Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
File:                     Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft (raw, json)
Hash identifier:          tgOt+FAuKUEnMHSoxTWkoyXGmKoVLAXGdj4VsVw+dGc=
Subject key identifier:   10:E1:81:26:6D:F0:ED:AC:8A:C0:C5:77:46:A8:F9:C3:5B:79:A0:64
Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
Certificate issuer:       /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Certificate serial:       018F5515828C1E566FB4EF34A48A2B8C47B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
Manifest number:          1161
Signing time:             Tue 07 May 2024 22:03:43 +0000
Manifest this update:     Tue 07 May 2024 22:03:43 +0000
Manifest next update:     Wed 08 May 2024 22:03:43 +0000
Files and hashes:         1: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl (hash: mtTpuC03ke8fTlSRIWH9m74+DGMEjeurOb+6aqHk5Vo=)
                          2: Pmj0yB31raieE-WYRbn68_kREGc.roa (hash: dUG5djf9tc7QxFK3Fza4quapuBFSPrr1woUGx0SyiWo=)
                          3: QeMLef52nWQt8KOiEfy1VRL6VUs.roa (hash: vdainM1ktmLgM7J+fssfmYohLW7YHixGUG2XsxGDl88=)
                          4: ZRUwK2XWR-TC90aHW5UPPwGJipQ.roa (hash: AhcQPYgV3tl0xqf59GUspuTVEz2Lb+fTg4gYU09Q0f8=)
                          5: Zg2YUEhg_uReKo8PmZAB4Xn8eYQ.roa (hash: zmMCilyb5CRaJ3Ak9Xk7xXthHEleyA2To9Eor8GSiFA=)
                          6: blYcCndn_yP2oT1AYGj_8yDLyJ8.roa (hash: lMGd0YdSFs31BzG6W731XolCoa1uVeSK8Wwc7HRxFqA=)
                          7: ixl9t23B8-0dUb_X_u5YhgB4Pz0.roa (hash: qCDxc6QE+WJ3WxTxQ65PBF6unhoLlMHmHLURCxLd60c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 22:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:15:82:8c:1e:56:6f:b4:ef:34:a4:8a:2b:8c:47:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
        Validity
            Not Before: May  7 22:03:43 2024 GMT
            Not After : May  8 22:03:43 2024 GMT
        Subject: CN=10e181266df0edac8ac0c57746a8f9c35b79a064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d3:12:98:07:5f:7c:32:4d:48:7b:fa:8a:75:
                    90:f9:7f:6e:dc:47:1a:47:22:17:20:9d:71:8d:48:
                    6f:86:63:7f:a4:dd:41:37:99:04:86:c9:1e:88:23:
                    f3:46:74:9b:13:06:89:58:a7:82:47:c2:40:3d:a6:
                    c4:d4:4e:19:69:7a:89:f9:60:03:0c:62:23:61:00:
                    13:26:34:25:09:94:21:93:1d:30:cf:6d:b7:47:95:
                    b5:f8:e6:09:3e:00:55:43:2d:15:06:0e:af:d7:34:
                    14:90:f2:78:ff:9a:5a:f0:93:88:9f:29:2e:07:0e:
                    4d:45:ed:5f:72:ae:cd:de:ad:cb:30:22:1f:2f:c7:
                    23:b0:09:8f:ad:70:5b:35:13:02:e4:03:b3:42:1f:
                    b3:4a:2c:9a:0b:17:a6:59:88:34:bd:b7:05:3c:45:
                    63:a1:73:b8:ca:2b:33:94:9a:24:97:89:cb:5b:51:
                    1b:fe:10:98:0d:00:03:00:6f:a9:c8:05:a9:d4:52:
                    4a:b8:3f:7d:e1:6f:71:4d:0b:e6:7a:e5:51:ee:16:
                    2f:9b:63:fb:8a:33:f6:96:5f:a9:00:99:aa:bc:ca:
                    b4:21:d9:15:d4:75:bf:e8:88:cd:38:2d:51:50:f7:
                    3c:3c:4b:b4:32:53:0f:95:f6:50:38:ad:69:47:ef:
                    4c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E1:81:26:6D:F0:ED:AC:8A:C0:C5:77:46:A8:F9:C3:5B:79:A0:64
            X509v3 Authority Key Identifier:
                keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ac:19:a1:05:47:ae:64:0e:06:a7:7e:be:60:d5:41:72:82:
         48:81:dc:0a:4b:a7:69:cb:b4:a7:2e:89:b0:af:78:dd:d4:73:
         b7:5d:57:0d:73:82:4e:6b:aa:f9:04:e7:96:eb:6a:5e:9e:8d:
         b0:4a:f5:65:f3:be:a7:38:7f:0b:13:08:b3:64:1e:a3:9c:a6:
         64:55:8c:5a:60:2f:ac:ee:67:bb:b1:a8:05:c6:79:2c:a4:30:
         ec:1d:ed:c3:aa:8b:94:1b:06:d8:20:6e:e8:fd:ca:1e:23:95:
         12:d3:36:33:9e:e1:57:b4:0b:4c:a9:8e:ef:a0:32:93:8e:06:
         60:d2:8f:4e:a7:c5:1c:77:ac:67:6c:94:80:be:e5:dc:5b:40:
         bb:17:d4:03:9e:e4:11:ac:d1:53:d6:e2:c3:d6:78:59:1c:39:
         4e:d8:b2:c6:86:b3:b6:ed:88:41:ae:fd:a7:c1:2d:3c:6f:0b:
         ed:62:c1:05:8f:fd:d0:54:e1:b9:4d:ae:b7:48:97:f4:13:60:
         5d:3a:eb:b0:27:5c:ef:3d:ab:36:64:0f:21:16:85:2b:8a:45:
         5a:5d:66:b2:9c:d0:9f:9b:4d:33:1c:88:4d:ef:4e:0f:c2:e8:
         0e:fc:96:05:01:28:b5:ce:19:d1:3a:3f:b6:e6:df:76:ae:a2:
         e4:af:fd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 03:13:47 2024 by rpki-client on console-ams.rpki-client.org