Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
File:                     gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft (raw, json)
Hash identifier:          J13ukwsnvcVLbJNr4uC9bQYrPYBTPPyFyvaOAF/sSfg=
Subject key identifier:   F5:4B:2E:D4:C9:F8:3E:A6:C5:A4:9D:FF:84:98:C8:AF:6D:0E:0E:AA
Authority key identifier: 82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13
Certificate issuer:       /CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
Certificate serial:       018F68647EC360FBA38F9D79C90374ABBE0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
Manifest number:          0839
Signing time:             Sat 11 May 2024 16:02:47 +0000
Manifest this update:     Sat 11 May 2024 16:02:47 +0000
Manifest next update:     Sun 12 May 2024 16:02:47 +0000
Files and hashes:         1: gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl (hash: RDtN4omWRfcsJJUEcbkHG2QEOSenoMhDp8TqE58uKa4=)
                          2: hAfbQOX5TITFcttqIul2Xgit7Wc.roa (hash: 0Eb6W8xJTJm4DqH7xVOV0U3FrbtfkdB1sFAnG7qW3fg=)
                          3: yCvmEb_k9jqfpmxKScsdu0ukXQo.roa (hash: STE6R8LxRHdLstxqSGEOZBWnOgMySPMmqMZCSShLv8g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 May 2024 16:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:68:64:7e:c3:60:fb:a3:8f:9d:79:c9:03:74:ab:be:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
        Validity
            Not Before: May 11 16:02:47 2024 GMT
            Not After : May 12 16:02:47 2024 GMT
        Subject: CN=f54b2ed4c9f83ea6c5a49dff8498c8af6d0e0eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:70:16:da:d2:e1:dc:23:be:ce:ef:a2:67:9a:
                    87:2a:ca:61:bb:07:0b:40:a8:44:a0:58:ba:f2:ee:
                    2d:94:6f:a1:fe:ff:cd:92:fd:36:8e:85:ab:2e:d8:
                    07:e3:1b:88:fd:de:06:b5:f5:46:9e:3c:fd:d2:f5:
                    6e:2f:83:24:1b:5c:4f:67:04:8d:16:8c:e2:e2:f4:
                    87:04:27:e3:c3:aa:a5:9c:7f:ac:ae:48:3e:d8:cd:
                    1a:e6:62:b3:8f:f1:ba:78:d0:00:a1:d4:eb:72:78:
                    2b:3c:ab:4a:0f:ce:05:6d:19:2d:48:37:2b:49:31:
                    42:1a:81:c1:08:f3:42:64:41:8b:48:3d:e3:f9:5f:
                    7c:0d:4a:25:5b:28:8f:7c:90:85:e0:de:95:51:b6:
                    05:27:1f:ae:29:3d:81:a7:ea:d1:83:70:23:f4:57:
                    56:20:33:4c:3c:8d:98:a0:e5:5c:39:2e:b2:76:d6:
                    40:61:6b:e0:f0:39:97:70:65:2f:a1:96:c5:4a:2c:
                    34:9a:52:8d:02:d3:5b:4e:b5:3f:d2:3d:46:be:26:
                    2d:89:5e:14:a5:d3:a3:7b:4b:6a:20:27:99:78:01:
                    38:62:2e:09:db:86:39:39:ca:f1:da:cb:00:f9:60:
                    89:f3:7d:61:0a:e3:50:0e:f4:c3:7c:08:f9:8e:0a:
                    8b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4B:2E:D4:C9:F8:3E:A6:C5:A4:9D:FF:84:98:C8:AF:6D:0E:0E:AA
            X509v3 Authority Key Identifier:
                keyid:82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:67:e5:21:22:92:ea:02:d8:dc:ce:88:b8:df:3b:32:d7:a0:
         35:14:08:5f:09:ac:36:0a:08:12:19:7d:16:94:31:b5:cb:d4:
         3a:ed:21:9e:19:0a:5d:dd:e3:3f:2b:67:ab:ab:39:85:3d:4c:
         f6:49:ff:ce:ed:90:a9:ae:22:a6:d3:06:30:e6:16:53:a1:0a:
         97:5e:74:fd:ac:2b:a6:47:25:6b:10:77:39:2c:1c:ee:ce:85:
         7a:d4:8b:d5:63:db:d8:4a:e4:37:3f:c7:9a:50:2a:39:5a:06:
         29:fa:e0:0b:75:c2:98:65:55:7d:67:d3:43:4a:63:5a:1e:a6:
         0d:99:af:6c:7c:a3:83:12:b3:22:d6:49:56:35:72:04:60:1e:
         ce:5c:db:5d:53:0c:22:87:40:bd:92:5c:96:e1:60:97:fd:ce:
         49:d0:3a:73:ea:ad:09:f2:2c:1e:b1:ed:c8:a8:67:55:4b:bf:
         de:33:da:86:8b:28:f9:be:97:ea:4e:b0:5e:3d:77:97:d7:17:
         67:ac:e7:ec:14:93:06:52:cc:e3:d5:fb:94:58:d5:da:4a:9e:
         35:39:81:dc:35:1a:13:4a:f2:e0:f7:cd:fa:e0:05:0c:6c:b1:
         8d:b1:ba:d7:91:4f:a2:33:15:3d:01:bc:6c:3c:7a:5f:14:ce:
         a7:67:99:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 20:03:59 2024 by rpki-client on console-ams.rpki-client.org