Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
File:                     gcAMyMc9EUHIklTtVWqNASypAiY.mft (raw, json)
Hash identifier:          8ZBbOHUdo86Hr8yN6141TvXSROmUBb58oB2LFvSWRGs=
Subject key identifier:   4B:58:DB:26:A8:17:C4:D6:55:A1:5F:85:19:6F:05:96:0A:45:72:1E
Authority key identifier: 81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26
Certificate issuer:       /CN=81c00cc8c73d1141c89254ed556a8d012ca90226
Certificate serial:       018F8823E6839ED8332C9479F75AEAC1BDDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
Manifest number:          03C5
Signing time:             Fri 17 May 2024 20:00:05 +0000
Manifest this update:     Fri 17 May 2024 20:00:05 +0000
Manifest next update:     Sat 18 May 2024 20:00:05 +0000
Files and hashes:         1: VY_hf3RKClGcnVStG4Sf8dTWZiE.roa (hash: 2pEj6vrawl3293e94ijMQm2SOo1lpNC0EB+lb1DOlsU=)
                          2: gcAMyMc9EUHIklTtVWqNASypAiY.crl (hash: mvFeGwnmpVp2F2/4UvkoPh5NOXzFWrT0A7WzAYASMFE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:e6:83:9e:d8:33:2c:94:79:f7:5a:ea:c1:bd:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c00cc8c73d1141c89254ed556a8d012ca90226
        Validity
            Not Before: May 17 20:00:05 2024 GMT
            Not After : May 18 20:00:05 2024 GMT
        Subject: CN=4b58db26a817c4d655a15f85196f05960a45721e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e5:03:77:07:bf:0d:3c:d8:12:ea:d6:b6:f7:
                    b2:20:9d:57:64:0f:62:25:79:5e:ee:47:1b:61:61:
                    77:e8:eb:d1:9c:1b:5d:c4:82:c8:98:39:9e:69:ad:
                    a0:96:96:74:fa:6e:f9:8b:72:b2:00:36:b9:5c:62:
                    c2:3a:db:df:05:8e:e6:08:9f:14:88:53:ff:65:c6:
                    94:0e:e7:ce:1b:4b:2f:aa:7f:e2:c1:53:0b:9c:2d:
                    f6:75:4c:54:01:21:03:47:0b:ae:25:b3:f5:67:04:
                    5f:55:b9:3a:02:95:83:d8:a4:7f:b6:5d:d2:31:fd:
                    fe:57:8a:ae:70:65:58:a5:97:ca:38:49:13:48:da:
                    47:b8:4c:13:e9:b8:7c:5d:ab:cb:f6:d3:cf:ee:ba:
                    eb:34:9b:e4:34:f2:31:ab:ad:fe:c9:b7:b6:9c:18:
                    42:b5:13:71:09:0b:35:98:7a:9e:b4:89:cb:2c:2c:
                    f8:02:6a:63:f2:70:d0:12:11:8d:6f:6c:3d:e5:29:
                    04:08:d1:66:ed:87:79:f4:d9:92:ee:a9:f5:00:d4:
                    0d:45:ce:10:e1:ab:28:07:ff:c1:0b:90:3a:d4:e4:
                    ed:5a:97:92:d8:31:01:24:c6:c7:a2:f9:1b:26:ed:
                    23:2b:2a:11:5a:2c:b7:19:ec:1b:46:fc:e6:74:5f:
                    4e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:58:DB:26:A8:17:C4:D6:55:A1:5F:85:19:6F:05:96:0A:45:72:1E
            X509v3 Authority Key Identifier:
                keyid:81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:0f:42:e7:ff:d9:2c:aa:e5:ec:47:58:a3:78:65:45:cf:b7:
         96:8a:f5:dd:bb:0a:71:ba:44:b8:8f:7b:08:3b:d1:c5:c9:6e:
         13:32:03:dc:15:d8:b6:39:33:5f:14:6b:21:5f:f3:3a:52:7a:
         d8:8f:58:05:94:a6:e8:6d:6b:00:3c:b1:d8:1a:01:85:ec:dc:
         07:a0:db:27:a5:38:1f:0c:7a:71:82:0c:78:7e:3e:37:a3:2f:
         72:da:df:1d:ff:8b:ac:b4:ce:da:44:a0:cc:fe:25:62:f2:3d:
         14:fb:4d:fb:e3:ca:3a:83:9d:7b:49:84:8b:a2:e2:2a:0e:bb:
         69:08:59:09:32:e0:ce:72:e3:4f:cb:84:15:18:53:d0:ee:da:
         65:e6:2e:d6:d3:69:02:7d:c6:7e:ea:50:86:28:f1:db:63:64:
         7a:24:ec:04:d9:cb:8a:c0:ba:01:df:e6:b9:21:19:3f:3d:ea:
         bc:49:6c:60:d0:b9:8a:b0:de:7a:2f:25:29:f8:79:3c:98:f7:
         ca:39:3f:44:8d:d1:d5:d6:9f:19:64:3e:72:11:05:e9:d3:39:
         0d:69:2a:0e:67:c5:39:2b:6f:07:70:f5:2e:97:55:37:79:1e:
         1a:2d:26:6a:89:fa:77:42:7f:d1:4d:f2:83:2a:74:5c:fb:31:
         12:81:88:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:14:33 2024 by rpki-client on console-ams.rpki-client.org