Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
File:                     GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft (raw, json)
Hash identifier:          /5Cs2HN1nFXG7LgdqxKGgx7rHwr8q3y7hFc3yIeh34U=
Subject key identifier:   A1:DE:C2:E2:F4:C8:51:ED:50:DF:EF:6A:99:E1:86:C2:F0:1F:1A:CA
Authority key identifier: 19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A
Certificate issuer:       /CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
Certificate serial:       0191FA1061153AAF071094A813E2D1A25760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
Manifest number:          D9
Signing time:             Mon 16 Sep 2024 09:01:02 +0000
Manifest this update:     Mon 16 Sep 2024 09:01:02 +0000
Manifest next update:     Tue 17 Sep 2024 09:01:02 +0000
Files and hashes:         1: GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl (hash: mwqQEQ12PYnCWhqTPJCa+9SuFo38nNQT0OCjqpyEm7Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:61:15:3a:af:07:10:94:a8:13:e2:d1:a2:57:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
        Validity
            Not Before: Sep 16 09:01:02 2024 GMT
            Not After : Sep 17 09:01:02 2024 GMT
        Subject: CN=a1dec2e2f4c851ed50dfef6a99e186c2f01f1aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8f:74:b3:3a:e2:2c:f6:0e:5c:a0:0d:5b:22:
                    a0:7f:20:18:86:3b:d5:10:0b:51:32:4d:35:a9:3a:
                    b6:64:5e:0c:12:a9:90:6d:4f:71:4d:9b:26:09:8b:
                    3b:fa:a4:9f:36:13:87:66:e2:ab:01:f0:8f:17:b5:
                    c3:f8:6f:9d:05:5a:d5:26:22:1d:4f:c1:d0:de:c0:
                    31:48:9b:eb:fb:d8:a8:f4:ab:14:35:9d:f0:81:4f:
                    57:26:1c:0d:8f:13:74:a6:5a:2a:fa:3f:d8:9a:86:
                    9d:94:2a:05:45:ac:12:9f:33:d5:b0:14:14:96:06:
                    a3:c8:5a:1c:68:e8:17:15:65:11:57:76:7c:e5:3a:
                    64:4a:68:3a:80:98:3e:1b:cd:d4:68:78:74:50:fc:
                    09:97:67:46:8c:cd:1d:9b:7f:24:3c:e3:40:07:39:
                    85:88:6a:31:c7:28:b2:46:db:5f:d9:d3:2e:48:ce:
                    9b:89:73:e8:4a:7f:89:da:f5:d2:d9:05:9e:88:26:
                    ba:4a:64:9d:2d:10:14:b3:2d:5b:bc:92:9a:8e:c3:
                    1d:29:25:9d:6c:03:ab:ee:c2:e7:66:20:4a:e8:2f:
                    93:0f:59:a9:ce:67:31:fc:d1:c1:35:41:68:35:0e:
                    1b:47:27:0e:d7:0c:7e:40:66:d2:7b:f7:c2:13:54:
                    fe:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DE:C2:E2:F4:C8:51:ED:50:DF:EF:6A:99:E1:86:C2:F0:1F:1A:CA
            X509v3 Authority Key Identifier:
                keyid:19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:bb:54:c5:62:81:d8:f4:d7:97:c6:7b:15:ab:88:c5:e1:bb:
         20:30:bb:9d:91:49:be:3e:6e:b1:1b:5d:e2:eb:bc:3e:32:db:
         9f:92:dd:0f:31:e1:77:34:04:f2:7c:fa:23:ff:55:6a:ee:c0:
         16:ad:89:72:04:56:36:0d:6b:e4:5c:98:a8:9f:70:c0:34:9a:
         74:97:1f:0b:65:9a:de:c9:5e:63:3a:f3:9f:ff:5a:d1:9c:5d:
         89:c6:75:2b:8f:65:35:65:68:cc:38:46:bf:b2:c3:56:f8:db:
         cc:54:8e:97:45:e5:29:c9:ce:12:c4:0b:56:3f:5c:9a:5d:c2:
         98:2b:ff:16:92:74:a6:ef:f7:42:73:f8:b3:ff:cd:06:7b:04:
         a1:b1:58:1d:2a:82:47:84:0c:a0:a2:78:8d:d2:10:a9:35:3f:
         85:09:e3:b1:28:33:51:ff:8b:5b:b8:2e:e6:f1:61:ac:0d:92:
         1a:fd:7c:3c:fa:55:dc:af:d4:ff:ba:5d:27:b7:6a:1f:15:0c:
         74:00:ed:3b:38:31:40:78:87:2e:5e:75:c9:c0:5e:88:25:0a:
         21:5b:3f:a2:5e:9f:ce:cd:ca:f1:3f:cd:be:f1:e6:88:f0:12:
         f8:c3:73:1e:fb:fd:ca:3a:e0:d1:2f:90:9b:21:85:20:65:b4:
         2c:7b:21:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH6EGEVOq8HEJSoE+LRoldgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NWZhODMzMDI1MmEwN2YyNTBlNTFkOGU0NzRiYjM4ZDdk
YzNiOWEwHhcNMjQwOTE2MDkwMTAyWhcNMjQwOTE3MDkwMTAyWjAzMTEwLwYDVQQD
EyhhMWRlYzJlMmY0Yzg1MWVkNTBkZmVmNmE5OWUxODZjMmYwMWYxYWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Y90szriLPYOXKANWyKgfyAYhjvV
EAtRMk01qTq2ZF4MEqmQbU9xTZsmCYs7+qSfNhOHZuKrAfCPF7XD+G+dBVrVJiId
T8HQ3sAxSJvr+9io9KsUNZ3wgU9XJhwNjxN0ploq+j/YmoadlCoFRawSnzPVsBQU
lgajyFocaOgXFWURV3Z85TpkSmg6gJg+G83UaHh0UPwJl2dGjM0dm38kPONABzmF
iGoxxyiyRttf2dMuSM6biXPoSn+J2vXS2QWeiCa6SmSdLRAUsy1bvJKajsMdKSWd
bAOr7sLnZiBK6C+TD1mpzmcx/NHBNUFoNQ4bRycO1wx+QGbSe/fCE1T+IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHewuL0yFHtUN/vapnhhsLwHxrKMB8GA1UdIwQY
MBaAFBlfqDMCUqB/JQ5R2OR0uzjX3DuaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1Ytb013SlNvSDhsRGxIWTVIUzdPTmZjTzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9lOWIwZTAtZjRiNi00NmRhLWFmZjgt
YmU3MDg3ZGJmNTM2LzEvR1Ytb013SlNvSDhsRGxIWTVIUzdPTmZjTzVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9lOWIwZTAtZjRiNi00NmRhLWFmZjgtYmU3MDg3ZGJmNTM2
LzEvR1Ytb013SlNvSDhsRGxIWTVIUzdPTmZjTzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7tUxWKB
2PTXl8Z7FauIxeG7IDC7nZFJvj5usRtd4uu8PjLbn5LdDzHhdzQE8nz6I/9Vau7A
Fq2JcgRWNg1r5FyYqJ9wwDSadJcfC2Wa3sleYzrzn/9a0ZxdicZ1K49lNWVozDhG
v7LDVvjbzFSOl0XlKcnOEsQLVj9cml3CmCv/FpJ0pu/3QnP4s//NBnsEobFYHSqC
R4QMoKJ4jdIQqTU/hQnjsSgzUf+LW7gu5vFhrA2SGv18PPpV3K/U/7pdJ7dqHxUM
dADtOzgxQHiHLl51ycBeiCUKIVs/ol6fzs3K8T/NvvHmiPAS+MNzHvv9yjrg0S+Q
myGFIGW0LHshmg==
-----END CERTIFICATE-----