Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
File:                     GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft (raw, json)
Hash identifier:          K72lO4YbqeOoaRK5dPcLZshddIdr5TtrmU5MkR76nAY=
Subject key identifier:   9C:DB:F4:F3:4A:2E:4C:81:B5:14:ED:33:D1:E6:51:0F:BF:27:59:A3
Authority key identifier: 19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
Certificate issuer:       /CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Certificate serial:       018F22DE0A1B5995DEB795A24B3C3C8CD06E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
Manifest number:          1143
Signing time:             Sun 28 Apr 2024 04:02:07 +0000
Manifest this update:     Sun 28 Apr 2024 04:02:07 +0000
Manifest next update:     Mon 29 Apr 2024 04:02:07 +0000
Files and hashes:         1: BJmksleJnCtS0IWjlM4oQKDc__4.roa (hash: gFGXGwGmDbwA72v1XEFNw9eC4ZKQNKvrcqFJd+cNVdk=)
                          2: GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl (hash: z2d3w9NnSYdbWWcX83J123u21IGY8Z4dAwSpNBmRQGw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:de:0a:1b:59:95:de:b7:95:a2:4b:3c:3c:8c:d0:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
        Validity
            Not Before: Apr 28 04:02:07 2024 GMT
            Not After : Apr 29 04:02:07 2024 GMT
        Subject: CN=9cdbf4f34a2e4c81b514ed33d1e6510fbf2759a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5d:f6:3e:5c:af:06:dc:06:f7:c1:0a:87:c4:
                    4b:fb:f6:5a:3c:09:c7:c2:2a:94:b2:d1:69:11:da:
                    a2:77:a7:4a:f9:95:38:7d:90:bb:b4:25:6b:5a:0d:
                    72:c5:39:78:bc:c4:02:2e:49:e2:0d:00:be:80:45:
                    22:07:20:5d:a8:fc:93:52:de:69:62:03:5b:95:b3:
                    71:3a:43:23:4e:6b:35:62:5c:90:0b:b4:89:19:ac:
                    36:fe:9c:70:ac:39:53:4c:34:11:84:8e:d3:b1:2f:
                    4d:a4:5a:41:f1:9d:8e:a3:a3:13:d4:7a:f1:bf:fe:
                    c6:0d:0d:e3:4c:1f:17:11:ef:83:42:09:0f:af:ae:
                    64:08:fb:6e:75:56:47:6f:cb:48:d4:83:bd:ed:bc:
                    59:1f:e3:91:e3:30:90:ab:96:98:06:e0:2d:71:ee:
                    f0:bc:37:f7:69:00:0f:6b:98:1e:ed:39:1e:82:37:
                    dd:e5:0e:a8:33:ec:dd:0b:ab:5c:8f:5a:c0:1e:d5:
                    9c:7d:e2:47:8a:91:06:64:a2:72:f5:3a:95:c2:a0:
                    37:92:61:62:22:c2:cd:76:55:3f:0a:a7:d1:7c:38:
                    4f:d7:55:84:47:81:e9:1a:b9:6c:07:f8:2a:aa:79:
                    00:d5:f0:4c:c1:d1:3f:7b:12:2f:d4:94:a7:75:a6:
                    90:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DB:F4:F3:4A:2E:4C:81:B5:14:ED:33:D1:E6:51:0F:BF:27:59:A3
            X509v3 Authority Key Identifier:
                keyid:19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:57:0f:98:e7:16:ee:6a:79:4b:29:93:b9:5e:be:d1:76:80:
         81:b1:bf:49:8d:b9:50:52:41:62:7b:40:b1:46:bc:26:b9:b3:
         b8:23:ba:92:cb:d2:6e:fa:61:e1:d5:cd:46:41:b7:1d:1a:52:
         e8:8e:b6:3d:c0:c3:0f:f8:a6:5d:ed:74:8f:03:72:bb:79:d2:
         98:5d:d5:81:6a:ee:37:2e:f7:2f:58:28:0d:c9:18:7e:fb:0c:
         96:21:0a:a9:7e:9e:ee:88:3a:5d:de:be:7a:bf:38:db:ea:c2:
         cc:c1:8b:8e:16:e1:d1:79:75:bf:64:a0:55:5c:75:e4:f4:c8:
         f1:bf:00:99:41:c7:13:4a:f7:1c:2f:25:9f:45:38:ac:1c:3f:
         1e:9b:3f:5b:ba:bb:66:26:a5:b5:b9:63:89:09:da:dd:66:0f:
         4e:90:cb:17:85:8d:bc:b2:ec:2b:7a:65:31:1f:ce:ed:50:1e:
         8f:68:b4:c6:4c:bb:0e:04:47:4f:84:da:b1:69:90:f0:ef:16:
         9e:f7:9b:86:07:91:e9:a4:f3:32:86:9e:7f:70:a0:01:d5:3b:
         63:ac:2f:99:b0:85:2a:8c:4f:ee:7b:a5:64:8f:c6:ed:5c:b0:
         0c:97:f9:e4:1b:b5:d0:fc:87:91:b0:ac:14:75:16:3c:ba:64:
         95:dd:d3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:47:04 2024 by rpki-client on console-ams.rpki-client.org