Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
File:                     Gc3YIGweNSxQZeSBeX73evDD3o0.mft (raw, json)
Hash identifier:          QmmHq7qTSDhi7MshcUQgtQ/9zKwyzavV4YPT1RyXzCw=
Subject key identifier:   3B:9F:57:23:C9:A2:07:08:23:BA:3A:45:D6:97:A1:E1:DE:7D:EF:4D
Authority key identifier: 19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D
Certificate issuer:       /CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
Certificate serial:       018F3BF9E5B683ED492A8608D97E3A959EC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
Manifest number:          0806
Signing time:             Fri 03 May 2024 01:03:03 +0000
Manifest this update:     Fri 03 May 2024 01:03:03 +0000
Manifest next update:     Sat 04 May 2024 01:03:03 +0000
Files and hashes:         1: Gc3YIGweNSxQZeSBeX73evDD3o0.crl (hash: c3tQXuFQpk61BBTfh26iw52ulQhu9Jg9uBckOl9bqpQ=)
                          2: _Mia4BN2x0AjDutNB76Ltwdzlys.roa (hash: UM2XPXUwtyN0ZYTG2XEJO6Sv8ihxBBHHukmy6D4un4k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f9:e5:b6:83:ed:49:2a:86:08:d9:7e:3a:95:9e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
        Validity
            Not Before: May  3 01:03:03 2024 GMT
            Not After : May  4 01:03:03 2024 GMT
        Subject: CN=3b9f5723c9a2070823ba3a45d697a1e1de7def4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:af:28:7e:de:83:70:7c:e3:14:c0:f0:ee:b4:
                    d9:ea:e8:ae:be:75:13:43:c7:5a:0e:a2:19:70:f4:
                    64:f3:9f:4b:82:1b:5f:0b:23:3d:28:d5:65:10:b2:
                    32:8f:8d:41:7d:15:66:82:b2:c1:d6:7d:7c:50:c0:
                    e0:c1:b2:f8:41:9f:cb:3c:0c:80:dd:c0:8f:e1:d4:
                    32:8e:9e:e8:c1:55:0d:af:fb:4b:dd:71:01:2f:e8:
                    83:ab:dd:d3:0b:ac:1d:44:40:99:b8:f1:d2:3f:89:
                    18:f2:4c:03:b3:a5:a4:c6:85:51:a7:fb:42:19:b7:
                    6d:08:74:a3:5c:bb:f6:21:e3:0c:11:ea:0a:7a:21:
                    52:60:80:09:72:45:a9:fb:d1:15:45:1e:b6:79:26:
                    ae:49:ba:a4:07:23:22:66:72:f7:b1:2d:b8:94:11:
                    18:42:77:23:34:a5:af:78:0e:e4:57:c4:47:09:d4:
                    6f:63:f4:af:8b:55:68:12:f0:bf:7a:bf:ec:e2:52:
                    b9:ff:b2:ee:a9:b8:5d:e9:e6:7a:58:02:9e:dc:77:
                    c5:04:8a:cc:ba:0e:92:26:ca:6f:1b:ed:62:e8:02:
                    d6:68:c2:22:de:e6:e8:ad:e9:f1:a5:ac:50:23:69:
                    88:e4:b5:0b:d8:69:c9:e2:aa:1b:71:eb:09:74:68:
                    2b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9F:57:23:C9:A2:07:08:23:BA:3A:45:D6:97:A1:E1:DE:7D:EF:4D
            X509v3 Authority Key Identifier:
                keyid:19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:6e:b4:7c:2a:78:ad:6f:94:ae:b5:0f:d8:41:0f:0e:92:0f:
         83:68:59:4e:b5:79:f3:78:55:58:b9:31:5b:09:ef:6b:e4:3f:
         76:06:01:7f:78:24:90:11:25:04:50:61:44:8c:18:e4:0a:9d:
         c9:16:6a:26:ee:78:e9:32:2a:ea:b3:89:9b:46:d8:1d:c3:94:
         c2:5c:30:50:84:69:a5:e1:da:7a:ea:4f:56:ea:bf:34:52:e8:
         b8:af:4b:5a:02:fb:fe:3e:7f:01:3f:d5:29:31:d9:89:ca:cb:
         e0:03:65:ad:e1:73:46:fc:af:05:1b:7d:99:ef:44:8e:77:94:
         d2:fd:3f:57:76:4a:1a:95:1b:cb:c0:2b:8d:66:f3:a8:f8:35:
         22:eb:92:9d:4a:dd:f6:fe:ed:29:23:bd:ae:48:24:64:2c:04:
         37:7b:fc:78:fe:9d:b0:7c:bf:40:10:98:96:03:d1:f9:4a:08:
         2c:d7:d2:dc:6a:1e:0a:b9:16:a9:a7:53:3c:9e:3f:be:0e:47:
         a6:68:86:de:63:91:c5:d5:44:24:5b:14:c3:78:5e:98:fb:6f:
         f3:bc:d7:5d:10:6a:7c:57:40:2a:ca:01:20:b5:cb:94:c2:c3:
         e3:b4:d2:f6:bd:4d:43:32:e6:ec:42:4c:5f:e4:bf:1b:66:60:
         eb:8b:a2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:50:53 2024 by rpki-client on console-ams.rpki-client.org