Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
File:                     gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft (raw, json)
Hash identifier:          i1V7MqRhSwa0cKszuV2RaC+2kYdCrhPpmkPbcwSXL4E=
Subject key identifier:   9E:86:19:62:BE:04:EE:77:DD:2F:2A:99:83:F9:0A:9D:EA:E6:F8:9C
Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
Certificate issuer:       /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Certificate serial:       018F8749ED784B3EAE1DBF050EC072682E5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 16:02:00 +0000
Manifest this update:     Fri 17 May 2024 16:02:00 +0000
Manifest next update:     Sat 18 May 2024 16:02:00 +0000
Files and hashes:         1: 59Tv1gNhx-uiqlKXlqhEKUCtpU8.roa (hash: szFZjbcF8DyZc171zGS3Sdej1lO+RzU0IP1AtezkhlI=)
                          2: BsYzlC9om29XC5ZoIuyf-96MAJ8.roa (hash: 47pR6DHPCp/NxOO+ejNObshofeg6IoRVkhboYH5ljek=)
                          3: gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl (hash: BKl5pWUcOvJ2lrKTHE4BRxGfFiMrHLqxbOQB0t/kO9s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:ed:78:4b:3e:ae:1d:bf:05:0e:c0:72:68:2e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
        Validity
            Not Before: May 17 16:02:00 2024 GMT
            Not After : May 18 16:02:00 2024 GMT
        Subject: CN=9e861962be04ee77dd2f2a9983f90a9deae6f89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:b8:d3:54:c3:e6:91:c0:5a:27:a1:7f:66:
                    d6:41:92:1f:b2:6e:46:5a:af:30:4a:79:b7:01:ca:
                    af:eb:7c:c4:63:a9:2a:8b:d6:2f:ec:60:ce:13:de:
                    b4:83:bb:e0:79:57:be:51:b6:a4:89:72:51:fc:9e:
                    90:c7:7b:4a:3d:62:7a:cc:7c:27:c0:f1:fa:82:5a:
                    d7:14:83:db:04:6e:08:1c:d6:cd:45:a9:08:4a:e1:
                    db:6b:e6:43:22:28:a5:27:fa:e7:ba:a7:7b:60:56:
                    a8:34:c7:c3:68:3c:78:24:de:bd:99:41:cb:fd:60:
                    79:5d:dd:07:2e:f3:17:d3:63:af:86:f2:21:b3:10:
                    90:9a:9e:20:d9:75:b4:d7:c7:23:bd:c7:8c:c0:af:
                    f8:d5:a4:29:47:bf:49:ca:ca:5e:e2:cb:fe:a5:08:
                    6e:21:1a:3a:fb:7c:50:ad:1f:2a:a5:1a:f1:9b:56:
                    74:e4:c9:2a:6c:e8:b4:f8:3d:de:46:d9:0b:8c:5d:
                    c9:df:ab:c5:d4:02:f7:ce:2f:6f:c5:1c:16:fc:43:
                    85:a7:9a:0c:8a:0f:63:8a:c1:12:49:3f:d5:64:75:
                    fd:a3:a4:e9:95:fe:0b:e1:4e:e6:43:d9:02:35:d7:
                    74:94:b0:44:32:37:49:2b:49:6b:d0:4b:dd:52:a0:
                    4d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:86:19:62:BE:04:EE:77:DD:2F:2A:99:83:F9:0A:9D:EA:E6:F8:9C
            X509v3 Authority Key Identifier:
                keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:2e:db:15:2c:cd:7c:84:0c:f2:c2:25:87:7a:14:46:81:4a:
         b4:14:ca:87:77:e4:5e:35:91:55:34:ef:8d:a5:83:45:3a:4b:
         0e:69:1e:95:73:02:bc:99:58:d8:bd:24:3f:c0:9c:3b:69:ad:
         10:6b:f7:64:43:24:b2:23:04:be:d1:5d:67:b5:66:fd:fe:b5:
         28:06:bb:1a:6a:94:ed:eb:6e:27:dd:4f:c4:b6:30:b2:d4:e8:
         85:19:46:c6:75:95:35:af:13:b7:fe:24:70:96:2d:0f:f7:02:
         c1:77:26:4b:5d:a7:8b:e2:7e:8a:25:0b:08:23:68:01:99:0c:
         05:81:99:52:48:a2:21:80:45:bb:3f:00:5b:7f:da:24:68:5b:
         6a:9e:c9:fb:f7:d1:af:37:75:71:6b:aa:f2:db:53:4b:ac:fb:
         32:a4:08:a0:6e:35:b4:d6:e1:3e:28:4f:e6:c2:f9:92:4f:19:
         4b:95:9e:b0:6c:93:01:fd:63:37:16:16:bb:84:c2:5d:81:d0:
         d9:bd:d7:bb:58:e8:a0:07:78:16:be:cd:c1:28:8d:dc:75:19:
         12:6f:e7:1a:06:32:15:d1:53:5f:aa:6e:8c:23:f4:6b:11:9e:
         28:cf:b3:86:9e:9e:61:9b:b1:dc:29:18:b1:21:17:88:67:08:
         77:1f:18:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:11:54 2024 by rpki-client on console-fra.rpki-client.org