Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
File:                     GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft (raw, json)
Hash identifier:          A4h8R0GR+Bm4l+eJt90W0qgv1moC6XqRRJxwAoay2Ho=
Subject key identifier:   96:79:B6:9E:5C:AC:E0:D0:BE:94:A6:7E:B2:AA:E3:92:53:E5:18:02
Authority key identifier: 19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E
Certificate issuer:       /CN=197fc930e4aa59b0303459f755698e8f998f471e
Certificate serial:       018F513978895D82C5DB5D2FABE4FE4D6E3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
Manifest number:          10EA
Signing time:             Tue 07 May 2024 04:04:31 +0000
Manifest this update:     Tue 07 May 2024 04:04:31 +0000
Manifest next update:     Wed 08 May 2024 04:04:31 +0000
Files and hashes:         1: GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl (hash: kqkCv4ps0AI6XNkP7DtUdCvBVXBaKL5x76SdBH8HojE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:39:78:89:5d:82:c5:db:5d:2f:ab:e4:fe:4d:6e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197fc930e4aa59b0303459f755698e8f998f471e
        Validity
            Not Before: May  7 04:04:31 2024 GMT
            Not After : May  8 04:04:31 2024 GMT
        Subject: CN=9679b69e5cace0d0be94a67eb2aae39253e51802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f7:ef:97:3b:e1:d7:89:fa:6e:c8:cc:d5:a1:
                    3a:e0:02:11:54:12:4f:92:aa:b4:6f:22:7e:06:85:
                    c3:83:9f:28:05:67:79:b5:d7:6d:dc:c3:7e:b0:7f:
                    bb:40:d0:43:f1:ab:92:3f:26:6e:ba:e2:51:63:cc:
                    15:c4:18:9c:f0:7d:23:14:8d:13:06:d0:f7:04:b0:
                    3e:42:b0:9e:24:23:60:e2:eb:db:e8:59:60:d5:fb:
                    08:23:ec:a0:51:b1:c3:26:94:6b:df:1e:3d:95:02:
                    24:bf:a9:d0:1e:66:ac:de:a5:01:4a:e1:28:e3:82:
                    7e:ae:50:6f:54:7d:0a:99:05:a6:3b:c8:2a:72:15:
                    e3:f7:cb:d2:5c:b3:e9:8f:8c:c0:90:ac:5f:d8:0a:
                    60:3e:2d:31:d4:f8:7c:23:a9:7a:7a:45:59:d6:0f:
                    64:27:40:ca:40:09:40:6b:8b:b3:11:d7:93:f2:e7:
                    e9:68:e1:27:28:dc:a1:42:e5:74:2a:b6:19:ce:9b:
                    71:65:45:8c:60:46:43:4b:38:7c:cf:50:cf:2e:34:
                    67:96:a6:6c:44:64:d7:9d:cb:d9:9c:f3:f8:86:12:
                    10:b0:cb:ee:08:e0:fc:f7:21:3b:23:38:89:75:7d:
                    0f:b8:d4:38:2a:0a:89:4e:92:5d:1f:cb:79:3c:ef:
                    4c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:79:B6:9E:5C:AC:E0:D0:BE:94:A6:7E:B2:AA:E3:92:53:E5:18:02
            X509v3 Authority Key Identifier:
                keyid:19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f2:c0:7e:1b:3f:37:7b:42:df:25:f7:2e:91:02:38:c5:be:
         de:f4:5f:e0:1b:71:1e:d4:ad:b3:3b:3b:8b:9b:5f:3c:b4:23:
         7b:68:de:dd:01:17:f7:3f:c7:9d:16:c2:cb:7a:8b:2f:e1:23:
         66:b2:5d:ac:e7:d4:c3:8a:9d:e4:8f:18:88:de:de:2a:01:03:
         b7:45:21:54:f7:52:d6:6b:84:88:41:38:3f:61:83:9d:38:66:
         43:4b:84:30:6f:61:d1:5b:db:f2:49:73:57:c8:b8:7a:3a:a1:
         bb:94:17:8b:6b:c3:5f:6b:64:3d:98:34:7d:8c:de:46:b2:2e:
         93:1b:4b:80:a6:95:f2:97:c5:fa:02:fb:50:9c:02:8f:17:49:
         2b:26:5b:49:fc:84:5b:c6:ff:9c:9d:5f:00:74:c0:70:f8:2a:
         63:d0:4f:02:64:92:45:fc:82:39:12:3c:df:79:36:eb:84:e3:
         b4:01:34:dc:66:78:e9:d8:87:0b:29:72:ef:04:36:12:16:11:
         42:f8:1e:81:ea:21:f8:63:84:40:5e:be:7e:ec:29:63:48:3a:
         24:cd:b1:49:9b:c3:f6:80:e1:22:55:29:39:a1:ac:3a:e6:c7:
         bf:0a:c5:bf:21:81:a5:dd:75:e3:f7:62:42:bf:89:ba:49:5e:
         23:44:e6:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9ROXiJXYLF210vq+T+TW4/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5N2ZjOTMwZTRhYTU5YjAzMDM0NTlmNzU1Njk4ZThmOTk4
ZjQ3MWUwHhcNMjQwNTA3MDQwNDMxWhcNMjQwNTA4MDQwNDMxWjAzMTEwLwYDVQQD
Eyg5Njc5YjY5ZTVjYWNlMGQwYmU5NGE2N2ViMmFhZTM5MjUzZTUxODAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/fvlzvh14n6bsjM1aE64AIRVBJP
kqq0byJ+BoXDg58oBWd5tddt3MN+sH+7QNBD8auSPyZuuuJRY8wVxBic8H0jFI0T
BtD3BLA+QrCeJCNg4uvb6Flg1fsII+ygUbHDJpRr3x49lQIkv6nQHmas3qUBSuEo
44J+rlBvVH0KmQWmO8gqchXj98vSXLPpj4zAkKxf2ApgPi0x1Ph8I6l6ekVZ1g9k
J0DKQAlAa4uzEdeT8ufpaOEnKNyhQuV0KrYZzptxZUWMYEZDSzh8z1DPLjRnlqZs
RGTXncvZnPP4hhIQsMvuCOD89yE7IziJdX0PuNQ4KgqJTpJdH8t5PO9MLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZ5tp5crODQvpSmfrKq45JT5RgCMB8GA1UdIwQY
MBaAFBl/yTDkqlmwMDRZ91Vpjo+Zj0ceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1hfSk1PU3FXYkF3TkZuM1ZXbU9qNW1QUng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yZWEwZTktMjdmNy00ZDcxLWE5MDAt
MjdiZTA5MTE4YzYxLzEvR1hfSk1PU3FXYkF3TkZuM1ZXbU9qNW1QUng0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yZWEwZTktMjdmNy00ZDcxLWE5MDAtMjdiZTA5MTE4YzYx
LzEvR1hfSk1PU3FXYkF3TkZuM1ZXbU9qNW1QUng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvLAfhs/
N3tC3yX3LpECOMW+3vRf4BtxHtStszs7i5tfPLQje2je3QEX9z/HnRbCy3qLL+Ej
ZrJdrOfUw4qd5I8YiN7eKgEDt0UhVPdS1muEiEE4P2GDnThmQ0uEMG9h0Vvb8klz
V8i4ejqhu5QXi2vDX2tkPZg0fYzeRrIukxtLgKaV8pfF+gL7UJwCjxdJKyZbSfyE
W8b/nJ1fAHTAcPgqY9BPAmSSRfyCORI833k264TjtAE03GZ46diHCyly7wQ2EhYR
Qvgegeoh+GOEQF6+fuwpY0g6JM2xSZvD9oDhIlUpOaGsOubHvwrFvyGBpd114/di
Qr+JukleI0TmyQ==
-----END CERTIFICATE-----
Generated at Tue May 7 05:46:50 2024 by rpki-client on console-ams.rpki-client.org