Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
File:                     Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft (raw, json)
Hash identifier:          d9L78eFFb2dlxr+f16sfjvYGcZbjNMBZEoedNy+EOMk=
Subject key identifier:   A3:8D:16:8A:2E:FC:D7:F9:7B:B6:F5:DE:E5:28:8F:0A:D4:1F:63:ED
Authority key identifier: 1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
Certificate issuer:       /CN=1a9b70ef99760a0659deaefa660345a0e6115423
Certificate serial:       018F4A217524B811146AF5B212AB0409A730
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
Manifest number:          10E9
Signing time:             Sun 05 May 2024 19:00:57 +0000
Manifest this update:     Sun 05 May 2024 19:00:57 +0000
Manifest next update:     Mon 06 May 2024 19:00:57 +0000
Files and hashes:         1: Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl (hash: yA8BITxRU7KgRDr/B+ZRBB12UKZ5iGSGbiilQBu6YIs=)
                          2: Um1NhBhf46-hmbtlAartMB_Iz2Y.roa (hash: 3qxUlLw5Nb+gQwaZoZyz1jt33U6cgPncM2o4SZRo3+g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:21:75:24:b8:11:14:6a:f5:b2:12:ab:04:09:a7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a9b70ef99760a0659deaefa660345a0e6115423
        Validity
            Not Before: May  5 19:00:57 2024 GMT
            Not After : May  6 19:00:57 2024 GMT
        Subject: CN=a38d168a2efcd7f97bb6f5dee5288f0ad41f63ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5d:31:29:1d:6b:4c:bd:db:38:c7:2f:9c:2b:
                    31:3e:57:5e:c8:b2:83:2b:e9:69:3b:b1:2c:64:86:
                    a6:ca:a2:e7:1f:86:d3:1e:b5:e1:d6:d8:b7:b2:47:
                    9c:88:ab:f9:48:07:40:ad:a3:c9:7a:b0:2e:fd:68:
                    15:f6:b1:59:39:d2:f0:fc:f5:89:70:2d:db:e0:9c:
                    d0:89:ec:f3:4b:36:a1:ae:18:f8:17:4e:78:29:8a:
                    ce:09:05:7c:39:50:03:e9:b8:d4:73:fa:08:25:f5:
                    a2:6b:09:43:df:c5:f4:ee:3d:28:ff:b6:af:f0:2e:
                    a8:dc:63:dd:ce:10:a5:74:79:35:7b:c5:20:3b:02:
                    7f:8a:12:90:97:0d:4d:a8:3a:ab:0a:4f:d6:0f:2c:
                    83:a2:ff:84:3a:8f:dc:8f:c4:c0:be:d6:f2:fd:02:
                    aa:71:7a:5e:aa:ee:5b:35:99:23:23:6f:0e:e7:1e:
                    ed:46:39:0e:20:a6:21:dc:64:6f:77:7d:aa:42:f8:
                    00:49:ec:5d:5e:9b:f2:c1:ab:e2:e9:83:ab:48:e8:
                    5a:bf:c9:17:db:4b:95:2b:19:cc:db:70:24:e4:f8:
                    04:08:f9:06:64:e5:e9:ba:da:d9:04:24:4d:ae:fb:
                    53:ce:42:c3:e5:2c:42:d9:48:9d:90:14:e0:b8:59:
                    aa:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8D:16:8A:2E:FC:D7:F9:7B:B6:F5:DE:E5:28:8F:0A:D4:1F:63:ED
            X509v3 Authority Key Identifier:
                keyid:1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:08:ab:b5:f3:8c:03:1d:74:ef:17:5b:4d:66:71:13:da:08:
         54:74:bf:38:cf:73:7c:0a:20:dc:52:3d:0e:bb:e1:c8:9d:e9:
         89:5b:2c:16:76:a9:89:6f:b5:e5:b9:7c:b1:38:96:2f:dd:a7:
         42:a9:2e:a9:d0:9e:d3:b1:2b:28:02:23:0c:88:d3:bb:24:4e:
         05:9c:26:7e:02:59:8a:ad:4b:a0:14:77:58:b6:a7:f1:9b:c5:
         a6:a8:84:19:95:20:18:8c:1c:ca:68:c4:04:97:ae:b0:5e:ec:
         f6:ad:73:5a:0f:e0:1e:9e:b1:c7:b8:dc:ee:1b:ea:56:81:62:
         b2:6d:88:7f:d6:d1:21:6c:e8:6d:90:57:31:80:fc:37:7d:78:
         30:4a:5f:d8:f6:a0:4e:73:93:6c:0d:8c:b7:14:6f:9d:c7:1c:
         a0:f2:01:ac:08:ba:48:89:19:3d:66:bc:e6:03:f7:61:de:cb:
         4c:66:75:ab:4b:e6:58:e1:ee:33:3a:79:52:f8:12:42:4e:26:
         56:61:b3:7c:9b:9b:11:51:32:02:31:8a:60:b1:b9:4c:49:a1:
         be:07:d3:eb:12:32:89:b4:a1:eb:aa:b1:06:ec:91:67:2c:f7:
         d5:5d:3d:ed:1f:d1:f0:19:fe:a5:7f:09:0a:f4:76:5f:30:5c:
         f7:ab:92:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:22:43 2024 by rpki-client on console-fra.rpki-client.org