Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
File:                     GR7jr4IFY0lGR1UaUgbvDEXPlck.mft (raw, json)
Hash identifier:          io46Dj1b7v7iSYmo2nY7wTPxI4o9k2WXEIaAYfI/+aA=
Subject key identifier:   C3:33:C1:3F:23:E2:6C:29:D8:39:82:59:FC:F5:9A:4D:4E:05:90:EC
Authority key identifier: 19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9
Certificate issuer:       /CN=191ee3af820563494647551a5206ef0c45cf95c9
Certificate serial:       018F4DC760332BE1034CE7C2F5D41A63AF22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
Manifest number:          115A
Signing time:             Mon 06 May 2024 12:01:02 +0000
Manifest this update:     Mon 06 May 2024 12:01:02 +0000
Manifest next update:     Tue 07 May 2024 12:01:02 +0000
Files and hashes:         1: 5N4L-oNx9slr14a8ejoVpV87yJQ.roa (hash: /r+tnDx559o97MNSrB4SFhb4krG8jJolePvhuiEHGRQ=)
                          2: GR7jr4IFY0lGR1UaUgbvDEXPlck.crl (hash: CDBOaGTiMZgRMU2hlJ6/m7DKtN4wrTx5R66UmbUrOJ4=)
                          3: HNJk7z1HM846pEGQq_UmMcMIANQ.roa (hash: vh5rOfmLT3SX9UnP7qRUkZxS/ncQp1dbHp/jz8xICHE=)
                          4: RiHyR371ubcAYFRRNRZ9WyDZwd0.roa (hash: xXtQ7NQgL053+gJyxJ2TeEu2gniKpbWPWkpx5kp1NtE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:c7:60:33:2b:e1:03:4c:e7:c2:f5:d4:1a:63:af:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191ee3af820563494647551a5206ef0c45cf95c9
        Validity
            Not Before: May  6 12:01:02 2024 GMT
            Not After : May  7 12:01:02 2024 GMT
        Subject: CN=c333c13f23e26c29d8398259fcf59a4d4e0590ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c3:fc:e6:61:53:e5:51:7b:b6:a5:b0:a7:4d:
                    9c:fe:7d:2a:65:a8:c5:e5:cb:81:de:02:a2:0b:47:
                    0c:af:c7:30:e0:88:26:80:87:c8:a2:b0:65:1b:df:
                    c2:55:b8:70:85:b8:c2:75:ed:6d:80:b5:53:37:d6:
                    6b:b3:96:dd:54:de:c3:f9:9e:40:e3:0d:e6:75:c3:
                    4a:69:fd:ca:7d:bc:eb:74:8d:39:6f:20:8f:1e:ba:
                    de:ed:38:28:18:d4:52:08:e3:30:5b:38:79:00:f0:
                    c7:ff:0d:de:ac:e9:22:0c:6e:0b:86:8c:fe:ea:af:
                    3a:00:de:aa:35:72:25:aa:a0:eb:50:04:c2:0e:0c:
                    2d:17:b5:43:a9:c0:a9:65:3d:b4:eb:c4:db:5b:08:
                    5a:33:7b:0c:2e:aa:82:71:7a:93:5f:7b:c8:1e:d5:
                    7e:f0:cb:0f:92:0d:df:8c:45:a0:3d:fb:02:c5:ab:
                    bd:7b:4f:5a:a6:c1:42:7d:e9:13:c8:9b:ee:69:28:
                    ff:8a:9c:f5:28:fe:bb:3b:75:f4:68:a0:04:24:66:
                    fe:fc:31:3d:b2:7e:b6:9f:27:06:de:88:70:0d:cf:
                    30:b0:2f:51:8c:fb:16:d0:37:99:83:ea:13:3b:5d:
                    b0:34:04:c8:51:f4:47:28:6a:b5:35:db:e4:60:38:
                    64:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:33:C1:3F:23:E2:6C:29:D8:39:82:59:FC:F5:9A:4D:4E:05:90:EC
            X509v3 Authority Key Identifier:
                keyid:19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e6:16:df:a5:58:e6:9e:d4:be:6d:7c:c6:e5:e6:94:0f:2b:
         6f:f8:51:51:87:13:82:e0:7d:64:9c:04:a2:70:7a:80:a8:3a:
         75:a9:37:ce:3d:98:15:e1:8c:60:61:bb:1f:47:d7:4a:cf:8a:
         40:aa:92:a3:8d:05:dc:f1:73:82:fd:b7:3e:6c:6e:14:d9:9e:
         22:49:d8:0e:11:df:0f:a7:2d:f2:5c:14:a5:ae:3c:66:5e:fb:
         1e:c6:ef:07:43:bd:c5:8c:2d:df:ae:93:5b:2e:af:3b:17:10:
         62:14:b3:51:79:0f:f4:35:cb:eb:19:a7:37:6b:9e:25:32:cc:
         6f:20:fa:24:d6:5f:ba:06:28:af:bd:12:e9:a6:71:2c:74:20:
         1b:bb:4b:3c:25:61:5b:ae:58:0d:d1:ff:39:b0:c0:9d:09:6d:
         e7:4c:8f:18:e7:eb:f9:b6:c9:5a:13:d0:25:9f:5f:4f:d0:29:
         4d:3a:df:7a:6e:7d:5f:12:f7:ec:f8:8c:90:76:55:f4:0f:ba:
         15:95:31:a7:5a:f9:d2:c5:32:64:05:39:08:1f:ca:df:88:e8:
         09:ca:37:ed:3c:0c:71:0c:ea:02:4a:4d:98:96:7a:f7:4e:75:
         8e:fa:4d:8f:6d:94:90:7e:00:8a:20:57:f2:7c:0b:8d:90:d2:
         d8:ab:4f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:46:54 2024 by rpki-client on console-ams.rpki-client.org