Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
File:                     GbvChJjrFpWQsGmgBUFMQaF5skA.mft (raw, json)
Hash identifier:          3xZiUhqBps1ssXr9SX7WCNRoJML3RS3O0CM0qfNQYZ0=
Subject key identifier:   61:64:04:C5:17:0D:79:7A:BA:97:44:81:99:D0:CB:60:3A:C5:1B:E4
Authority key identifier: 19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40
Certificate issuer:       /CN=19bbc28498eb169590b069a005414c41a179b240
Certificate serial:       018F41C3C1721B712984664F74EABA3CFF6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
Manifest number:          1153
Signing time:             Sat 04 May 2024 04:01:39 +0000
Manifest this update:     Sat 04 May 2024 04:01:39 +0000
Manifest next update:     Sun 05 May 2024 04:01:39 +0000
Files and hashes:         1: GbvChJjrFpWQsGmgBUFMQaF5skA.crl (hash: 64brk1JxdW506ceIdqT6ZiKtQcNpEFacOyy3Si93R4c=)
                          2: Tr6Vg2EJ_5aQfJ4wlR4WnLRprpg.roa (hash: eJ2p95lV+HX/G3K34f5+FS1ReGBTTAtNSa5DxQoZOqE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c3:c1:72:1b:71:29:84:66:4f:74:ea:ba:3c:ff:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bbc28498eb169590b069a005414c41a179b240
        Validity
            Not Before: May  4 04:01:39 2024 GMT
            Not After : May  5 04:01:39 2024 GMT
        Subject: CN=616404c5170d797aba97448199d0cb603ac51be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:25:d8:da:27:d0:ca:0f:21:42:24:54:a7:d8:
                    7e:c5:ef:c0:f4:03:9a:36:39:ba:c3:ff:b1:51:5e:
                    e1:c5:61:7c:06:70:44:73:c1:b0:bb:4d:d6:2a:90:
                    26:ed:ae:17:ee:af:b8:dc:e6:77:78:24:68:0c:02:
                    bf:11:66:03:f0:a2:5a:c9:28:14:b1:0c:a5:c6:ba:
                    a3:f0:94:d3:04:fa:4b:c2:00:fb:07:c7:72:8f:5c:
                    d1:67:43:3d:8a:c2:21:b4:9e:1c:e7:60:7a:19:2e:
                    b7:d7:b9:77:c6:06:5f:05:cd:95:77:94:6b:19:51:
                    75:a1:f9:fc:1a:6f:f1:da:db:24:3e:18:aa:3c:50:
                    97:cf:48:9c:1d:7e:8d:b1:48:86:79:62:11:3b:36:
                    a4:fd:3e:a0:75:20:0a:61:ea:8a:35:a1:5a:57:49:
                    1f:d6:64:1b:62:5b:18:b0:ce:6e:f6:11:e8:7c:cf:
                    4b:5a:92:6d:48:f5:09:e8:4a:9f:32:91:15:11:58:
                    38:28:1f:9f:04:6c:ba:76:50:84:63:76:5b:e0:7c:
                    da:8e:10:da:c6:aa:a6:17:eb:9e:65:07:68:b2:07:
                    12:3c:cc:4d:21:57:a3:9d:91:f4:25:75:5b:87:e2:
                    c3:89:b7:4c:35:29:17:8f:7e:99:05:44:9b:90:19:
                    55:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:64:04:C5:17:0D:79:7A:BA:97:44:81:99:D0:CB:60:3A:C5:1B:E4
            X509v3 Authority Key Identifier:
                keyid:19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:55:fb:07:07:a3:5b:2c:8f:c9:5a:6a:42:d9:90:2b:53:47:
         55:99:ef:16:5c:ec:0d:27:bf:2a:84:15:d3:fc:84:61:df:8e:
         9c:15:12:37:23:55:02:96:1b:04:d1:b1:a9:fe:f6:71:89:d7:
         11:a5:29:97:9d:97:ae:c5:34:5b:88:e9:2f:fc:b7:0a:50:f1:
         55:2b:09:04:d1:7f:21:08:be:29:d7:8f:a4:b1:15:5f:a8:25:
         27:9d:9f:a7:50:b3:ab:7b:75:85:91:4a:e4:c6:86:ca:82:91:
         99:e4:6c:27:a0:2c:86:70:04:9a:32:ba:7e:66:26:1c:6c:f0:
         7c:dc:0c:e8:52:2c:8e:e7:f3:8c:c6:a8:6b:2b:f1:2a:ca:0a:
         49:b1:73:1b:50:28:e4:6f:c5:cc:4f:65:4a:b9:a1:a0:5a:8d:
         b1:48:c1:dc:8b:df:69:e6:18:76:d8:50:a8:12:d2:8f:b5:e5:
         bb:d3:5c:77:02:0f:9c:28:01:4c:cb:fc:ad:17:3c:f2:97:0f:
         44:3c:d2:e1:f5:ec:ab:e2:8e:37:ee:d4:5a:b6:f8:35:f4:df:
         72:f8:0a:81:97:be:49:fb:60:1d:22:32:80:88:4e:fc:6c:de:
         c1:32:0f:bb:1f:fe:32:7d:67:20:cd:29:77:d4:a8:71:7e:62:
         e4:5d:1b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:12:20 2024 by rpki-client on console-fra.rpki-client.org