Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
File:                     gKOAANS1q9FTKiU4HLJhXuwe3KA.mft (raw, json)
Hash identifier:          AnGdqohBkKOZL/rCksBHQ8uRBHyND0SpYIuq+lu3dbc=
Subject key identifier:   06:6D:1F:6C:A6:AF:58:89:88:9E:05:6C:5D:33:BF:7A:A7:8B:48:BB
Authority key identifier: 80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0
Certificate issuer:       /CN=80a38000d4b5abd1532a25381cb2615eec1edca0
Certificate serial:       018F8938D080CF579D091B01C57F6CF5DD9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
Manifest number:          0191
Signing time:             Sat 18 May 2024 01:02:32 +0000
Manifest this update:     Sat 18 May 2024 01:02:32 +0000
Manifest next update:     Sun 19 May 2024 01:02:32 +0000
Files and hashes:         1: gKOAANS1q9FTKiU4HLJhXuwe3KA.crl (hash: beWeNrb+6t2VUc7j7Qw7BO1b/IYyW1I71QpZtrb3LQ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:d0:80:cf:57:9d:09:1b:01:c5:7f:6c:f5:dd:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80a38000d4b5abd1532a25381cb2615eec1edca0
        Validity
            Not Before: May 18 01:02:32 2024 GMT
            Not After : May 19 01:02:32 2024 GMT
        Subject: CN=066d1f6ca6af5889889e056c5d33bf7aa78b48bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a1:ee:7c:3c:b8:87:51:30:01:6e:8e:fc:70:
                    9c:b0:10:23:fe:38:a6:7f:61:99:69:37:9d:2d:d5:
                    41:71:30:9d:ec:2a:86:43:8b:bd:56:ad:4b:78:3e:
                    bd:4b:fd:b2:bc:73:9e:71:2e:45:cf:62:77:fc:95:
                    e5:ee:67:1d:43:56:ec:b2:8f:4f:07:1c:01:2f:9d:
                    3a:77:30:0e:17:2f:87:6d:eb:b3:58:2a:a6:41:6d:
                    72:f5:74:03:e6:77:66:a1:e4:62:06:1c:a7:ee:2f:
                    69:c9:28:f8:eb:47:d8:de:fb:ee:4a:ea:3c:15:6c:
                    a6:ef:d7:ed:b1:5c:65:ef:7f:01:8b:0e:0b:43:f8:
                    06:8e:40:b8:ea:c9:e9:51:b1:89:cf:a7:a1:fb:4d:
                    b3:db:f1:38:8d:b8:6e:47:f8:1f:2a:4f:ad:6f:56:
                    6e:99:60:95:a7:6c:04:af:03:5b:a5:52:41:36:57:
                    bc:5d:28:cc:29:0a:f3:65:5c:83:cf:cc:99:2b:27:
                    e0:a0:df:3b:08:db:5a:33:a8:21:92:33:96:75:1d:
                    0a:07:d6:0d:8a:e4:20:2e:39:6b:bf:79:08:d5:e4:
                    d0:ca:1f:b7:53:c6:2c:bc:3e:7d:d5:ba:93:ac:2d:
                    df:57:e4:7b:4c:bc:95:4e:de:f3:a2:13:93:a5:04:
                    b1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6D:1F:6C:A6:AF:58:89:88:9E:05:6C:5D:33:BF:7A:A7:8B:48:BB
            X509v3 Authority Key Identifier:
                keyid:80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:27:ff:d0:eb:db:cd:3b:9c:c9:0b:ee:0f:ad:31:b3:bc:50:
         56:ee:30:0d:0d:bc:eb:7b:79:c8:a7:07:8d:0c:47:ae:ba:0e:
         b2:0e:fb:92:99:9d:f5:b4:71:eb:cf:93:1c:9c:eb:9f:72:b8:
         d0:cd:0b:2e:0f:1a:b6:30:70:41:e9:b3:54:81:d4:23:4c:e0:
         6f:e1:9b:73:7c:98:60:da:34:c4:f2:b4:b4:00:6b:ad:56:37:
         b9:f1:e3:9b:2f:01:f2:28:f0:98:aa:90:6b:f1:e0:8f:31:c0:
         e2:d2:3a:64:eb:0c:dd:bc:1c:ef:ff:79:65:3e:30:8a:c3:1a:
         ea:4c:ba:03:cd:6a:63:85:a7:2e:65:2a:97:0e:bb:58:2d:bc:
         a7:60:d5:c9:49:ed:1e:96:11:79:7d:aa:23:79:37:dd:1d:9b:
         1a:43:f2:a7:61:d4:a8:af:77:f1:50:d1:1b:bc:29:99:d6:20:
         6b:96:f3:85:47:c9:44:59:74:66:f6:f7:88:dd:c8:a6:78:c4:
         de:61:38:14:39:3b:e9:70:04:d3:6f:5c:85:35:98:af:c3:dc:
         28:a1:1c:df:73:47:17:e9:65:31:1b:03:a9:b9:34:62:97:3d:
         4b:f4:31:94:fc:26:67:30:b7:8f:22:9b:35:17:b6:35:80:c2:
         8e:b8:fc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:30:09 2024 by rpki-client on console-ams.rpki-client.org