Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
File:                     Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft (raw, json)
Hash identifier:          mPiXhmvcIRq318bYJw1VKrwdXk+udzZyuo4tUnaa158=
Subject key identifier:   64:9A:6A:2D:86:D6:78:25:52:09:21:97:38:E1:A6:DE:8A:09:7C:89
Authority key identifier: 1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
Certificate issuer:       /CN=1a9b70ef99760a0659deaefa660345a0e6115423
Certificate serial:       01936A7D74DFC8D93140DB28A35271952869
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
Manifest number:          130C
Signing time:             Tue 26 Nov 2024 22:00:26 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:26 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:26 +0000
Files and hashes:         1: Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl (hash: 3zEJszmzLnYTTHcKt/9APJjV46oGJ1WiFbi80XAWoZ8=)
                          2: Um1NhBhf46-hmbtlAartMB_Iz2Y.roa (hash: 3qxUlLw5Nb+gQwaZoZyz1jt33U6cgPncM2o4SZRo3+g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:74:df:c8:d9:31:40:db:28:a3:52:71:95:28:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a9b70ef99760a0659deaefa660345a0e6115423
        Validity
            Not Before: Nov 26 22:00:26 2024 GMT
            Not After : Nov 27 22:00:26 2024 GMT
        Subject: CN=649a6a2d86d678255209219738e1a6de8a097c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:85:0f:51:be:53:e8:2c:3e:c4:81:dd:2b:d7:
                    05:00:b9:4c:c4:ce:ed:4f:bc:c7:b2:ba:bc:00:b4:
                    65:d7:99:3a:4a:16:14:e3:f5:af:c7:31:8b:c3:c1:
                    8e:b2:50:42:44:e7:f2:b7:f9:7a:35:3f:ac:0d:bd:
                    ea:6e:40:e0:2e:78:aa:df:fc:e0:21:d0:fe:a0:0d:
                    3f:8a:81:29:eb:2a:26:9b:cf:48:a0:62:b0:aa:6c:
                    99:51:98:2c:e6:9d:e0:a1:3c:ff:a6:52:13:39:5a:
                    e7:76:4e:22:73:c7:62:a8:a6:c6:48:eb:57:2c:32:
                    6b:a8:c2:a8:db:80:c4:52:04:14:21:b1:f2:a7:dc:
                    01:2b:0c:56:41:14:a0:ec:5a:40:bf:e4:36:51:9e:
                    b5:69:02:f3:c0:87:91:43:ad:d7:ae:fe:9f:47:98:
                    97:40:00:fd:d3:b1:e8:be:8c:d8:f4:99:95:12:64:
                    dc:68:8f:88:ce:8b:88:f0:8d:a1:58:59:06:d3:69:
                    68:bd:fa:b0:e3:69:30:80:6f:e5:60:db:b7:9f:d1:
                    0b:99:29:64:25:c0:fc:56:8e:4a:a1:18:9b:0e:e8:
                    4e:a5:08:c4:b7:4c:1f:6d:4f:f4:4a:78:ba:53:ed:
                    ec:b0:fc:e0:15:67:a1:9c:19:a4:b1:7c:3e:29:29:
                    3b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9A:6A:2D:86:D6:78:25:52:09:21:97:38:E1:A6:DE:8A:09:7C:89
            X509v3 Authority Key Identifier:
                keyid:1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:96:77:d8:2b:80:c1:1a:e9:f7:03:4b:34:94:01:82:46:e4:
         f9:d6:3f:ab:b6:4e:12:d5:0e:20:1a:ef:12:c5:1b:6e:32:88:
         5a:b7:c6:14:ac:62:4b:7d:88:13:29:bc:e2:50:28:3a:28:0b:
         7a:72:93:c7:a4:cf:94:cd:39:fd:64:f3:8b:86:f6:74:7a:f0:
         ef:ef:da:fe:a0:6f:02:b2:59:56:94:9e:df:3e:8d:a3:7a:39:
         05:a7:4d:9c:ad:4c:3a:3c:ad:9c:b0:dc:74:fc:96:df:7f:fa:
         7e:03:5a:42:d1:81:55:27:5a:bd:e6:5a:b9:c3:ca:70:3c:b6:
         75:59:b9:55:e4:9c:46:94:d5:83:10:8c:d6:a1:d7:79:b7:3d:
         b2:d8:7f:48:d3:b8:d8:19:a6:62:20:f2:cd:81:6d:08:c9:56:
         ed:ef:c3:11:21:d3:eb:24:ec:61:c1:8c:ba:45:f3:74:2f:cb:
         cf:ce:53:ef:4e:d8:f5:bd:e5:1b:48:8b:94:a5:0d:58:e1:3c:
         df:d1:9c:60:a3:42:3d:98:4a:9b:e1:ec:e2:ca:b9:f7:fe:a1:
         23:39:1b:a6:84:ba:c4:d6:72:ca:5d:53:5a:74:fc:0a:31:69:
         2f:33:a4:0d:ac:e0:de:32:fd:13:d6:48:31:1d:7c:7b:73:99:
         fe:26:8c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:32:48 2024 by rpki-client on console-ams.rpki-client.org