Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File:                     GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier:          1QO7vrtwgBoMiCszSUjM6qTEp2tUl7zlLrwapMtsjG0=
Subject key identifier:   32:15:B7:4B:67:38:AD:FF:F3:E4:30:AF:AA:A0:E0:07:B8:F0:CA:52
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer:       /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial:       019238BA22AC66CEA60C917E46E06F5F664A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number:          126F
Signing time:             Sat 28 Sep 2024 13:02:55 +0000
Manifest this update:     Sat 28 Sep 2024 13:02:55 +0000
Manifest next update:     Sun 29 Sep 2024 13:02:55 +0000
Files and hashes:         1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: MJ3VK4LU6kDvm604fP7Qav9v1U2Ae0ZeFyKg2ut9ysI=)
                          2: rEWOroLYcpb0MGyptN_yVBoqVIM.roa (hash: pONzU8KuT3psx/aPta7eORedpMjnt4/OVcZivbptOSY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:ba:22:ac:66:ce:a6:0c:91:7e:46:e0:6f:5f:66:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
        Validity
            Not Before: Sep 28 13:02:55 2024 GMT
            Not After : Sep 29 13:02:55 2024 GMT
        Subject: CN=3215b74b6738adfff3e430afaaa0e007b8f0ca52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:99:c6:e8:cb:53:13:7c:b9:02:e4:ee:1d:b7:
                    cc:9d:84:b0:e3:9d:96:c7:2e:5b:b9:7f:ec:3c:43:
                    da:10:6a:51:a4:30:2f:34:2e:03:bc:da:bb:3f:0c:
                    b8:82:c4:c3:28:65:f0:ae:23:c7:ca:4d:66:86:8e:
                    09:a1:4b:65:5c:fb:b1:c6:8b:d2:b3:08:87:ad:7e:
                    88:df:88:88:76:23:3b:cb:2c:10:81:c3:83:7b:47:
                    db:c4:21:d1:c8:54:45:76:cd:b0:f8:b8:16:6b:4c:
                    56:68:99:c6:c2:12:26:30:25:c4:83:5f:45:a6:62:
                    0d:ee:ed:43:74:99:1e:70:3c:42:a3:9c:51:c9:8f:
                    b0:a8:74:c9:49:d9:c9:35:65:7d:1f:c3:42:12:88:
                    92:f9:ac:b7:ec:2b:c7:e7:db:ed:93:fa:8c:fd:a1:
                    34:a6:3f:b1:52:10:ea:1a:15:c2:b7:5c:80:ff:4b:
                    bf:ab:18:e7:27:6b:f9:da:97:17:ba:61:e4:31:ca:
                    ce:5c:27:6d:c9:36:75:b6:dc:65:64:63:4e:59:e3:
                    0b:b5:b1:4f:5d:4b:2b:f8:e9:c7:d8:6c:23:65:cf:
                    cd:94:37:5a:4c:e7:67:0f:b7:ad:28:8f:55:a5:6e:
                    8e:6e:5e:37:e0:ff:aa:d4:0b:01:1b:88:a6:60:62:
                    92:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:15:B7:4B:67:38:AD:FF:F3:E4:30:AF:AA:A0:E0:07:B8:F0:CA:52
            X509v3 Authority Key Identifier:
                keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:60:55:28:70:2c:e8:b2:f8:32:13:1d:45:80:aa:33:2d:e3:
         00:63:1c:c3:36:57:b2:e9:f9:9d:4d:01:5f:ca:20:c4:c7:83:
         7f:a9:6e:e3:96:5a:99:84:db:2b:5c:df:68:5e:94:fc:da:dd:
         14:b3:a9:5c:5f:fb:ab:05:66:7a:2b:5d:0e:0b:a2:47:e6:04:
         00:0b:43:50:69:e4:70:45:56:69:e9:ed:bb:67:c7:a0:29:20:
         29:21:c5:cd:40:e6:db:78:d6:0b:78:18:e3:5a:ea:1a:c3:ab:
         09:1b:a6:e3:45:7a:df:10:af:57:53:5c:31:a1:06:e8:47:a0:
         0d:90:41:89:c4:54:a0:68:9d:88:da:cd:d0:2f:2e:d9:37:21:
         08:9a:c3:dc:7c:8f:38:83:b1:91:7b:91:36:6c:1b:ad:0d:34:
         3d:4a:a3:13:2d:06:d3:69:8d:04:9e:55:12:77:ea:f1:53:0e:
         19:85:42:e1:e0:e1:35:5b:56:a5:bf:a6:77:90:89:52:42:3c:
         fb:f3:6d:ca:f4:42:fc:d6:9d:8d:4a:62:dc:4d:5a:dc:80:10:
         a4:37:6c:ae:67:55:02:b0:11:47:f8:d4:0d:80:64:72:fc:fb:
         63:bc:52:db:84:7f:1b:34:39:fc:f3:07:d6:e7:73:a6:cd:6c:
         aa:25:c7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:35:01 2024 by rpki-client on console-ams.rpki-client.org