Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
File:                     GsBs8snpV1N0OXNPBYSoIEp7gxE.mft (raw, json)
Hash identifier:          s5UgN1QfYWZxxsJzoD6yn1ah6vuiDS3HeqeqsiLgOng=
Subject key identifier:   0C:72:EB:E3:52:D6:82:F1:5F:6D:30:D1:A1:77:DF:64:36:83:FD:5C
Authority key identifier: 1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11
Certificate issuer:       /CN=1ac06cf2c9e957537439734f0584a8204a7b8311
Certificate serial:       019355E43A12DBF16A924EA69B3C7B2F4885
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
Manifest number:          1302
Signing time:             Fri 22 Nov 2024 22:00:40 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:40 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:40 +0000
Files and hashes:         1: GsBs8snpV1N0OXNPBYSoIEp7gxE.crl (hash: Qp3MUr+1nODSkiRPXwgSF2Y64T4VLqzCLsG+hrR74jk=)
                          2: VbMCzOWg_tjs5CJOd6uBAGKftlM.roa (hash: aCH8drBAmMMKAFRZmXkEsPkoISsRfOSCmT/8ZzLP8Z0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:3a:12:db:f1:6a:92:4e:a6:9b:3c:7b:2f:48:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ac06cf2c9e957537439734f0584a8204a7b8311
        Validity
            Not Before: Nov 22 22:00:40 2024 GMT
            Not After : Nov 23 22:00:40 2024 GMT
        Subject: CN=0c72ebe352d682f15f6d30d1a177df643683fd5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4e:a5:77:b0:19:f0:a4:13:17:a5:43:c0:20:
                    11:55:0e:32:3f:ac:5d:70:e6:d0:e4:67:0c:8d:d8:
                    08:be:d1:c0:f7:8a:39:48:dc:56:de:c6:14:74:8f:
                    d1:ff:f3:77:03:7a:68:22:82:ae:22:b5:b1:81:09:
                    bf:6d:6b:b8:a0:80:e5:24:d8:2b:d1:84:ac:79:01:
                    e3:ef:0a:36:38:87:d1:26:18:a4:61:87:50:f4:4a:
                    18:a5:90:21:9d:0e:f1:c3:16:40:9a:8f:2f:9b:27:
                    d1:d6:c7:92:28:aa:15:54:38:37:61:c2:b6:3c:00:
                    ff:e8:a9:f3:3f:40:5f:3d:df:b7:ce:6a:9c:6e:01:
                    98:94:d4:86:d3:0b:ae:08:8f:d5:1e:65:65:cf:ac:
                    b1:b6:82:8e:b5:2e:99:f5:d2:3e:6c:3e:1e:a4:b5:
                    9a:fd:d1:20:f7:42:d9:c0:98:ab:4b:3a:2a:62:c6:
                    37:3c:b0:3a:f8:f8:d8:05:31:5c:cf:6e:9d:8e:b2:
                    9f:a5:bf:0d:a5:50:f1:22:e1:ac:bb:0e:8e:f8:6d:
                    85:c3:87:fb:b0:67:2b:e0:85:18:8a:ca:67:ce:2f:
                    24:da:0c:9e:b6:90:a1:e7:7e:c2:3d:3a:b0:67:dc:
                    44:c7:1b:fc:f8:39:58:25:20:b7:e5:ab:c8:a3:cd:
                    56:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:72:EB:E3:52:D6:82:F1:5F:6D:30:D1:A1:77:DF:64:36:83:FD:5C
            X509v3 Authority Key Identifier:
                keyid:1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:9b:a3:89:ca:09:f9:c4:6e:61:4e:ec:81:29:f7:e4:6e:8d:
         df:b9:37:4c:45:ec:9b:ca:44:e6:ed:e3:8b:a0:6e:33:27:00:
         79:9d:c0:e1:9f:32:06:4d:05:0b:25:96:94:9e:36:22:1a:7d:
         56:a0:30:9c:1d:b0:ac:db:96:14:b6:bf:20:40:96:60:79:a2:
         e7:5f:64:b4:af:1a:e3:27:73:00:a4:7d:14:9f:8c:c6:48:6b:
         df:5d:a7:b1:39:09:13:fb:0b:36:cc:3a:94:e5:6d:c0:47:90:
         df:04:88:83:01:d2:bd:9d:9e:0c:bf:a2:4a:60:c3:98:97:b1:
         07:a6:cd:f0:09:e1:a6:9a:70:f8:72:5e:4b:2a:5d:b8:56:9b:
         3c:ca:cc:44:8d:3c:43:1d:e7:3c:63:ca:6e:7e:0b:68:5d:59:
         70:a5:a7:c9:f4:3f:48:12:1a:9e:28:eb:6b:2a:43:93:31:28:
         b8:5a:71:e4:9f:49:46:b3:84:bd:81:e1:fd:af:a6:cf:5a:07:
         33:f1:7d:e7:a6:54:33:83:04:2d:cd:ea:56:57:9f:ac:5d:65:
         19:da:af:e2:43:c6:29:ef:fc:27:67:2d:8d:34:02:7b:f1:76:
         02:3b:b2:6e:e3:1f:d0:45:0e:96:d7:13:32:52:c0:ec:0b:1c:
         72:a7:5c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:26:16 2024 by rpki-client on console-fra.rpki-client.org