Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
File:                     GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft (raw, json)
Hash identifier:          /R/brfDktYh/MJtceZboHW9XntHlowGpf1eGDXVqeJs=
Subject key identifier:   81:4A:B5:6C:CE:77:5C:B4:3D:5C:1F:6E:D3:8B:2E:B4:24:1E:25:B5
Authority key identifier: 19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
Certificate issuer:       /CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Certificate serial:       018F332BDC241027AD3A6D064B9973FCF48E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
Manifest number:          03B6
Signing time:             Wed 01 May 2024 08:01:03 +0000
Manifest this update:     Wed 01 May 2024 08:01:03 +0000
Manifest next update:     Thu 02 May 2024 08:01:03 +0000
Files and hashes:         1: GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl (hash: zV6ad+91EC5UzRy6vpNzWYD2LE2uJ3q1bTX7Ly28p7M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 08:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:33:2b:dc:24:10:27:ad:3a:6d:06:4b:99:73:fc:f4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
        Validity
            Not Before: May  1 08:01:03 2024 GMT
            Not After : May  2 08:01:03 2024 GMT
        Subject: CN=814ab56cce775cb43d5c1f6ed38b2eb4241e25b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:31:d2:bd:b8:86:19:48:bd:bc:7b:94:5d:d9:
                    7d:5e:b8:38:95:c0:23:d2:8a:4b:d0:01:36:8b:97:
                    f5:b6:25:47:a9:ad:81:7a:fb:d3:57:39:00:4a:f0:
                    c4:b4:03:4c:47:3a:38:58:47:b7:75:01:cf:f5:7e:
                    85:bf:bf:f2:7e:40:14:24:fc:74:b6:a7:4c:9b:15:
                    8f:a0:91:2c:e9:be:b9:34:2e:37:b0:61:fb:96:a6:
                    64:cb:8c:ce:f3:62:78:97:a4:ca:0c:4f:a1:3f:84:
                    57:11:dd:a1:b3:7a:73:ba:91:24:f3:31:11:f8:e5:
                    bb:17:dc:1e:77:62:38:47:f1:ec:a2:fc:90:bd:44:
                    af:96:cb:d5:d0:2a:a4:d1:f0:f3:72:23:2f:27:51:
                    c3:54:f6:b4:2a:70:dd:da:50:64:23:f5:a7:af:f4:
                    bc:ee:57:d0:ed:f0:3b:90:d1:1f:28:e1:ee:d5:e1:
                    83:3e:6e:f2:93:4c:64:2b:6c:78:06:18:fe:0f:43:
                    85:57:c0:c6:7c:5f:10:ee:da:8a:c4:9a:b3:e5:7c:
                    e0:63:a7:86:23:ae:35:04:b3:16:2e:6d:e3:a1:7d:
                    63:55:2b:e6:01:bc:5e:87:b4:dc:03:da:6a:27:04:
                    98:20:c3:7b:0d:7b:fa:20:4a:d3:54:81:62:a0:e7:
                    27:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4A:B5:6C:CE:77:5C:B4:3D:5C:1F:6E:D3:8B:2E:B4:24:1E:25:B5
            X509v3 Authority Key Identifier:
                keyid:19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f7:ea:3b:71:2b:2f:02:6f:94:ea:48:f8:f9:fc:8c:44:92:
         7e:d0:c2:51:af:11:d9:75:0d:f1:c2:28:44:82:44:42:45:cb:
         6d:22:29:41:c1:35:b7:4f:c1:21:ad:c0:1a:b7:2f:cb:b6:67:
         4a:ff:8b:b0:67:42:30:27:33:ff:de:cd:cc:be:13:d0:cf:fa:
         31:39:f6:c5:1c:53:86:8f:a4:87:c4:19:8a:23:cb:e0:16:01:
         c6:7c:64:08:fb:c4:ae:39:03:e6:1f:bd:f4:ac:9d:0d:62:a3:
         ba:cf:5a:88:c9:92:bf:d1:d4:ca:c8:4f:07:a1:c5:12:a3:7b:
         c5:6a:e4:f7:6f:29:00:52:ed:ad:b6:37:80:62:27:d8:59:0a:
         14:4c:37:fc:4a:39:d0:b4:5e:67:c8:60:2f:b1:2d:c0:07:2c:
         f9:b0:6c:b0:5a:a3:d8:64:96:21:48:b9:7b:b2:81:2d:8d:60:
         34:2f:ef:70:57:7e:a8:e8:6b:1a:71:ec:21:7c:45:5f:9a:b8:
         63:51:01:25:0f:2d:83:83:50:6b:f7:24:2a:f5:d1:d8:10:20:
         dd:8c:c0:a9:6d:82:05:8c:0d:d5:98:9e:49:a0:74:0f:1b:26:
         07:e3:65:e5:b9:bd:65:d6:8b:d2:b0:82:4c:e1:25:dd:2e:16:
         4b:9a:9f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 17:59:03 2024 by rpki-client on console-fra.rpki-client.org