Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
File:                     GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft (raw, json)
Hash identifier:          oFIOLRdCH4TjuIEQVBq4EmRfRPpmARMlrtEiDfuM5Gc=
Subject key identifier:   DE:EE:24:08:63:5D:71:7C:30:5B:3B:51:E7:53:B4:2A:14:82:F6:CF
Authority key identifier: 18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8
Certificate issuer:       /CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
Certificate serial:       0192109822BFEA16CBA418B6DD5BC53838C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
Manifest number:          064C
Signing time:             Fri 20 Sep 2024 18:00:58 +0000
Manifest this update:     Fri 20 Sep 2024 18:00:58 +0000
Manifest next update:     Sat 21 Sep 2024 18:00:58 +0000
Files and hashes:         1: GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl (hash: qEUXBZ7QurjJEw5iIKmN+qHZeeH6fr+nwi8axGAp4Fc=)
                          2: ap1vGv5FVFouLBwR3lU3wRaFRr8.roa (hash: IeRhZyyx3cb9PDsJdoDR7nsv4A+HyzPxPVumv4EZXrE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:10:98:22:bf:ea:16:cb:a4:18:b6:dd:5b:c5:38:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
        Validity
            Not Before: Sep 20 18:00:58 2024 GMT
            Not After : Sep 21 18:00:58 2024 GMT
        Subject: CN=deee2408635d717c305b3b51e753b42a1482f6cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:74:42:4f:d5:27:de:50:fa:0f:d8:81:db:
                    38:51:b7:36:7b:08:68:2d:e6:c1:6f:89:b9:0e:e3:
                    02:97:16:09:e6:f4:58:a9:38:a8:90:88:d8:e3:c0:
                    99:6f:4f:93:7f:fd:94:99:8a:82:35:b3:72:47:7e:
                    94:f1:81:c2:33:1a:8a:fe:0f:2b:25:1c:02:32:d4:
                    e9:05:48:1c:ae:82:8a:e6:ff:20:9f:05:40:1b:fb:
                    d4:e2:93:a4:ec:4f:2c:8b:fc:26:62:71:5f:14:89:
                    d9:6c:18:d5:40:1e:7e:19:a2:93:da:4f:34:f1:03:
                    2e:2e:da:af:92:7b:56:ca:e4:cf:d4:07:a4:94:cb:
                    f7:18:21:44:3e:dd:7a:1d:64:93:b5:53:95:66:b7:
                    8b:15:cc:49:bb:72:e8:a5:c8:31:40:2e:ce:c2:e6:
                    1c:f5:1d:d1:30:54:8f:87:75:4a:b3:d5:4f:06:a9:
                    3d:09:6c:9c:0f:39:7e:54:36:6f:58:f1:d1:bb:2a:
                    11:c9:26:e5:4b:1d:f0:20:b3:50:c1:2e:c5:cf:3a:
                    16:43:91:c9:21:bc:80:86:0b:9c:ea:0c:4f:05:aa:
                    5d:47:53:f6:d4:e9:4d:8b:0b:44:9b:1a:a9:f2:ae:
                    dc:a7:38:65:1c:3c:bd:4d:64:2b:a1:1b:fc:6f:47:
                    36:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EE:24:08:63:5D:71:7C:30:5B:3B:51:E7:53:B4:2A:14:82:F6:CF
            X509v3 Authority Key Identifier:
                keyid:18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:68:0f:58:9c:53:21:64:27:e7:e3:a6:e6:e2:12:94:b2:08:
         fc:d5:50:d5:90:49:c3:9d:d2:99:b3:48:79:d1:e9:ca:cf:23:
         b6:ab:12:b2:fa:70:5a:46:c2:f8:49:88:01:33:1b:ab:ee:1b:
         41:e7:c4:7a:c9:c2:3b:47:9d:82:e6:80:4e:87:e6:63:62:db:
         93:63:62:f2:43:dd:4b:86:74:f0:97:76:96:93:d3:fd:b6:53:
         43:5a:0f:4b:2a:71:6b:8c:ce:e3:1f:1a:5b:26:56:55:4a:3d:
         32:b2:b2:b9:36:21:e3:66:47:90:62:df:77:7e:33:2d:28:b5:
         4a:6f:72:e0:ce:30:53:63:82:30:6d:cc:72:3a:a8:f7:ee:7b:
         eb:a0:db:f2:7f:02:f0:79:48:9b:15:84:23:29:d6:57:6e:c3:
         f0:21:a4:a9:ed:1c:44:25:af:ea:46:09:01:38:8d:9e:19:ef:
         d1:76:8b:69:c7:58:d1:4b:27:62:1a:3c:5d:54:3e:d9:52:77:
         4c:3c:cf:b0:37:c1:04:a5:32:8c:99:63:e0:7f:ff:b9:e5:79:
         df:db:2c:ff:87:73:46:89:c9:1f:8b:2b:5a:37:3c:23:0a:d8:
         cc:e9:6c:9f:fe:c3:50:73:ed:49:fc:89:71:6c:a6:48:fd:ba:
         d6:ac:1d:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZIQmCK/6hbLpBi23VvFODjAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YWY2YTA2MDUwZTRjYTI2YjJmZGQxM2E3YzBhZDE0NmNk
MjZkYzgwHhcNMjQwOTIwMTgwMDU4WhcNMjQwOTIxMTgwMDU4WjAzMTEwLwYDVQQD
EyhkZWVlMjQwODYzNWQ3MTdjMzA1YjNiNTFlNzUzYjQyYTE0ODJmNmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkl0Qk/VJ95Q+g/Ygds4Ubc2ewho
LebBb4m5DuMClxYJ5vRYqTiokIjY48CZb0+Tf/2UmYqCNbNyR36U8YHCMxqK/g8r
JRwCMtTpBUgcroKK5v8gnwVAG/vU4pOk7E8si/wmYnFfFInZbBjVQB5+GaKT2k80
8QMuLtqvkntWyuTP1AeklMv3GCFEPt16HWSTtVOVZreLFcxJu3LopcgxQC7OwuYc
9R3RMFSPh3VKs9VPBqk9CWycDzl+VDZvWPHRuyoRySblSx3wILNQwS7FzzoWQ5HJ
IbyAhguc6gxPBapdR1P21OlNiwtEmxqp8q7cpzhlHDy9TWQroRv8b0c2kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7uJAhjXXF8MFs7UedTtCoUgvbPMB8GA1UdIwQY
MBaAFBivagYFDkyiay/dE6fArRRs0m3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0s5cUJnVU9US0pyTDkwVHA4Q3RGR3pTYmNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xOTkxZmUtYWRmNy00MzUyLWFiODMt
MDM5NmU4N2Y1MjAyLzEvR0s5cUJnVU9US0pyTDkwVHA4Q3RGR3pTYmNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8xOTkxZmUtYWRmNy00MzUyLWFiODMtMDM5NmU4N2Y1MjAy
LzEvR0s5cUJnVU9US0pyTDkwVHA4Q3RGR3pTYmNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2gPWJxT
IWQn5+Om5uISlLII/NVQ1ZBJw53SmbNIedHpys8jtqsSsvpwWkbC+EmIATMbq+4b
QefEesnCO0edguaATofmY2Lbk2Ni8kPdS4Z08Jd2lpPT/bZTQ1oPSypxa4zO4x8a
WyZWVUo9MrKyuTYh42ZHkGLfd34zLSi1Sm9y4M4wU2OCMG3Mcjqo9+5766Db8n8C
8HlImxWEIynWV27D8CGkqe0cRCWv6kYJATiNnhnv0XaLacdY0UsnYho8XVQ+2VJ3
TDzPsDfBBKUyjJlj4H//ueV539ss/4dzRonJH4srWjc8IwrYzOlsn/7DUHPtSfyJ
cWymSP261qwdog==
-----END CERTIFICATE-----
Generated at Fri Sep 20 19:08:28 2024 by rpki-client on console-fra.rpki-client.org