Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File:                     GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier:          iPBxmTEQQ6Y+Rx+yfAZ4BFJJXErjCs7D1tXXhYleraE=
Subject key identifier:   91:6A:10:73:9A:6C:71:C6:4C:3F:4F:BC:0D:58:D3:8B:8F:9E:90:56
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer:       /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial:       019355E46527D8DA08508FAFAB70BA8F4E1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number:          1302
Signing time:             Fri 22 Nov 2024 22:00:51 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:51 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:51 +0000
Files and hashes:         1: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: XxT6gXvQ48hFlp5p9yTOg9brMHzKr2sWcYR/8sQJDN8=)
                          2: dNr6Jg5ZKhQN7Gej6-fgtpsrlsE.roa (hash: mjOh3Gj9FM/imlOKDCz3+T7XAcqIeeOO55dWseGNvQ4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:65:27:d8:da:08:50:8f:af:ab:70:ba:8f:4e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
        Validity
            Not Before: Nov 22 22:00:51 2024 GMT
            Not After : Nov 23 22:00:51 2024 GMT
        Subject: CN=916a10739a6c71c64c3f4fbc0d58d38b8f9e9056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:41:80:ef:45:43:3b:0a:83:9a:5c:92:1b:
                    57:2e:20:42:d7:48:98:b1:5a:ca:1a:f5:3f:49:61:
                    8b:24:9b:52:27:c1:1b:ce:66:27:71:7e:47:6a:96:
                    45:1a:3d:3b:1f:5a:7d:dc:50:59:b0:9e:a6:ca:78:
                    aa:f8:f8:82:81:f9:19:23:ed:ce:42:fb:e8:95:27:
                    d5:f8:69:b4:89:59:95:df:41:40:f7:62:07:51:58:
                    9c:36:1a:d5:3f:f2:81:3b:a6:d8:1a:80:49:ea:33:
                    dd:ea:47:ce:2e:2c:8c:b4:2e:01:36:c9:cb:83:94:
                    48:4b:86:56:80:71:d7:63:98:38:fb:24:2a:87:df:
                    44:b3:1a:6e:6e:a4:cf:84:db:38:a0:ac:15:23:0b:
                    57:c7:e5:53:07:b3:5a:b8:20:14:87:e3:4a:20:c4:
                    bb:7c:5d:44:90:e5:a1:10:b8:7d:08:ba:ec:d2:60:
                    1e:36:a4:15:e9:9a:c0:3c:fc:6e:70:94:f0:b6:a1:
                    1c:c4:8d:f6:e1:09:93:8c:30:9e:18:b4:93:e3:20:
                    27:d1:f3:1d:39:11:c9:a9:f7:2d:7e:8f:fc:32:bb:
                    6d:da:60:88:86:96:50:c3:92:b9:aa:7b:2a:a7:4f:
                    31:ee:11:67:f9:4f:d6:1d:6e:93:17:30:77:1b:96:
                    68:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6A:10:73:9A:6C:71:C6:4C:3F:4F:BC:0D:58:D3:8B:8F:9E:90:56
            X509v3 Authority Key Identifier:
                keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:5a:ee:f4:3a:03:c8:32:39:57:1d:b5:b7:4b:e2:ce:c7:68:
         67:69:04:e9:78:db:d0:f3:90:28:37:be:f1:77:2a:8c:56:b6:
         00:70:ee:cc:6d:0e:fa:c1:6a:b6:3b:e9:77:b4:ee:e2:e5:5a:
         47:c2:31:62:76:38:9f:8f:57:9c:9c:30:a1:b0:5c:eb:91:be:
         b2:e3:78:99:7c:c3:bb:eb:68:e5:48:ce:7c:37:f1:6d:85:8a:
         88:06:01:27:67:72:ec:62:9f:46:6e:5f:b4:fa:19:77:bb:bf:
         fa:1a:20:bf:c0:38:03:a8:75:d9:b8:bc:33:68:3c:43:7d:c0:
         72:fb:6a:42:fa:e0:27:7e:07:c9:0d:cb:ca:74:fc:cc:44:ec:
         ad:47:ba:d7:15:43:60:1c:91:88:c4:63:69:a6:a9:96:82:16:
         ce:d2:ce:5a:cc:dd:eb:36:39:09:f9:bf:d3:0c:7e:0d:56:52:
         f6:00:ed:7b:19:3e:ca:70:dc:cc:04:9b:70:c0:75:95:ea:b2:
         3c:4b:59:75:29:04:c2:50:e9:63:1f:0b:d8:48:21:5d:e5:c1:
         80:49:40:08:8a:07:51:aa:44:b3:56:07:33:a9:e9:d3:c5:d5:
         b4:98:36:a7:c4:cc:39:f8:e5:e0:4c:37:40:5d:8a:e9:af:21:
         9e:5a:f3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:39:47 2024 by rpki-client on console-fra.rpki-client.org