Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
File:                     Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft (raw, json)
Hash identifier:          A6wPM3zABJf82FS0hQN3hynzPV1jytD5HypeXsZs5fk=
Subject key identifier:   63:34:8C:E8:A2:2E:5E:57:C7:71:0B:B8:32:41:7C:BD:3B:A9:23:2D
Authority key identifier: 1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
Certificate issuer:       /CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Certificate serial:       0194072192285236B78DE0FE72AC83CFB404
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
Manifest number:          13A5
Signing time:             Fri 27 Dec 2024 08:00:28 +0000
Manifest this update:     Fri 27 Dec 2024 08:00:28 +0000
Manifest next update:     Sat 28 Dec 2024 08:00:28 +0000
Files and hashes:         1: Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl (hash: 0ylDDMd1vrkOwi8vm85bFlm6OUNSWlyvjrmWQ3lD/kk=)
                          2: WPrE-BmhZ1k_zZjElfmBbgbSJVg.roa (hash: xcrd2//YylLYpXJHG9qz9OiR6JgHj95ywvfqF2gAmkI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:21:92:28:52:36:b7:8d:e0:fe:72:ac:83:cf:b4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
        Validity
            Not Before: Dec 27 08:00:28 2024 GMT
            Not After : Dec 28 08:00:28 2024 GMT
        Subject: CN=63348ce8a22e5e57c7710bb832417cbd3ba9232d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9a:db:92:90:52:f1:c1:ac:9f:14:a9:e5:f2:
                    a0:f2:40:71:14:97:e1:7c:0d:55:65:41:8a:dc:10:
                    66:6c:c6:78:f7:38:d2:d9:da:fc:97:f4:34:a3:48:
                    e3:f1:4d:fb:d3:5d:b6:6a:96:67:08:ae:b6:20:2d:
                    4b:df:01:49:4e:94:07:59:c0:2e:7f:7c:38:e7:ca:
                    31:f0:b4:d4:b9:b4:1f:15:3b:48:d1:ba:06:ec:d6:
                    70:57:2d:0e:1b:98:8a:6c:fd:0e:f0:48:c4:ad:83:
                    28:06:29:1a:98:ee:ad:bd:69:c1:fb:fb:28:89:48:
                    51:ab:0e:31:18:22:40:b1:db:56:42:b4:2f:ee:97:
                    d9:36:88:1f:ce:08:04:0e:5d:8d:c2:bd:7a:16:25:
                    aa:5c:4a:31:62:95:d9:07:62:00:44:a4:0b:85:b0:
                    35:46:3d:b3:c8:72:cc:7c:4d:4d:2b:85:93:29:d7:
                    ef:bd:cf:3c:dc:e8:14:33:db:e2:78:95:12:5a:c1:
                    20:19:d4:fd:79:1b:b5:2a:97:ae:fd:a9:96:39:39:
                    18:c0:67:a4:22:35:ef:52:a7:32:3d:6e:cb:9a:4e:
                    36:a9:10:cf:ca:3b:02:30:8c:d3:96:23:1b:92:ed:
                    63:05:7a:3b:ec:bb:3b:97:45:d6:74:8f:8e:25:f6:
                    2d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:34:8C:E8:A2:2E:5E:57:C7:71:0B:B8:32:41:7C:BD:3B:A9:23:2D
            X509v3 Authority Key Identifier:
                keyid:1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:fb:86:11:e1:d0:24:12:92:12:a6:99:6b:ed:86:ba:24:08:
         86:14:e5:f6:25:53:9c:34:7f:26:e1:6d:16:05:27:1b:2e:7c:
         08:5a:7d:7f:b8:56:d8:10:49:d0:d6:77:96:9a:06:a6:77:93:
         a5:2a:fb:e2:1e:9d:22:c5:38:17:38:a4:cd:58:ef:18:36:b8:
         65:8d:7e:d2:64:f9:fd:77:85:91:b2:2f:31:48:2c:42:10:c3:
         78:9c:09:de:3d:66:56:d2:dc:fa:42:9f:64:21:4a:ee:b5:bc:
         fb:87:a2:69:31:7a:5b:3b:20:52:1a:57:61:02:4d:1e:bb:1d:
         88:70:1e:35:58:83:dd:b6:59:63:a8:7f:c5:f0:5a:38:bf:4b:
         53:ab:53:a0:75:64:3c:0e:47:f0:82:88:16:9e:9a:40:c4:7c:
         7d:f0:c1:53:27:ae:97:98:44:2c:f2:e5:b3:3d:f9:6f:29:80:
         34:e9:e0:a0:d9:9e:9c:ef:1b:ef:f1:0c:5a:cd:a1:f8:f0:9d:
         9d:73:17:9d:17:b2:dc:a8:db:18:b0:dd:38:b7:cc:54:f0:d3:
         07:da:cf:36:fc:28:7c:0c:93:98:d7:5c:62:45:8f:c7:38:5c:
         29:93:a0:e5:96:5a:c4:54:53:25:1d:1b:fb:c9:73:14:3b:01:
         e3:e9:8b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:03:23 2024 by rpki-client on console-ams.rpki-client.org