Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
File:                     GdlgBYpVOz9d-f5ychkDfEirUOE.mft (raw, json)
Hash identifier:          bwWIU02nmoz4IaxFJVUyUJNnbYv1w2ieZFiRJ1iYODU=
Subject key identifier:   99:0C:DC:DC:11:B0:3A:F5:C7:D3:B2:04:0E:47:C8:5C:65:CC:0F:71
Authority key identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
Certificate issuer:       /CN=19d960058a553b3f5df9fe727219037c48ab50e1
Certificate serial:       018F44FBC6A7D0FFF0D7BDCF3796EFA1EBB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
Manifest number:          0825
Signing time:             Sat 04 May 2024 19:01:41 +0000
Manifest this update:     Sat 04 May 2024 19:01:41 +0000
Manifest next update:     Sun 05 May 2024 19:01:41 +0000
Files and hashes:         1: GdlgBYpVOz9d-f5ychkDfEirUOE.crl (hash: ArH3kUG/5v+75Iun+MO59cX0i0ThEHczHUFcIEtm47Q=)
                          2: accEh0v6uYeJfpNkF_Um46OTkjo.roa (hash: JDAOVoTwjBSPffzRu0z9Q1QR6hEivkj9ywlPiEb0B2w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:fb:c6:a7:d0:ff:f0:d7:bd:cf:37:96:ef:a1:eb:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19d960058a553b3f5df9fe727219037c48ab50e1
        Validity
            Not Before: May  4 19:01:41 2024 GMT
            Not After : May  5 19:01:41 2024 GMT
        Subject: CN=990cdcdc11b03af5c7d3b2040e47c85c65cc0f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:18:75:48:17:4a:6a:39:42:cb:72:fb:cf:ea:
                    32:3d:3b:3b:5a:22:27:1b:39:1e:ba:5e:42:b0:d1:
                    e8:7c:1f:99:c2:de:97:a3:81:0f:df:23:cc:84:4c:
                    f7:9b:51:54:b5:34:d6:c3:c3:50:ba:84:ab:dc:0c:
                    1e:67:73:ce:99:e1:ff:a8:af:77:a7:2b:46:54:36:
                    4d:6b:3a:d5:40:1f:cf:c3:1a:7a:3a:e5:00:77:57:
                    8c:92:05:56:4a:2b:3b:17:a2:0a:bb:d0:8f:47:d4:
                    95:80:70:21:40:bc:f2:86:6a:3e:50:d4:78:4d:7e:
                    ff:df:ac:8f:21:10:77:e6:25:73:1e:03:e2:cf:25:
                    a7:ea:32:35:68:e8:39:f7:0b:28:7c:7a:4f:05:d8:
                    f7:3d:17:93:54:29:fb:00:8b:96:2f:9c:dc:fd:41:
                    75:e1:89:19:b8:22:12:6e:6f:9a:7c:54:b5:8b:02:
                    16:9d:ff:6b:aa:41:fd:79:66:9f:56:23:f9:17:23:
                    8f:03:54:af:b1:7e:44:6a:00:c6:24:af:d5:59:d1:
                    90:a4:73:df:72:63:07:84:fe:3d:a2:c2:9a:84:a8:
                    45:f2:b4:84:f9:a8:1d:e5:c5:d1:71:c9:70:8a:9a:
                    44:24:a1:7b:60:f4:22:ec:fe:39:14:98:4f:93:00:
                    8a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0C:DC:DC:11:B0:3A:F5:C7:D3:B2:04:0E:47:C8:5C:65:CC:0F:71
            X509v3 Authority Key Identifier:
                keyid:19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a3:6b:8e:39:0c:ad:b8:95:e1:51:86:8e:28:d2:34:a4:33:
         bf:7e:48:8e:3b:65:c9:11:39:49:e5:42:a4:53:da:d6:3d:87:
         73:f0:a9:c0:78:85:ac:d9:b6:7a:21:09:20:f3:20:d5:4c:b8:
         08:70:44:52:62:08:7e:e4:ee:07:47:e0:94:93:21:04:a3:fa:
         0a:30:e9:51:bc:99:15:8b:93:a5:7b:f0:34:b5:06:e8:17:fb:
         ce:7e:c2:0d:5c:b3:4d:94:7f:11:16:94:72:d9:b8:06:46:a2:
         f7:bf:02:8b:ea:83:9c:84:ed:d4:52:bd:26:c2:34:92:72:e8:
         81:f4:79:d5:5a:ea:68:26:f1:61:7b:e9:35:f6:c4:d5:c1:23:
         38:ca:87:85:b3:0d:a0:b6:df:1b:7d:d1:32:a4:b4:8a:ba:b0:
         ef:a9:62:68:98:1e:01:12:7b:b5:d2:1b:13:08:60:10:78:a5:
         9c:fd:56:d9:e4:da:e0:f3:6c:a0:41:ee:e3:d1:1a:03:0c:a7:
         e9:f8:de:2a:a6:ba:ba:6f:13:f3:05:b0:8c:db:3e:6e:f6:18:
         a2:34:d9:a7:e9:ce:6c:02:0e:37:8e:07:48:63:72:90:99:e1:
         23:7b:0c:dd:6f:0d:d1:f1:46:c9:1f:72:e7:c2:ef:2a:00:c9:
         e8:ed:be:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:05:57 2024 by rpki-client on console-ams.rpki-client.org