Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
File:                     Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft (raw, json)
Hash identifier:          iMoP++d8EMCr08gFxw32Q0kH/x7UC9waFhf5aIDExks=
Subject key identifier:   06:D4:8D:53:FC:60:0D:7C:AF:AC:BE:4E:45:AE:F9:1B:B7:2F:21:96
Authority key identifier: 1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
Certificate issuer:       /CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Certificate serial:       018F38F74B5FE5713B0BE581B80AB0C33974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
Manifest number:          1128
Signing time:             Thu 02 May 2024 11:01:21 +0000
Manifest this update:     Thu 02 May 2024 11:01:21 +0000
Manifest next update:     Fri 03 May 2024 11:01:21 +0000
Files and hashes:         1: Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl (hash: HHRxfALymOyGkPHBAgRfigzghKSug3WxjtnY1GVpELo=)
                          2: WPrE-BmhZ1k_zZjElfmBbgbSJVg.roa (hash: xcrd2//YylLYpXJHG9qz9OiR6JgHj95ywvfqF2gAmkI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:f7:4b:5f:e5:71:3b:0b:e5:81:b8:0a:b0:c3:39:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
        Validity
            Not Before: May  2 11:01:21 2024 GMT
            Not After : May  3 11:01:21 2024 GMT
        Subject: CN=06d48d53fc600d7cafacbe4e45aef91bb72f2196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5b:6f:d1:3d:5b:e5:ba:cf:a6:bf:4c:5f:e0:
                    c0:bf:47:8a:33:c4:9e:ae:61:24:a3:3b:f2:e0:00:
                    79:3e:ff:39:f3:06:86:08:60:ff:a9:c2:22:db:a1:
                    fc:74:0f:be:be:86:66:fa:8b:8f:8d:69:43:76:42:
                    78:22:09:42:fc:31:f1:3a:a1:46:30:71:00:d8:b0:
                    da:1f:ad:b6:0f:07:3a:0b:e7:59:60:6c:c2:df:27:
                    0a:68:02:2e:3c:cc:65:ff:04:5d:14:a8:4e:ba:ba:
                    91:51:98:d5:71:e6:5f:91:99:25:fc:75:02:43:41:
                    50:fa:8a:01:71:14:61:29:92:3f:8f:0c:45:40:1f:
                    9f:db:5c:8f:15:d7:c0:8e:73:13:c1:3b:b3:8f:2e:
                    2a:99:2d:85:6a:58:ce:77:7b:e0:6c:e9:17:9d:fe:
                    e8:c6:e6:69:21:2c:72:e0:0a:3f:65:dd:9d:2d:3b:
                    64:0c:7b:81:7a:d7:45:8e:30:66:67:77:77:db:f7:
                    a5:94:e0:78:67:a1:76:91:ca:2a:6f:36:e0:8c:9c:
                    b5:db:11:7a:4c:81:34:96:05:c8:dc:54:1b:41:ce:
                    3c:7d:a3:98:8e:bc:7f:f1:8b:21:1e:43:13:0b:65:
                    bd:83:85:7a:be:94:7b:0b:f6:7d:db:06:5e:6e:2f:
                    5a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D4:8D:53:FC:60:0D:7C:AF:AC:BE:4E:45:AE:F9:1B:B7:2F:21:96
            X509v3 Authority Key Identifier:
                keyid:1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:54:e0:ac:04:f8:d8:33:50:13:66:4a:64:f4:83:ac:ee:6e:
         15:3f:4c:86:54:10:99:ae:e3:9e:3f:4a:bb:8b:0d:2d:a2:97:
         e2:93:9d:f9:c0:a1:2a:f5:dd:dc:ef:08:5f:47:47:d1:f9:1c:
         0c:3e:ab:56:6e:ed:78:e5:2d:38:8e:30:0e:20:6f:67:65:4e:
         1a:9f:7a:e0:96:12:e7:e0:08:99:66:78:c9:bf:66:1a:2e:46:
         74:77:60:9d:19:a9:79:f7:65:3e:ec:69:d7:2a:0f:7c:c2:e6:
         24:43:42:22:bd:24:0b:60:94:8d:2b:c7:ca:c0:53:95:65:73:
         7d:73:1f:c0:6e:b2:f1:a3:e7:4a:7a:1c:46:02:e7:2e:6a:69:
         d4:e7:f0:0b:aa:e0:91:2e:2e:27:31:c2:c0:9d:53:20:9b:c9:
         8e:ee:1a:05:90:23:ae:0b:4d:a1:d2:83:3d:75:b5:37:ab:c5:
         0f:36:cd:6f:3f:89:d3:93:76:36:29:c5:0c:4f:c1:76:8f:87:
         6f:66:fa:2e:e5:8b:d2:97:af:ef:54:6f:13:2a:af:91:12:d1:
         e2:54:55:57:99:ac:82:cf:a4:a8:5b:93:d7:dd:cd:54:47:9b:
         a4:8c:c5:a9:d0:2c:fb:30:2f:37:31:4b:9c:3a:d2:76:91:27:
         4b:75:70:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8490tf5XE7C+WBuAqwwzl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMGJiNTFhN2I1MzJiZTRkNDRiYTYwNGFlNmUwNjNmMDYz
ZjM3ZDQwHhcNMjQwNTAyMTEwMTIxWhcNMjQwNTAzMTEwMTIxWjAzMTEwLwYDVQQD
EygwNmQ0OGQ1M2ZjNjAwZDdjYWZhY2JlNGU0NWFlZjkxYmI3MmYyMTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFtv0T1b5brPpr9MX+DAv0eKM8Se
rmEkozvy4AB5Pv858waGCGD/qcIi26H8dA++voZm+ouPjWlDdkJ4IglC/DHxOqFG
MHEA2LDaH622Dwc6C+dZYGzC3ycKaAIuPMxl/wRdFKhOurqRUZjVceZfkZkl/HUC
Q0FQ+ooBcRRhKZI/jwxFQB+f21yPFdfAjnMTwTuzjy4qmS2FaljOd3vgbOkXnf7o
xuZpISxy4Ao/Zd2dLTtkDHuBetdFjjBmZ3d32/ellOB4Z6F2kcoqbzbgjJy12xF6
TIE0lgXI3FQbQc48faOYjrx/8YshHkMTC2W9g4V6vpR7C/Z92wZebi9aIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbUjVP8YA18r6y+TkWu+Ru3LyGWMB8GA1UdIwQY
MBaAFBsLtRp7Uyvk1EumBK5uBj8GPzfUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3d1MUdudFRLLVRVUzZZRXJtNEdQd1lfTjlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi81ZTZhOGYtMGI3OS00ODk0LWI5MWMt
ZWVjZWU4OTNjNTI3LzEvR3d1MUdudFRLLVRVUzZZRXJtNEdQd1lfTjlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi81ZTZhOGYtMGI3OS00ODk0LWI5MWMtZWVjZWU4OTNjNTI3
LzEvR3d1MUdudFRLLVRVUzZZRXJtNEdQd1lfTjlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr1TgrAT4
2DNQE2ZKZPSDrO5uFT9MhlQQma7jnj9Ku4sNLaKX4pOd+cChKvXd3O8IX0dH0fkc
DD6rVm7teOUtOI4wDiBvZ2VOGp964JYS5+AImWZ4yb9mGi5GdHdgnRmpefdlPuxp
1yoPfMLmJENCIr0kC2CUjSvHysBTlWVzfXMfwG6y8aPnSnocRgLnLmpp1OfwC6rg
kS4uJzHCwJ1TIJvJju4aBZAjrgtNodKDPXW1N6vFDzbNbz+J05N2NinFDE/Bdo+H
b2b6LuWL0pev71RvEyqvkRLR4lRVV5msgs+kqFuT193NVEebpIzFqdAs+zAvNzFL
nDrSdpEnS3Vw1Q==
-----END CERTIFICATE-----
Generated at Thu May 2 16:00:26 2024 by rpki-client on console-ams.rpki-client.org