Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
File:                     gnMxRuPp1uEVRjF_dSGeogLF-S0.mft (raw, json)
Hash identifier:          Yg6cpRLaHbTTkXyhStagc0l/SdcF84jNw3ScGxPObXU=
Subject key identifier:   DB:A6:7B:30:F8:59:BE:54:4F:02:1E:57:2E:1A:BF:D9:0D:B4:89:F9
Authority key identifier: 82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D
Certificate issuer:       /CN=82733146e3e9d6e11546317f75219ea202c5f92d
Certificate serial:       018F877F2F9301A299A0D6D5213873E9D09D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
Manifest number:          0123
Signing time:             Fri 17 May 2024 17:00:10 +0000
Manifest this update:     Fri 17 May 2024 17:00:10 +0000
Manifest next update:     Sat 18 May 2024 17:00:10 +0000
Files and hashes:         1: PaIWTn6UbDEA0vW7VHvR5QC53mU.roa (hash: VMswWyZ/DK0Gc6F9oqLmlxT9gne3SyKjP2SnD9g/+7A=)
                          2: gnMxRuPp1uEVRjF_dSGeogLF-S0.crl (hash: ssLvuGtleKOJh33jQEiKsSXbVXyaPoq48nsj8BzzKPQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:2f:93:01:a2:99:a0:d6:d5:21:38:73:e9:d0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82733146e3e9d6e11546317f75219ea202c5f92d
        Validity
            Not Before: May 17 17:00:10 2024 GMT
            Not After : May 18 17:00:10 2024 GMT
        Subject: CN=dba67b30f859be544f021e572e1abfd90db489f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e9:f4:ce:fc:07:67:42:44:0e:a6:67:d2:3b:
                    a3:89:32:e4:02:8c:c2:81:a6:13:ad:35:5c:6e:0e:
                    0f:76:1c:74:5d:e5:d0:af:b9:b1:b8:e1:29:a2:03:
                    00:d6:a7:18:0d:ad:25:ef:a3:4e:ce:d1:69:de:c6:
                    31:5d:d4:ea:b2:dc:93:34:20:c5:69:3a:09:dd:1c:
                    90:dc:79:4b:9c:18:30:38:da:ae:81:4e:06:9d:84:
                    b9:58:f8:c5:18:d7:df:25:35:5a:1d:a5:17:ea:a4:
                    3b:4b:bc:27:e3:53:64:9e:e4:2c:39:cd:46:6e:0e:
                    94:07:65:72:0e:d6:2b:80:cc:70:96:b7:fe:f5:e9:
                    6e:12:d7:92:61:99:b7:a1:23:79:24:18:0d:b3:0a:
                    a8:38:d3:76:87:a6:1d:f5:6a:63:6f:02:80:89:f0:
                    16:fc:bc:0f:2f:e5:17:86:85:7d:c5:d0:8d:8a:7b:
                    e3:6f:a0:92:e9:2d:11:77:7b:8f:1a:21:53:38:b1:
                    83:61:7e:73:af:fb:b8:ec:bb:59:08:ea:4d:4d:21:
                    93:3b:06:ec:cb:4c:80:d8:04:86:8b:05:ec:70:7b:
                    c0:66:44:56:a0:ce:5b:fd:d7:08:9f:eb:69:80:db:
                    2b:c9:07:2e:6a:5a:a6:20:04:85:08:f1:44:69:e7:
                    c5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A6:7B:30:F8:59:BE:54:4F:02:1E:57:2E:1A:BF:D9:0D:B4:89:F9
            X509v3 Authority Key Identifier:
                keyid:82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:52:0e:5a:ee:63:76:1a:5c:69:90:50:b1:73:e8:43:8c:ac:
         6f:ab:92:6e:08:e3:90:70:40:24:cc:8f:0e:e7:20:5b:a9:63:
         bc:12:ca:ad:d9:96:b7:e1:13:c6:42:7c:d8:eb:39:e9:70:8d:
         86:cf:5d:cb:c2:71:21:64:8d:28:ec:11:08:f9:24:12:59:15:
         d6:24:af:e4:ca:9c:84:74:23:8d:1a:01:f0:e8:2d:2f:92:bf:
         c7:73:2b:7c:12:47:b5:62:2d:f3:9a:78:26:4a:36:29:ae:1f:
         77:b6:c5:41:20:aa:3d:af:d9:bb:ec:03:2f:7e:e0:cb:ba:3a:
         8e:1f:3f:c6:96:af:94:c5:79:90:93:36:80:ad:95:d5:4f:01:
         4b:3f:13:8c:54:62:2d:7c:c3:59:d9:81:ea:ba:6c:43:67:44:
         46:67:55:b9:eb:f1:a3:ba:a6:d8:62:de:2a:9e:de:bd:0e:68:
         08:9b:78:4f:dc:52:57:47:81:1f:86:64:00:cf:fd:08:58:d3:
         46:c3:a4:c8:76:eb:80:38:b8:4c:38:4b:16:b9:16:45:4d:02:
         5d:c1:a8:e8:37:f4:93:af:13:6c:21:e9:43:db:6d:49:b7:b9:
         7d:9c:9b:72:da:2a:a2:5f:7a:28:aa:84:98:2b:ae:2f:e3:b1:
         93:1c:68:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:13:08 2024 by rpki-client on console-fra.rpki-client.org