Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1f50e1-e7a9-4769-887f-708038bb9816/1/1GYMK1_mmAYfHgqlfVXfbPBChU0.mft
File:                     1GYMK1_mmAYfHgqlfVXfbPBChU0.mft (raw, json)
Hash identifier:          +JD3bfgrAuY808CdvSbvjnGBgXOr0BqoPMFMAxN9PSc=
Subject key identifier:   73:6B:BA:30:AA:B1:68:B2:B2:98:C3:74:C8:9A:0D:10:F1:55:75:C9
Authority key identifier: D4:66:0C:2B:5F:E6:98:06:1F:1E:0A:A5:7D:55:DF:6C:F0:42:85:4D
Certificate issuer:       /CN=d4660c2b5fe698061f1e0aa57d55df6cf042854d
Certificate serial:       018F584BC8169130DBB484409FF2DB62B009
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GYMK1_mmAYfHgqlfVXfbPBChU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/1f50e1-e7a9-4769-887f-708038bb9816/1/1GYMK1_mmAYfHgqlfVXfbPBChU0.mft
Manifest number:          10EF
Signing time:             Wed 08 May 2024 13:01:52 +0000
Manifest this update:     Wed 08 May 2024 13:01:52 +0000
Manifest next update:     Thu 09 May 2024 13:01:52 +0000
Files and hashes:         1: 1GYMK1_mmAYfHgqlfVXfbPBChU0.crl (hash: TZNs2JcpcrZppTK/xDIUGwUdag+0O200uaXmXSa1qkM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/1f50e1-e7a9-4769-887f-708038bb9816/1/1GYMK1_mmAYfHgqlfVXfbPBChU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/1f50e1-e7a9-4769-887f-708038bb9816/1/1GYMK1_mmAYfHgqlfVXfbPBChU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GYMK1_mmAYfHgqlfVXfbPBChU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:4b:c8:16:91:30:db:b4:84:40:9f:f2:db:62:b0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4660c2b5fe698061f1e0aa57d55df6cf042854d
        Validity
            Not Before: May  8 13:01:52 2024 GMT
            Not After : May  9 13:01:52 2024 GMT
        Subject: CN=736bba30aab168b2b298c374c89a0d10f15575c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5f:32:0a:98:47:23:ae:ce:5e:27:51:74:a6:
                    43:60:3d:ce:a4:42:c5:77:cc:04:50:40:db:ee:5f:
                    96:45:fa:7a:b6:6f:f3:47:7c:ae:5c:33:46:21:26:
                    1a:a7:72:ae:34:40:a7:b8:63:82:ca:29:23:02:a6:
                    9a:82:3f:d1:b6:12:58:99:21:01:f1:27:3f:65:be:
                    76:e4:3f:5e:63:40:80:5f:f8:eb:4a:cd:a3:f4:dc:
                    c8:f2:fd:bc:22:f7:b6:ed:b4:91:f5:64:21:c9:ee:
                    bf:57:07:7d:d5:8d:4c:d7:0b:13:65:5d:3a:d4:62:
                    7d:b0:c5:a0:ea:3a:18:13:57:3c:1c:ea:62:fa:40:
                    61:65:37:32:66:1f:85:4f:8f:26:c4:7c:fc:35:c3:
                    17:e5:57:a3:e3:5f:f3:69:a6:54:92:21:00:6e:da:
                    0a:b7:dd:7f:08:ec:aa:81:20:2d:40:e6:d3:e6:ec:
                    48:3f:ed:01:04:c0:ea:60:d9:a7:b8:ba:dc:52:29:
                    cb:c0:47:b4:0e:af:f6:8f:6f:86:b9:19:ff:9b:ad:
                    92:35:36:b9:7c:45:ea:83:00:5d:e9:1f:e6:f7:62:
                    62:55:1e:d0:31:8f:a1:e0:35:45:fc:ef:77:55:5b:
                    c1:f7:77:d4:ac:3c:cd:9c:58:e7:99:87:4f:af:0d:
                    ce:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6B:BA:30:AA:B1:68:B2:B2:98:C3:74:C8:9A:0D:10:F1:55:75:C9
            X509v3 Authority Key Identifier:
                keyid:D4:66:0C:2B:5F:E6:98:06:1F:1E:0A:A5:7D:55:DF:6C:F0:42:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GYMK1_mmAYfHgqlfVXfbPBChU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f50e1-e7a9-4769-887f-708038bb9816/1/1GYMK1_mmAYfHgqlfVXfbPBChU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f50e1-e7a9-4769-887f-708038bb9816/1/1GYMK1_mmAYfHgqlfVXfbPBChU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:07:52:2e:81:57:e3:45:f6:9d:01:ba:06:50:bc:a6:c8:4e:
         2a:e4:6d:2c:9f:3f:4e:6a:22:1b:02:bf:c8:24:65:bf:21:75:
         a2:db:1e:c4:6d:49:03:b2:6d:d2:24:1d:ce:59:34:62:36:f2:
         e1:7a:eb:b7:4d:0c:3d:1f:7b:b3:82:34:8a:c2:7e:1f:a2:c1:
         35:7c:8f:58:45:9e:a1:2c:00:77:33:55:92:01:e1:f7:18:81:
         06:c3:99:71:e2:f2:c7:de:ef:32:7a:46:f4:ef:75:42:7b:d9:
         a0:22:57:c8:ff:66:d7:75:02:cc:52:16:69:2d:f4:59:ad:1f:
         25:77:a0:64:b7:25:19:18:dc:d9:fe:8b:21:66:dc:96:69:a2:
         76:f3:b0:b6:f3:8f:a3:cb:96:51:16:51:f7:52:14:7f:fd:d4:
         8c:6f:8a:4c:70:34:64:3e:17:c1:20:49:e1:53:bd:dd:86:4b:
         8e:34:fc:d4:e9:80:dd:51:25:e5:69:f6:24:47:d4:bf:8a:eb:
         6e:dd:fa:5d:df:85:d2:21:a3:61:5b:2b:53:27:5d:70:c0:0d:
         d4:36:0e:b1:8a:27:02:6e:b4:53:68:81:99:e4:a6:71:8a:27:
         21:68:6b:2d:52:2d:1f:70:72:ec:d7:79:8b:05:ee:80:8d:9b:
         57:62:d4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 16:18:49 2024 by rpki-client on console-ams.rpki-client.org