Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
File:                     GipL_SwMaXZagpnvdJZfhipxSLc.mft (raw, json)
Hash identifier:          jUcVB+9c24x0SdcS2ypv3l3KG7OEJ+fj7yTA+ZaU6Bw=
Subject key identifier:   C2:CF:04:9F:A7:CE:23:E2:F3:EF:5C:58:97:43:4F:7C:29:35:05:82
Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
Certificate issuer:       /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Certificate serial:       018F15C613A863AD232BEC8385EDF6889CE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
Manifest number:          05A4
Signing time:             Thu 25 Apr 2024 15:00:53 +0000
Manifest this update:     Thu 25 Apr 2024 15:00:53 +0000
Manifest next update:     Fri 26 Apr 2024 15:00:53 +0000
Files and hashes:         1: GipL_SwMaXZagpnvdJZfhipxSLc.crl (hash: 0AtM8HQoITHSlgHqUMvKTcpRpRCpMypxmPDh2MlcU6A=)
                          2: jNuyWudBVzr-qIIeH3U9Js019cg.roa (hash: pG79PUtB9Fi5eVrC8SaPhqjX7xuInueL9AW9U8KA/JY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:15:c6:13:a8:63:ad:23:2b:ec:83:85:ed:f6:88:9c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
        Validity
            Not Before: Apr 25 15:00:53 2024 GMT
            Not After : Apr 26 15:00:53 2024 GMT
        Subject: CN=c2cf049fa7ce23e2f3ef5c5897434f7c29350582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:26:fc:9f:92:04:9a:d1:ea:de:3b:29:56:f0:
                    4a:42:2f:3e:69:37:83:ad:0d:f7:28:40:3f:c4:1a:
                    c2:7e:01:8c:40:2a:fb:28:25:ee:92:12:00:6f:17:
                    f9:37:0d:e1:33:3f:80:0a:2d:c1:23:2d:3d:3e:b1:
                    c1:87:36:87:7e:42:bb:1c:c8:e1:08:ba:a9:33:78:
                    e6:89:b7:2f:bf:26:9f:9d:64:33:e7:5d:26:02:ab:
                    da:88:51:db:da:fc:bc:a5:e8:fa:58:5f:62:3b:86:
                    cf:de:d7:20:e0:b3:39:7d:cf:49:12:59:3b:f7:57:
                    b6:c2:50:12:66:eb:86:83:59:2a:57:ea:0c:57:ec:
                    42:45:e4:85:ac:b3:d9:e9:c4:39:97:81:24:fc:45:
                    aa:38:6d:d3:ba:55:cf:2b:98:1c:59:e0:96:2a:0a:
                    88:56:16:a6:a2:42:c0:71:17:73:73:2c:b6:a7:e1:
                    56:38:85:8c:90:98:58:47:c1:c7:61:07:ff:2e:7e:
                    c8:0f:6d:2d:19:66:98:71:23:9f:9f:73:fe:b9:2e:
                    63:b7:47:01:fa:7f:ad:04:c6:3b:4c:18:a2:a0:84:
                    6a:da:68:2b:76:c8:2d:f4:f1:cd:ee:79:97:fd:8e:
                    b9:af:01:72:6a:a7:63:bb:8f:86:9f:1f:d6:6b:5b:
                    1e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CF:04:9F:A7:CE:23:E2:F3:EF:5C:58:97:43:4F:7C:29:35:05:82
            X509v3 Authority Key Identifier:
                keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:53:5d:9c:3f:67:f7:d3:d4:4d:47:7e:ff:7d:6d:26:5d:c3:
         8e:c1:c2:2e:b5:c4:b4:c2:40:a9:8d:5d:0b:53:2d:e6:16:7b:
         b1:25:74:d3:5d:85:11:06:66:91:8b:4a:52:2b:a5:02:db:c8:
         9d:1b:d0:ea:67:82:6e:69:56:44:5c:86:8e:be:a5:91:11:04:
         5f:91:b4:18:08:fa:c9:02:fd:42:95:8c:b7:40:88:35:45:01:
         f9:38:ee:8a:51:5c:d9:a9:2c:4f:48:97:d3:68:58:53:96:9f:
         58:fd:f2:d4:6d:86:2a:38:89:01:27:ca:5f:85:0e:ae:a4:9f:
         e5:55:12:5e:78:fc:68:1f:2f:c6:36:e5:65:fa:72:5b:4f:5d:
         c1:64:a3:92:e0:fc:9f:5e:ac:7c:16:8d:0e:46:c7:97:53:0c:
         76:0c:e1:52:4e:9d:5d:79:85:ac:75:a6:cb:1f:e9:50:22:ff:
         7d:1a:2b:9d:28:1d:32:8a:7a:99:b3:41:17:93:a3:2e:72:9c:
         ac:f6:9f:19:6e:ec:9c:f4:5b:22:72:89:4c:c3:18:cf:80:32:
         c1:af:ac:52:80:13:49:41:94:d1:bd:18:eb:74:5e:eb:a3:bb:
         2c:b6:3c:ad:4a:e8:da:21:82:0d:c9:40:e1:e8:74:4e:c1:04:
         fc:be:72:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:43:24 2024 by rpki-client on console-fra.rpki-client.org