Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
File:                     GZCLY2kUj088UPFnED96BHjFKUI.mft (raw, json)
Hash identifier:          QnI2AoOp36D5I5M3QGwMlJ6MmzSRNRR3RvgyZuf3Fg0=
Subject key identifier:   9D:9D:C4:39:CB:3D:6D:D1:93:4D:75:5E:B8:C3:0E:3B:8D:0D:93:43
Authority key identifier: 19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
Certificate issuer:       /CN=19908b6369148f4f3c50f167103f7a0478c52942
Certificate serial:       01935689F7892191EFF380B0C58B53E6FDC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 01:01:42 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:42 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:42 +0000
Files and hashes:         1: GZCLY2kUj088UPFnED96BHjFKUI.crl (hash: LbKrkWw0is6XnsZGy+Ta2vsIyn/f/7EDkrM3HbMuefA=)
                          2: aUXa_MPCagT11l1TahanVvs5VVM.roa (hash: BlZw/b6w0pFTjRVc3+nZF+wtAmh7GOP6DmSkYJRATG0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:f7:89:21:91:ef:f3:80:b0:c5:8b:53:e6:fd:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19908b6369148f4f3c50f167103f7a0478c52942
        Validity
            Not Before: Nov 23 01:01:42 2024 GMT
            Not After : Nov 24 01:01:42 2024 GMT
        Subject: CN=9d9dc439cb3d6dd1934d755eb8c30e3b8d0d9343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5b:cd:9b:1f:98:64:13:ac:37:88:e1:d8:18:
                    e7:a5:97:5f:2c:ee:3d:a7:23:61:23:67:a4:d8:7f:
                    02:5f:23:ea:61:99:ac:cb:2f:eb:4f:d8:9e:42:62:
                    74:4c:9d:65:e1:ce:75:9b:de:f1:d7:e3:30:d0:20:
                    c0:cf:d1:d5:19:f4:de:6c:13:c9:8d:4e:db:52:5b:
                    41:f5:6b:d5:3d:23:36:47:a2:b1:7e:7f:d3:a7:76:
                    4e:fc:97:12:45:a1:cc:12:7c:5c:38:dd:fb:53:70:
                    06:05:67:4d:0c:97:b4:31:65:cc:47:e1:44:1d:51:
                    7d:18:15:f5:f2:db:d2:e1:f9:0d:b3:ad:24:18:40:
                    ef:5c:17:a9:84:05:56:1f:3b:bd:83:59:f2:e3:d9:
                    1f:68:8d:be:8a:34:0a:46:b3:92:c3:e7:07:36:ce:
                    64:a6:02:7f:e7:b0:61:d4:0e:47:d4:41:95:25:f0:
                    72:58:73:39:15:c0:d8:d3:5d:4b:4f:e3:97:72:5e:
                    0e:58:c2:fd:9d:55:29:e1:9f:91:3f:0f:b9:ea:23:
                    14:4a:c2:40:ab:ca:a9:c5:68:5c:eb:c2:48:95:a1:
                    40:7a:ce:59:97:69:4b:4a:74:f3:86:83:48:8c:20:
                    89:60:17:09:5e:08:47:5b:e9:84:69:87:2c:41:ba:
                    7b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9D:C4:39:CB:3D:6D:D1:93:4D:75:5E:B8:C3:0E:3B:8D:0D:93:43
            X509v3 Authority Key Identifier:
                keyid:19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:22:e5:1a:10:f4:2a:19:61:f1:2f:e8:fd:75:3c:0f:19:8a:
         f4:56:f0:1d:4a:ab:d1:b9:88:d6:01:4c:75:2c:92:37:65:c7:
         18:74:15:5c:38:15:1f:38:c4:f7:2d:b7:05:32:90:a5:42:84:
         04:77:21:d6:93:30:8c:95:33:0b:1c:ba:04:d8:8d:95:f6:2e:
         ef:59:f1:c8:af:61:a7:10:68:cc:72:46:3e:c7:5d:ef:cc:0a:
         e6:01:65:41:6d:bf:7f:48:5b:24:ce:9e:f4:65:17:bd:b4:5b:
         d7:bd:23:81:53:07:53:de:2c:e5:fa:2a:c8:4b:52:e4:22:76:
         d5:46:bf:47:64:e2:ab:c6:60:61:66:be:14:17:e2:7f:2d:18:
         72:94:27:4d:13:39:8c:ff:82:79:72:43:bc:0f:93:30:69:a6:
         15:fb:ee:99:bf:7d:f5:87:82:0f:78:83:f4:98:a5:b6:f2:0a:
         e6:c6:54:c0:4c:3b:cf:49:fc:62:77:aa:1b:bc:26:88:f4:d5:
         cc:33:4e:93:4e:fa:58:43:a5:01:2f:02:18:1e:1f:1a:f1:0c:
         e1:e6:13:da:6a:36:11:11:64:5a:74:fa:bf:36:d1:fc:5b:fb:
         e1:a7:98:ae:19:42:e4:8a:07:12:b8:e0:84:af:5d:9a:4c:9e:
         1a:5a:f9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:57:56 2024 by rpki-client on console-ams.rpki-client.org