Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
File:                     GdZfozzls_e9tJfl_KUJ1_wDxpM.mft (raw, json)
Hash identifier:          kbRAGu6cYu4EuGIgP3T6VxkBpAM1REsdfiJ4SlhbTbg=
Subject key identifier:   07:B3:EB:0C:BE:2C:C0:75:33:67:EF:C4:15:53:CE:D5:74:BF:E7:C7
Authority key identifier: 19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
Certificate issuer:       /CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Certificate serial:       018F5324F49C09BC81C85D7C429D9F88793E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
Manifest number:          115C
Signing time:             Tue 07 May 2024 13:01:21 +0000
Manifest this update:     Tue 07 May 2024 13:01:21 +0000
Manifest next update:     Wed 08 May 2024 13:01:21 +0000
Files and hashes:         1: GdZfozzls_e9tJfl_KUJ1_wDxpM.crl (hash: V0HUHbg6EqUAJjavK9C8+eqOz/3ChQU4OUgMOi18Cko=)
                          2: QFDOEP5IjFVqqOQuHtgav38n7dc.roa (hash: 4DOT9UQE7x3My/cdE5KyF32qZlgk+1HWtdME73jkRt4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:24:f4:9c:09:bc:81:c8:5d:7c:42:9d:9f:88:79:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
        Validity
            Not Before: May  7 13:01:21 2024 GMT
            Not After : May  8 13:01:21 2024 GMT
        Subject: CN=07b3eb0cbe2cc0753367efc41553ced574bfe7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7b:ab:f0:ae:08:22:92:27:10:54:1c:a6:cf:
                    ff:2e:86:dc:23:0f:bc:9f:96:fc:34:e8:04:75:55:
                    10:ff:26:90:80:9f:88:98:35:83:3c:6b:a3:67:d8:
                    02:06:ba:94:fb:6b:16:b1:aa:de:5a:a5:be:dd:1d:
                    dc:46:08:e5:51:59:66:2a:77:b5:ec:dc:2c:f3:40:
                    9c:a6:de:50:8e:6d:c5:ce:24:da:83:15:1a:0d:19:
                    8c:1a:38:28:fc:95:b8:8b:fe:c1:77:0e:3d:0d:d3:
                    6f:6c:d6:42:24:f9:a3:4c:4d:85:56:ee:6e:ad:55:
                    ff:03:7f:17:41:da:c3:a9:6e:c6:6b:8e:b3:d5:d7:
                    82:6a:61:69:d5:c8:44:fb:39:5f:1e:d3:43:7f:92:
                    83:70:67:99:af:d2:ed:e8:bf:87:d1:ff:51:bf:b2:
                    04:97:5a:42:97:bc:a1:f0:41:97:f3:9a:2b:ab:00:
                    ea:2a:85:91:e3:9b:48:2d:4e:0f:d0:1b:63:bf:8f:
                    c7:95:fb:c5:40:01:bb:28:1a:41:24:d5:26:52:12:
                    e3:cc:17:16:fa:05:42:3c:98:f7:24:c6:f3:0d:9e:
                    4c:8b:9f:57:fc:8d:61:2d:5c:d3:3a:89:09:7a:df:
                    30:05:2a:30:88:86:d7:ad:d2:0a:1c:60:2d:f3:af:
                    ee:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B3:EB:0C:BE:2C:C0:75:33:67:EF:C4:15:53:CE:D5:74:BF:E7:C7
            X509v3 Authority Key Identifier:
                keyid:19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:2a:60:9b:a2:b1:76:f4:3c:fd:2a:5f:4e:b9:08:a8:3b:75:
         b9:5b:88:8f:c1:11:0f:6c:3e:7e:08:11:6d:17:61:2d:98:51:
         63:b3:aa:f0:2e:54:af:e3:c5:e4:7f:ae:09:c9:42:8e:99:49:
         49:6d:d0:c5:21:5a:f3:e0:0f:6a:26:b1:7a:9c:cc:35:fe:11:
         bf:6c:1b:a1:18:14:c3:27:fd:b9:35:df:72:3e:de:f6:5a:7e:
         8a:b6:88:ad:92:30:7d:66:a3:3c:61:fa:3d:f3:f6:bf:eb:be:
         a8:2f:d2:53:ab:56:6d:70:e4:4d:df:6e:b8:c1:a5:bf:8a:97:
         67:af:81:76:ca:f1:97:d9:c1:87:b6:1c:6b:4e:16:2d:37:7c:
         8b:b0:17:43:bf:89:3c:ad:94:6d:ea:d0:3a:f7:c9:1e:b8:6a:
         c4:30:e7:da:ef:cf:a1:b8:da:5f:97:13:dd:bf:db:f1:c4:15:
         d5:7a:ef:6c:6b:c8:60:44:91:f5:51:31:5a:f9:33:68:d4:c9:
         ea:d5:62:e0:0b:7a:9a:96:e1:de:2d:9f:99:60:3d:84:13:b6:
         a6:08:6d:6b:bf:3e:d2:f6:0b:d0:bf:f2:33:0b:dd:e0:8d:17:
         c6:b1:d4:37:e4:fd:9f:41:b0:e6:33:7b:e6:4f:a6:1a:48:78:
         61:af:29:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 16:10:06 2024 by rpki-client on console-fra.rpki-client.org