Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
File:                     GzWY67XR0I6w2kONBSzrqk_cdo8.mft (raw, json)
Hash identifier:          yheIiZZHW1lbVrTUYv/JG7ZjcKW2UKkMZbFmlYw5Clo=
Subject key identifier:   F6:99:52:3B:9F:4B:98:3B:E3:97:96:14:6A:F9:0B:17:DD:22:78:BD
Authority key identifier: 1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F
Certificate issuer:       /CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
Certificate serial:       018F95A8C5C4606540C42D97FFD32EDE38EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
Manifest number:          C5
Signing time:             Mon 20 May 2024 11:00:16 +0000
Manifest this update:     Mon 20 May 2024 11:00:16 +0000
Manifest next update:     Tue 21 May 2024 11:00:16 +0000
Files and hashes:         1: GzWY67XR0I6w2kONBSzrqk_cdo8.crl (hash: 0qAVlZPscWm3utbL5+8Os1XMLGOgBUya1URra8h0des=)
                          2: TvoZodPtDSoUL-nFmlLf9bdlJhs.roa (hash: kzj/xe6mlmVtx+mwbvlS/bpW3oldBLWePnRlEAPGXH4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:95:a8:c5:c4:60:65:40:c4:2d:97:ff:d3:2e:de:38:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
        Validity
            Not Before: May 20 11:00:16 2024 GMT
            Not After : May 21 11:00:16 2024 GMT
        Subject: CN=f699523b9f4b983be39796146af90b17dd2278bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:34:0e:61:d8:92:64:69:b6:f1:56:da:45:0f:
                    c2:03:21:60:93:bd:3c:ad:85:a3:33:14:dc:47:c1:
                    02:e1:4b:d6:40:c7:d7:40:a8:17:c3:ac:8c:96:73:
                    3c:d6:bf:eb:7f:15:6c:a5:6b:8c:ff:83:02:b6:8f:
                    21:37:d5:1f:6e:d8:7e:84:53:8c:aa:24:75:90:f0:
                    78:86:39:9b:54:15:15:d0:40:01:5e:5e:c9:c4:ad:
                    4f:fb:cc:35:d0:96:46:dc:56:69:98:d7:5a:c9:2c:
                    66:fe:76:a0:5f:ef:5d:e0:e6:00:15:83:d9:dd:48:
                    b2:f6:7a:15:19:f9:75:bb:97:d6:52:0c:ef:d9:76:
                    01:ba:85:c1:b1:18:cf:77:65:84:a8:ab:af:75:2c:
                    86:e8:09:2c:ea:da:e2:59:48:90:f0:a0:d8:b7:57:
                    91:54:61:e9:ab:1b:13:81:19:ac:0d:32:ba:70:c1:
                    4e:65:17:1d:47:c0:af:8a:1c:84:50:e9:83:6b:92:
                    1f:65:48:0d:85:e6:be:75:05:33:85:8c:c6:2d:69:
                    bf:99:bf:71:44:14:02:9d:ed:55:31:7c:b3:92:86:
                    70:94:14:f7:a1:70:7a:f2:9a:25:de:7f:b8:d0:c9:
                    b6:45:ea:f1:72:86:cf:6c:ab:1a:1d:88:54:05:82:
                    af:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:99:52:3B:9F:4B:98:3B:E3:97:96:14:6A:F9:0B:17:DD:22:78:BD
            X509v3 Authority Key Identifier:
                keyid:1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fa:ed:a7:35:07:68:79:d8:3c:36:c9:cd:c2:a5:22:cd:ef:
         e0:c0:42:9c:a0:1a:98:79:d7:66:df:95:00:9d:a5:3e:1f:fa:
         09:64:5d:ec:9e:0b:cc:a2:c4:23:95:aa:50:4f:b8:88:10:7d:
         32:63:cb:31:e6:00:3a:d0:bb:16:b9:91:25:b0:30:5b:03:30:
         10:95:14:a4:1c:bc:19:8e:71:59:2b:47:15:1a:a4:46:bf:c8:
         2a:dc:f9:53:84:41:7d:c1:23:f1:85:a3:82:5c:8d:2b:29:2e:
         6e:5f:1e:c6:98:7a:cd:1b:ed:80:b2:24:c4:6f:44:c0:f4:ce:
         0b:1c:b4:35:c8:d0:bd:10:6d:8f:3c:52:f6:fd:a7:c3:d5:71:
         8f:09:c6:91:83:75:35:60:3d:bc:eb:ee:f2:f2:a3:23:7e:75:
         5b:8a:7e:18:03:b1:92:b0:0f:59:78:dc:e1:c7:00:63:4e:cc:
         38:6c:ca:74:df:1f:92:f1:bd:a7:b8:08:a2:7f:b9:5e:30:05:
         ec:73:2c:f3:f1:f9:10:63:6e:04:ff:5a:b6:6e:dd:39:39:56:
         da:96:e1:d0:6c:62:66:9a:05:ef:e8:ab:a7:31:2d:94:a0:ac:
         e4:cf:22:ae:02:15:ae:86:c8:4e:70:bf:4a:b2:25:30:2a:a1:
         a1:db:81:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:27:27 2024 by rpki-client on console-ams.rpki-client.org