Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
File:                     GhGmY2-M4s71g2xENWXF_jri8gg.mft (raw, json)
Hash identifier:          eoDHHa7vhlzpYm91pH2rFoPc8zW2oz81mn/yxPddGPE=
Subject key identifier:   E5:46:76:41:C6:32:3D:5A:AF:2F:2E:39:B8:19:1D:AE:10:22:73:13
Authority key identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
Certificate issuer:       /CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Certificate serial:       019024FFCD65A8A4450263CDA6865655E8C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
Manifest number:          11C8
Signing time:             Mon 17 Jun 2024 07:01:02 +0000
Manifest this update:     Mon 17 Jun 2024 07:01:02 +0000
Manifest next update:     Tue 18 Jun 2024 07:01:02 +0000
Files and hashes:         1: GhGmY2-M4s71g2xENWXF_jri8gg.crl (hash: lVC9Yh6D0Kuch7FIivFWpVJWzTfCeBCxRQrusMmk5II=)
                          2: IwruxxNaDDS3Xg_wz0J5vQEkpOc.roa (hash: KcIC9Pd6OlK8OLZcB7bqjdJZNzn52XAZlc9msdOsOV4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 07:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:24:ff:cd:65:a8:a4:45:02:63:cd:a6:86:56:55:e8:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
        Validity
            Not Before: Jun 17 07:01:02 2024 GMT
            Not After : Jun 18 07:01:02 2024 GMT
        Subject: CN=e5467641c6323d5aaf2f2e39b8191dae10227313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:5b:3f:32:24:8a:c1:b9:f2:2b:14:39:46:
                    a9:4d:44:29:dd:3d:ea:fc:14:37:58:b1:17:f9:57:
                    49:32:9d:fa:97:4f:7f:b5:ca:82:d5:28:63:7e:60:
                    ce:61:c9:25:f3:5c:3d:54:ec:cd:10:10:a0:ca:89:
                    f5:d7:2e:fb:28:f3:d9:a5:93:7b:ad:d8:21:34:e2:
                    b2:23:1a:7a:45:4b:44:72:66:de:44:4a:b1:f2:e8:
                    60:e7:9b:69:1e:35:20:51:94:d4:83:05:c1:d8:a5:
                    dc:f2:20:b5:e7:60:d1:dd:f5:6b:1e:82:4d:c2:6e:
                    91:07:f7:94:e7:ec:5c:db:f3:0f:95:4d:81:3c:e8:
                    51:04:ed:a7:b2:41:be:d7:e1:40:3f:8c:0e:d0:a7:
                    ea:8a:26:c2:12:2a:8c:32:4f:4b:e5:2b:a9:e9:d2:
                    4a:d4:ae:61:d1:f5:6e:6d:29:a3:f4:89:7d:04:fb:
                    a7:fd:08:43:4c:5f:b7:30:46:95:29:be:f3:71:93:
                    79:a7:71:11:64:99:aa:c4:37:65:5c:73:48:f9:ab:
                    96:fb:5b:95:b8:fb:90:7c:c4:d0:7a:77:33:3a:83:
                    a6:b3:b5:88:aa:65:3e:f4:b2:a0:44:38:5c:4f:74:
                    08:f2:33:ae:a6:24:8d:e1:98:4a:b2:79:fc:ef:9e:
                    fd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:46:76:41:C6:32:3D:5A:AF:2F:2E:39:B8:19:1D:AE:10:22:73:13
            X509v3 Authority Key Identifier:
                keyid:1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:60:18:36:c8:f2:75:66:e3:d7:84:54:b2:2e:91:5f:23:c2:
         11:79:e1:d4:64:ae:b1:18:45:ef:87:7d:86:ab:36:b7:15:19:
         fe:36:22:27:71:d0:1e:f5:67:3b:d2:58:a7:b1:3f:1b:f4:07:
         f8:4d:03:92:95:29:37:f3:7a:ab:83:06:20:64:4c:dd:de:96:
         26:12:65:7f:83:8b:8d:83:f7:af:de:da:ca:54:ed:14:52:be:
         a6:88:c5:68:7d:0a:ac:ae:7e:f1:52:29:9f:95:a7:33:1f:20:
         ac:68:8e:9e:52:3c:fa:c5:9c:ed:3d:8e:ab:96:bf:7a:9c:55:
         4e:39:8c:7d:7f:ba:11:24:d3:99:03:7d:db:52:62:60:cb:03:
         d4:b6:01:0b:21:a6:22:12:81:81:45:fd:af:05:0b:8f:ca:f4:
         40:3b:10:97:0b:61:c5:60:44:84:05:92:27:42:17:de:22:64:
         26:e3:e9:2a:5c:09:5b:07:d8:ec:fd:9e:63:92:00:6a:7e:3e:
         67:e6:be:ee:84:31:cb:61:d1:30:a3:23:83:01:a4:f9:b7:2e:
         d6:6c:b8:e7:b0:53:6f:0c:97:3c:6a:76:40:7b:53:97:be:aa:
         74:75:d7:8d:e6:c9:fd:3a:b4:52:44:f3:12:7a:7b:39:ad:4d:
         16:0b:25:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAk/81lqKRFAmPNpoZWVejGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMTFhNjYzNmY4Y2UyY2VmNTgzNmM0NDM1NjVjNWZlM2Fl
MmYyMDgwHhcNMjQwNjE3MDcwMTAyWhcNMjQwNjE4MDcwMTAyWjAzMTEwLwYDVQQD
EyhlNTQ2NzY0MWM2MzIzZDVhYWYyZjJlMzliODE5MWRhZTEwMjI3MzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwctbPzIkisG58isUOUapTUQp3T3q
/BQ3WLEX+VdJMp36l09/tcqC1ShjfmDOYckl81w9VOzNEBCgyon11y77KPPZpZN7
rdghNOKyIxp6RUtEcmbeREqx8uhg55tpHjUgUZTUgwXB2KXc8iC152DR3fVrHoJN
wm6RB/eU5+xc2/MPlU2BPOhRBO2nskG+1+FAP4wO0KfqiibCEiqMMk9L5Sup6dJK
1K5h0fVubSmj9Il9BPun/QhDTF+3MEaVKb7zcZN5p3ERZJmqxDdlXHNI+auW+1uV
uPuQfMTQenczOoOms7WIqmU+9LKgRDhcT3QI8jOupiSN4ZhKsnn87579sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVGdkHGMj1ary8uObgZHa4QInMTMB8GA1UdIwQY
MBaAFBoRpmNvjOLO9YNsRDVlxf464vIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hHbVkyLU00czcxZzJ4RU5XWEZfanJpOGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mOGY5YzgtMGRlYi00MGRlLTg5NDYt
MjkxZTRiZDcwMzA5LzEvR2hHbVkyLU00czcxZzJ4RU5XWEZfanJpOGdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mOGY5YzgtMGRlYi00MGRlLTg5NDYtMjkxZTRiZDcwMzA5
LzEvR2hHbVkyLU00czcxZzJ4RU5XWEZfanJpOGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2AYNsjy
dWbj14RUsi6RXyPCEXnh1GSusRhF74d9hqs2txUZ/jYiJ3HQHvVnO9JYp7E/G/QH
+E0DkpUpN/N6q4MGIGRM3d6WJhJlf4OLjYP3r97aylTtFFK+pojFaH0KrK5+8VIp
n5WnMx8grGiOnlI8+sWc7T2Oq5a/epxVTjmMfX+6ESTTmQN921JiYMsD1LYBCyGm
IhKBgUX9rwULj8r0QDsQlwthxWBEhAWSJ0IX3iJkJuPpKlwJWwfY7P2eY5IAan4+
Z+a+7oQxy2HRMKMjgwGk+bcu1my457BTbwyXPGp2QHtTl76qdHXXjebJ/Tq0UkTz
Enp7Oa1NFgslzQ==
-----END CERTIFICATE-----
Generated at Mon Jun 17 12:35:46 2024 by rpki-client on console-ams.rpki-client.org