Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
File:                     G6UWeIg5f_nKqET1VP-DfP2_lyI.mft (raw, json)
Hash identifier:          PETtIaf/xs0ReenP4HvZ48pvjXepG4c9i/nsMntWPDw=
Subject key identifier:   9A:E2:1B:B8:2B:09:8D:A9:46:06:13:86:58:5A:EB:EF:57:C6:C6:62
Authority key identifier: 1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
Certificate issuer:       /CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Certificate serial:       018F4AC657337443735E400F7AFF42DF8B33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
Manifest number:          10AD
Signing time:             Sun 05 May 2024 22:01:03 +0000
Manifest this update:     Sun 05 May 2024 22:01:03 +0000
Manifest next update:     Mon 06 May 2024 22:01:03 +0000
Files and hashes:         1: G6UWeIg5f_nKqET1VP-DfP2_lyI.crl (hash: uO6jaykS5I8JxkjteEzJSmmkr3O6Q1fakL7AsYOB11k=)
                          2: xTZa57VZgLEqu3rGM8QLgFc3Xl8.roa (hash: iurG/6YfPSPu2qkVLzNWYqfFL9tJP2GaKPdV1HUc8Oo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 22:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:c6:57:33:74:43:73:5e:40:0f:7a:ff:42:df:8b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba5167888397ff9caa844f554ff837cfdbf9722
        Validity
            Not Before: May  5 22:01:03 2024 GMT
            Not After : May  6 22:01:03 2024 GMT
        Subject: CN=9ae21bb82b098da946061386585aebef57c6c662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fb:61:fe:28:3e:f2:2a:63:92:dd:ed:52:78:
                    65:62:03:13:39:45:a6:83:a3:b9:e4:6b:cf:1b:3b:
                    04:19:e7:7a:df:ee:24:d4:c5:5e:73:b7:de:2e:c4:
                    67:de:af:35:d1:36:ea:0d:59:33:65:53:16:2a:1c:
                    6b:74:8b:21:e5:12:27:29:2b:1b:2d:40:f7:0e:47:
                    1a:63:f6:2f:6c:cf:18:23:2b:d3:1a:19:79:fe:19:
                    cf:1f:5e:c8:fe:10:8b:8c:69:6f:75:21:9f:18:f3:
                    74:fb:3b:0f:94:a6:62:f2:3e:ad:b4:75:d3:df:49:
                    1e:4e:52:7a:cf:60:d1:67:67:fe:f1:13:71:ee:1c:
                    1d:45:dc:ad:9d:d2:93:70:27:e5:62:66:75:c8:10:
                    18:c4:3c:15:a9:b9:32:aa:21:cc:19:39:08:8f:e8:
                    35:b5:6a:26:fb:64:03:a0:bc:98:cb:cc:72:a6:7d:
                    8b:c7:4e:7a:53:b5:2a:fb:5e:73:7d:5e:60:24:c8:
                    bf:f7:80:47:fe:58:31:a6:f0:61:d0:c4:63:2d:5e:
                    0e:ef:b3:16:89:11:48:6b:7b:07:60:f6:9c:fa:fc:
                    05:c2:59:07:94:b2:98:1c:71:0f:c1:20:d3:0a:28:
                    50:14:ff:31:5c:ba:bb:d2:7e:ac:c4:59:90:7f:47:
                    09:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E2:1B:B8:2B:09:8D:A9:46:06:13:86:58:5A:EB:EF:57:C6:C6:62
            X509v3 Authority Key Identifier:
                keyid:1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:22:7e:95:1e:26:1c:72:2d:6c:60:bf:8f:ce:7a:cd:65:80:
         89:6a:15:1a:58:94:f3:1e:58:e6:f2:e3:11:64:7b:d6:e4:a3:
         d7:f5:f4:2e:02:a5:5a:fd:1c:72:f1:6d:73:f8:40:70:97:cf:
         46:12:0f:8a:b4:a3:6e:6a:84:df:6c:31:75:ad:7b:7a:11:6a:
         d9:5c:78:92:35:95:25:9a:e0:d9:f2:ac:f8:a2:fb:4d:a7:83:
         04:90:2f:49:e9:09:01:bf:64:b9:22:f1:14:6f:a5:96:ab:9f:
         02:cc:9d:fc:fb:43:56:04:70:ac:4f:48:af:6a:5c:84:f7:36:
         92:b3:01:ee:32:73:7f:07:69:18:d7:fd:16:3b:67:2c:97:86:
         2c:54:7f:43:ac:26:96:fd:e0:6f:69:03:ce:4e:c2:f5:6a:19:
         4f:19:43:d9:48:ef:3d:8e:53:8b:11:1b:e3:30:05:56:b2:e7:
         15:ab:06:23:e5:e8:e9:41:1a:4b:32:57:26:78:2e:b0:10:bc:
         da:71:f1:5c:cb:7b:69:0d:03:16:c8:0d:c0:35:ef:bb:5b:25:
         05:87:d7:9a:9c:3a:09:9c:cf:ef:fc:6c:26:d5:47:d2:44:b2:
         49:39:31:e5:44:22:16:0d:04:9f:64:4a:38:14:ae:11:f2:97:
         b1:59:e0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 07:52:25 2024 by rpki-client on console-fra.rpki-client.org