Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
File:                     GpFU4cVXiw_virt3n4EX5k6ITRg.mft (raw, json)
Hash identifier:          +dy2kBSAYtAHWqKjWs/+r/kskcS3vzypJgRr0csj6v0=
Subject key identifier:   53:F2:03:C3:26:B6:58:A3:21:40:10:37:B4:6C:2B:3B:1A:D9:5F:2C
Authority key identifier: 1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
Certificate issuer:       /CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Certificate serial:       018F4D5979CA06BCD4A7E1B735B70270501A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
Manifest number:          0806
Signing time:             Mon 06 May 2024 10:01:00 +0000
Manifest this update:     Mon 06 May 2024 10:01:00 +0000
Manifest next update:     Tue 07 May 2024 10:01:00 +0000
Files and hashes:         1: Ea6G-eyIhEcbKmxyk8VRdGzmas4.roa (hash: jcxtWAcbYPZCmnYReMbR+idxBTxflnlz2e6fG5LJ0Do=)
                          2: GpFU4cVXiw_virt3n4EX5k6ITRg.crl (hash: KRTjakqCOAGnC3pIDpTpF7Z4liypSbjYit61a++jf0c=)
                          3: amVsCmFqRtNrGMSP_WwvCzZ5wso.roa (hash: 9MwvWWx6Lt4DMt7asN6YOaULEhj15jXqmbx/Iy77ccU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:59:79:ca:06:bc:d4:a7:e1:b7:35:b7:02:70:50:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
        Validity
            Not Before: May  6 10:01:00 2024 GMT
            Not After : May  7 10:01:00 2024 GMT
        Subject: CN=53f203c326b658a321401037b46c2b3b1ad95f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:28:b4:0a:76:30:f3:8f:da:6c:5a:b0:1b:6d:
                    9f:a5:e0:f1:f1:80:3f:06:79:57:73:17:c5:79:00:
                    aa:de:ff:9b:73:5d:e1:c4:69:58:51:f9:32:13:7a:
                    d9:51:f6:33:e1:be:67:52:40:8d:c5:b0:c3:6d:dc:
                    e1:65:c6:93:a6:fe:8a:d7:2b:93:21:dd:3d:e1:ff:
                    eb:c1:d9:91:a2:b2:ef:0c:da:ab:cc:8d:cc:e3:9b:
                    91:c4:56:22:ff:ab:85:36:0d:e7:49:3a:69:c0:9b:
                    18:90:a5:fe:63:33:f3:b2:54:81:e1:f1:9d:06:cb:
                    da:fa:b8:b8:b9:e0:71:c1:d3:8d:24:51:0b:60:a4:
                    4e:08:f5:26:da:63:da:8e:f2:7a:01:12:5d:8b:ab:
                    19:a6:62:3e:18:2c:ec:a5:ea:31:b2:26:d6:9c:1b:
                    a9:6c:b6:47:4c:6c:44:dc:83:34:fd:0c:32:ec:06:
                    e3:5d:78:1b:44:7b:12:45:1b:7d:b9:72:fe:5e:8e:
                    ea:c0:f2:63:93:17:73:4b:3c:52:d1:f8:cc:3d:70:
                    34:d5:c7:fa:e9:47:62:40:1f:b1:cb:35:42:c1:50:
                    23:5d:d2:7c:c9:71:71:a3:32:16:75:95:42:d2:74:
                    81:0e:53:b9:36:dd:bd:f8:81:ec:b0:5b:09:dc:0a:
                    84:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F2:03:C3:26:B6:58:A3:21:40:10:37:B4:6C:2B:3B:1A:D9:5F:2C
            X509v3 Authority Key Identifier:
                keyid:1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:2e:27:f7:ac:21:e6:ba:b2:5b:ff:89:14:2e:59:78:ba:90:
         66:7e:7a:b0:e9:b3:13:d2:0b:71:e9:ab:f2:ea:bd:a9:2b:f7:
         ce:ea:52:31:cb:42:4b:15:a3:5c:3d:91:43:97:cf:7e:74:74:
         f8:34:ec:8c:51:fe:76:6b:fb:03:a1:2e:a5:2c:27:62:51:b5:
         49:68:65:a1:27:a2:b5:9e:99:f5:af:79:25:68:6e:bb:c1:98:
         49:86:18:65:64:54:d2:4d:4d:95:0a:29:85:56:7f:e6:7d:fa:
         74:1b:7f:e4:48:8c:9f:03:c1:80:82:79:71:bc:37:70:b4:e2:
         08:26:f1:12:5d:af:c1:60:3b:b5:96:e0:c4:90:ad:d1:00:c2:
         84:2e:de:eb:27:90:bf:54:b2:77:e9:bc:3c:d9:a2:0f:cd:45:
         d1:48:a7:1d:f7:3c:87:a7:11:0d:40:2f:b9:9c:1a:7d:7f:45:
         13:81:54:c3:d5:f0:87:15:f8:81:1f:c8:ad:79:40:0c:76:b2:
         65:ee:27:7d:a4:83:b0:5b:f8:11:13:66:14:ca:97:e6:7e:b0:
         75:dd:e1:e3:51:fd:ec:49:19:4b:75:ef:61:5a:81:a0:ff:c3:
         da:14:11:b5:3a:32:e1:58:89:68:ac:72:51:87:d5:17:a8:d3:
         e3:f6:6a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:43:08 2024 by rpki-client on console-fra.rpki-client.org