c8:0e:fb:96:f8:32:09:b4:96:f4:76:
                    59:e7:7c:f7:5b:1c:76:23:db:81:6b:22:29:c7:d2:
                    f7:b2:90:84:20:19:eb:22:c8:90:43:b8:37:bc:14:
                    5a:56:b0:1d:23:6e:54:15:cf:30:7c:05:7e:54:0d:
                    09:fa:90:b9:e3:4e:df:bc:2e:af:fd:53:52:87:15:
                    55:b2:96:16:1f:30:23:08:5e:c1:eb:ed:f9:59:53:
                    33:81:27:6c:8b:37:71:34:c7:ee:45:fc:7d:4a:09:
                    a1:1f:8f:d5:54:93:5c:d0:22:3d:b3:f6:1a:59:67:
                    49:ea:af:f0:88:3a:fe:cf:8e:1f:ae:60:ea:ee:ad:
                    b9:76:10:04:92:c9:81:ce:b3:4f:29:0d:4a:c4:5c:
                    d7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FE:BB:02:05:92:9F:10:05:28:DB:74:59:79:46:AD:93:B1:56:53
            X509v3 Authority Key Identifier:
                keyid:19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:59:2e:a0:db:30:e6:c7:8e:7a:69:45:f0:8e:c6:30:d8:2c:
         14:e2:55:00:fc:bd:be:6c:e5:2b:9d:84:f1:37:75:e2:78:52:
         7e:06:15:1f:3e:ac:96:61:60:90:84:98:26:9e:47:a5:18:bf:
         cd:a9:c8:78:52:d0:98:d5:33:eb:71:4e:9b:41:23:c9:6a:df:
         5a:85:df:f6:1c:d6:e6:7c:58:df:f4:d0:40:ce:29:e6:0a:89:
         ad:9c:61:a2:ca:52:a0:97:92:e0:d4:a7:47:c6:ec:ac:8e:4a:
         0d:f1:b6:a6:a4:53:ee:34:cf:56:a1:19:03:64:df:ee:22:5a:
         b3:03:d1:c1:37:e1:34:89:c0:41:5a:fd:b4:e4:af:d8:40:62:
         62:06:5d:80:e1:fe:92:e7:69:23:e8:37:cc:f4:c6:4b:32:e9:
         fb:e9:ac:8a:aa:03:48:1a:01:76:00:9b:26:f4:70:d5:67:1e:
         3f:4a:16:51:bb:f7:df:1c:77:9d:fb:e9:28:ef:68:5a:df:7f:
         99:f4:26:6e:ab:87:2d:a3:7e:99:26:b5:9b:27:31:bf:48:17:
         26:aa:e1:a0:52:61:b5:af:b7:ec:b0:0e:42:fb:f7:b3:ef:ab:
         6f:cf:b7:42:70:b2:2c:db:e5:68:9e:5c:40:fe:53:c8:e8:f7:
         88:c2:c8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 13:13:33 2024 by rpki-client on console-fra.rpki-client.org