Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
File:                     G6jqOiKIpq-PZKg4MALHQIVXmgc.mft (raw, json)
Hash identifier:          iNmqLDg38GcGS4O0eWzopCQjRxBv/qVITe0o3XmkWEg=
Subject key identifier:   57:A8:0A:F6:49:6D:67:18:80:D6:0F:C6:8D:20:CF:25:81:C3:E2:D9
Authority key identifier: 1B:A8:EA:3A:22:88:A6:AF:8F:64:A8:38:30:02:C7:40:85:57:9A:07
Certificate issuer:       /CN=1ba8ea3a2288a6af8f64a8383002c74085579a07
Certificate serial:       018F4BD9E1D1E5657CB781DAE1639C6F753A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
Manifest number:          0FF3
Signing time:             Mon 06 May 2024 03:02:01 +0000
Manifest this update:     Mon 06 May 2024 03:02:01 +0000
Manifest next update:     Tue 07 May 2024 03:02:01 +0000
Files and hashes:         1: G6jqOiKIpq-PZKg4MALHQIVXmgc.crl (hash: UzqeMLtlP6Fd/0YAsqE1jf4DwM5PnsoubH9ABQZvGRQ=)
                          2: espcbVBoyb_DCbKrFORWK0ksV1k.roa (hash: OKoQU7vZ0nkdc0l6MQ1AvAaqs9obOuZ983i3rkTLJYo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:d9:e1:d1:e5:65:7c:b7:81:da:e1:63:9c:6f:75:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba8ea3a2288a6af8f64a8383002c74085579a07
        Validity
            Not Before: May  6 03:02:01 2024 GMT
            Not After : May  7 03:02:01 2024 GMT
        Subject: CN=57a80af6496d671880d60fc68d20cf2581c3e2d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:44:dd:a7:f2:6d:94:ce:ee:fc:fa:e4:2d:42:
                    18:9d:56:bb:a8:cd:89:c9:39:58:73:d0:71:85:af:
                    34:cb:30:26:0e:bf:59:ce:eb:5a:75:fb:60:5b:b5:
                    f4:3f:84:61:4a:3b:57:e9:e3:b7:58:ad:e5:2b:78:
                    56:fc:4b:01:00:09:66:ec:8c:0e:46:c7:de:72:b3:
                    11:39:ec:78:33:dc:be:83:a9:39:f7:6f:a7:e7:0c:
                    35:c1:5d:f6:05:05:d1:77:e6:1d:be:fc:99:90:90:
                    25:fb:25:6a:de:d9:34:06:ee:d4:e9:4f:35:3a:66:
                    69:df:58:53:6b:89:c8:74:09:da:e4:fb:d3:d4:da:
                    e8:cf:06:bf:97:e8:82:e3:35:9b:b2:1f:cc:37:8b:
                    c5:74:d1:7d:49:39:83:22:55:58:d0:57:5f:d9:71:
                    f9:c4:c2:90:3d:f4:02:a2:69:21:71:fd:b2:8c:f2:
                    67:d0:49:b2:a7:22:93:d8:b3:e0:63:37:4a:8c:77:
                    dc:7a:ef:17:de:dc:af:02:f6:01:0f:b4:a0:60:f1:
                    ff:2a:cf:89:4b:9b:ab:5f:86:32:cf:8a:bb:79:c9:
                    aa:77:84:49:50:01:21:a9:71:15:33:8b:e9:db:1d:
                    95:9d:f5:1d:55:d0:8f:b4:39:ee:f7:89:d1:9f:58:
                    ef:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A8:0A:F6:49:6D:67:18:80:D6:0F:C6:8D:20:CF:25:81:C3:E2:D9
            X509v3 Authority Key Identifier:
                keyid:1B:A8:EA:3A:22:88:A6:AF:8F:64:A8:38:30:02:C7:40:85:57:9A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b8:c9:99:7a:f2:fa:b3:71:5e:16:99:1f:8e:46:be:f3:b9:
         e0:f7:3f:90:84:3d:f9:c6:6e:53:53:1a:61:8a:eb:10:52:6a:
         d3:e6:66:1c:fa:ee:a4:21:ca:6d:43:b1:67:19:a7:bc:6e:d5:
         2d:f9:47:6c:98:20:88:79:80:ee:b6:30:43:91:2f:12:cd:a7:
         df:79:df:d0:68:f4:3e:72:e8:46:18:70:ff:b7:fc:5a:37:7e:
         17:7e:aa:91:a2:f4:a3:d4:af:ea:bb:b4:1f:af:47:55:43:63:
         2a:15:e5:11:c1:23:3f:e3:97:ec:58:8a:05:54:c6:87:ee:45:
         61:e2:e9:83:c1:88:c1:ff:29:a0:98:1b:a4:60:a9:8a:b2:a8:
         38:ae:83:e8:2c:df:bc:44:7c:0f:36:9a:d9:0d:29:cd:e6:d8:
         47:ef:6c:f6:ea:7b:1b:a7:ec:1a:5f:0d:e4:1c:5b:fa:dd:fb:
         30:ff:85:06:24:f0:8a:90:a6:1e:6d:96:08:8a:86:0f:c5:e6:
         e4:f4:82:1e:fb:23:cc:b9:b7:38:57:bc:f4:d3:ba:bd:3e:df:
         6d:1e:a0:fd:fd:04:8f:03:bc:52:02:bb:b3:b3:3a:e2:5e:a3:
         be:a7:4e:e8:ef:d1:31:a8:0b:74:0d:d3:c2:d3:03:d0:a0:ea:
         97:21:55:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 11:25:35 2024 by rpki-client on console-ams.rpki-client.org