Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
File:                     GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft (raw, json)
Hash identifier:          Tl/8VMsLV6DN3dVluonBTG240q1BDfVxuhOa8obzfLU=
Subject key identifier:   EB:F0:B7:DE:96:01:AE:C7:01:83:7F:3E:79:BE:C3:1A:7F:ED:A2:61
Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
Certificate issuer:       /CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Certificate serial:       018F595E347747634348F84C1CE9C2C103F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
Manifest number:          115F
Signing time:             Wed 08 May 2024 18:01:36 +0000
Manifest this update:     Wed 08 May 2024 18:01:36 +0000
Manifest next update:     Thu 09 May 2024 18:01:36 +0000
Files and hashes:         1: GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl (hash: dRxQK4psHgh+/XSpq8Ir/3FHVCVK7QEjDGCkN2vJ5eY=)
                          2: NMpFn7ZS9El92zodlUqpMOsRhfk.roa (hash: jD1osQQdeJaAJqVJ4wtgZoIJwdm+sgTkp4oFW4Dlsgg=)
                          3: TWVnkjLc2eihSng2k14VRwfzgl4.roa (hash: YbdWeBMAFu/DGCrlrm/AHcvc3AkEDLZFCRdjZ0LoY6k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:59:5e:34:77:47:63:43:48:f8:4c:1c:e9:c2:c1:03:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c
        Validity
            Not Before: May  8 18:01:36 2024 GMT
            Not After : May  9 18:01:36 2024 GMT
        Subject: CN=ebf0b7de9601aec701837f3e79bec31a7feda261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:44:5f:1a:dd:af:43:91:b8:95:2d:dd:ac:b8:
                    21:fd:64:1a:38:6a:c4:ee:f5:42:fe:d6:68:91:1d:
                    6f:56:6b:06:01:85:a2:0b:91:99:fd:88:7d:c4:fb:
                    fb:00:a4:cc:08:cb:10:bd:e2:5f:d3:82:d5:ca:7b:
                    7d:56:16:8e:2d:1e:62:c4:e6:27:b1:86:53:d4:a1:
                    7a:a9:c1:b4:d1:60:9e:f9:e3:ec:18:bd:6a:36:a8:
                    9f:88:b1:83:44:a6:aa:66:c0:e5:54:aa:3e:09:c4:
                    de:6f:fb:77:99:21:27:ad:f7:64:84:8b:58:cb:e5:
                    7e:2c:e6:2a:4b:0f:7d:4e:91:6e:54:91:72:38:ba:
                    81:27:17:b3:7b:1a:b9:bb:06:56:a7:e0:ce:71:06:
                    f7:e7:89:39:db:45:df:a9:e4:57:e8:87:17:47:82:
                    31:13:43:bd:3b:5c:af:d8:23:19:3b:2c:1b:a6:63:
                    03:77:04:33:ba:67:84:80:2e:1c:17:68:be:17:dd:
                    c1:ca:9e:eb:fc:87:ec:e1:0d:1d:2a:56:0f:a3:9d:
                    3f:19:69:ce:ba:a0:e1:6b:e9:08:63:95:de:70:c7:
                    50:7b:0f:4d:e0:af:2a:d5:19:be:bd:2d:be:35:fc:
                    ee:f2:92:8f:5d:2a:ae:0b:20:ba:c7:78:b4:0c:49:
                    01:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F0:B7:DE:96:01:AE:C7:01:83:7F:3E:79:BE:C3:1A:7F:ED:A2:61
            X509v3 Authority Key Identifier:
                keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:6d:46:25:25:2e:38:64:a1:18:b7:37:09:18:c4:8c:36:ae:
         62:b0:28:ca:a1:58:67:e8:4e:7a:ed:30:4f:45:f4:1b:ca:59:
         60:bf:d6:23:7e:e7:b9:5b:97:d3:f1:dd:43:05:ed:f4:3d:5e:
         e6:fe:4d:b0:20:96:b3:d6:52:e2:db:9c:fc:35:72:1a:a3:9f:
         7a:17:2b:72:9e:ed:30:7e:4a:7c:7c:fb:a7:2f:75:d5:6a:cf:
         5e:c0:f0:d7:18:76:95:38:47:e3:23:38:99:04:5d:b2:7e:35:
         2d:d3:b3:2b:3b:84:d7:87:f0:96:56:f3:66:f4:06:a4:f7:33:
         00:63:87:cf:63:4d:30:9e:6c:a5:20:a2:95:f5:ac:d3:db:67:
         66:07:40:f0:e9:70:f5:aa:57:ed:e0:dc:e9:34:51:05:98:cc:
         a7:75:a3:35:6d:b1:e1:00:a5:55:59:02:d5:f1:33:ce:27:2b:
         89:da:2c:75:fe:43:5d:86:48:d8:c0:91:f7:5f:46:82:76:bd:
         49:48:e4:5a:f1:62:f8:85:e8:80:93:c1:3f:3d:a7:79:6c:0b:
         f5:19:66:f9:bd:c6:f7:94:67:41:eb:af:8c:d5:05:48:e7:da:
         4d:d0:75:ef:ce:05:7f:b4:32:58:8e:90:97:c9:c1:ae:b9:cf:
         a9:45:e3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:51:16 2024 by rpki-client on console-fra.rpki-client.org