Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0cd7cc-af08-417b-bd58-3e1bb1e29422/1/GyLN9TJJBJ0EkUsYN_wCfWlkzgc.mft
File:                     GyLN9TJJBJ0EkUsYN_wCfWlkzgc.mft (raw, json)
Hash identifier:          bL6WB8wPnjU9v3wzijNWo7A0Z5wjfv7/W0AexGkEpag=
Subject key identifier:   B3:51:74:4F:A1:AF:2B:5D:8A:C0:B5:53:46:9D:26:15:88:7C:88:2D
Authority key identifier: 1B:22:CD:F5:32:49:04:9D:04:91:4B:18:37:FC:02:7D:69:64:CE:07
Certificate issuer:       /CN=1b22cdf53249049d04914b1837fc027d6964ce07
Certificate serial:       018F3AAEF27303525006FCC8167455DF5362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GyLN9TJJBJ0EkUsYN_wCfWlkzgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/0cd7cc-af08-417b-bd58-3e1bb1e29422/1/GyLN9TJJBJ0EkUsYN_wCfWlkzgc.mft
Manifest number:          0551
Signing time:             Thu 02 May 2024 19:01:34 +0000
Manifest this update:     Thu 02 May 2024 19:01:34 +0000
Manifest next update:     Fri 03 May 2024 19:01:34 +0000
Files and hashes:         1: FUCBUnfq9vExPdSUZBigMwy19m4.roa (hash: 51xOrqTrTal3zhwIPYFb5tl4T5wPqsfGyNthayc+j9A=)
                          2: GyLN9TJJBJ0EkUsYN_wCfWlkzgc.crl (hash: 8qzR/HKb5prSE8W0ZmIXPwFDM5+/3YFNeiGFPnlATDQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/0cd7cc-af08-417b-bd58-3e1bb1e29422/1/GyLN9TJJBJ0EkUsYN_wCfWlkzgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/0cd7cc-af08-417b-bd58-3e1bb1e29422/1/GyLN9TJJBJ0EkUsYN_wCfWlkzgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GyLN9TJJBJ0EkUsYN_wCfWlkzgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:ae:f2:73:03:52:50:06:fc:c8:16:74:55:df:53:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b22cdf53249049d04914b1837fc027d6964ce07
        Validity
            Not Before: May  2 19:01:34 2024 GMT
            Not After : May  3 19:01:34 2024 GMT
        Subject: CN=b351744fa1af2b5d8ac0b553469d2615887c882d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:12:92:ec:c5:34:61:69:a9:f6:dc:d9:4a:
                    d4:df:30:30:23:04:57:e1:5b:16:25:19:7d:f5:e7:
                    7e:a0:96:b9:6c:34:c3:59:04:01:ff:2c:64:da:b4:
                    12:3c:50:84:73:05:be:63:1c:12:87:ea:2c:58:c3:
                    0b:25:4f:16:28:7c:b5:73:33:81:e2:e3:b3:9b:98:
                    12:c5:b5:07:b1:78:af:6e:22:1f:e0:37:72:b1:27:
                    c3:78:62:d7:5b:fd:2d:28:9f:fa:cd:2a:4e:a2:63:
                    9c:fa:a3:46:ce:01:40:b0:27:e0:5f:62:8d:f2:e7:
                    12:af:53:da:ec:10:50:0c:33:43:79:20:d7:43:83:
                    23:1d:2b:97:22:3d:b5:0f:de:eb:77:77:98:37:e1:
                    d6:77:3d:34:4c:b6:43:ce:b8:41:9e:1f:35:b6:06:
                    f8:ac:14:fc:a6:61:c8:d4:07:a0:77:dc:1a:1b:88:
                    99:60:37:c6:59:9c:a6:44:ba:40:58:a4:38:a5:79:
                    a7:b3:bb:e7:91:b4:a0:8f:3f:ee:3f:f2:e0:3c:1a:
                    b8:63:52:9f:b4:b6:0f:1f:cd:50:01:7e:aa:3f:ed:
                    24:0c:2e:62:34:77:8d:66:bd:b1:f0:4f:c6:59:15:
                    93:70:b8:d9:1d:ad:7e:c7:60:34:65:52:96:e3:d6:
                    56:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:51:74:4F:A1:AF:2B:5D:8A:C0:B5:53:46:9D:26:15:88:7C:88:2D
            X509v3 Authority Key Identifier:
                keyid:1B:22:CD:F5:32:49:04:9D:04:91:4B:18:37:FC:02:7D:69:64:CE:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyLN9TJJBJ0EkUsYN_wCfWlkzgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0cd7cc-af08-417b-bd58-3e1bb1e29422/1/GyLN9TJJBJ0EkUsYN_wCfWlkzgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0cd7cc-af08-417b-bd58-3e1bb1e29422/1/GyLN9TJJBJ0EkUsYN_wCfWlkzgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:5a:7a:11:bc:0b:1e:b8:84:9f:a4:b4:42:1a:c5:70:ca:b0:
         17:90:ee:ae:16:5a:89:a4:38:fd:da:9f:20:e2:8d:85:33:e5:
         3c:c6:a7:51:12:8c:aa:b7:dd:f5:d7:7c:38:58:d8:c9:6c:cd:
         22:3b:d5:df:eb:e2:7b:4f:51:98:f0:c4:de:42:13:fa:6f:43:
         24:36:6f:5f:65:c4:61:95:cd:3c:13:39:01:28:07:c6:97:15:
         8d:bf:55:29:ee:fb:c4:f4:4d:21:0f:6d:fa:c8:2b:3d:87:66:
         ba:02:91:93:c9:81:83:a8:9f:e8:85:3b:57:f7:1b:3d:a0:af:
         92:b0:d8:a1:57:ff:56:01:68:fb:71:a8:09:97:64:2d:90:18:
         37:8a:c5:33:5d:34:db:95:50:24:35:67:10:35:de:98:53:21:
         b5:8e:a4:41:c5:c0:70:1a:f8:1e:03:6d:81:71:97:4b:30:e7:
         01:78:62:5a:b7:d9:ec:8c:a6:e0:59:a5:03:82:fb:9b:6b:c7:
         f3:2c:98:06:fe:a1:3c:59:0c:11:87:08:c9:d1:43:b8:4f:43:
         d9:f8:2f:59:2b:85:06:12:20:33:46:58:d9:00:43:fc:f2:03:
         1d:f2:61:4a:fe:6b:90:b3:ae:fb:0b:40:a0:da:8a:da:7d:75:
         39:12:f8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:29:14 2024 by rpki-client on console-ams.rpki-client.org