Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
File:                     GKhKjkdfZgbnoS-SszDWPY-IC-A.mft (raw, json)
Hash identifier:          Pjy7nGwfeEUpjZRGCOyrsK5Ve5k8S84VhzxROuobEnA=
Subject key identifier:   D3:CF:68:DE:86:FD:AD:A8:77:A9:1D:CD:A0:C8:2E:13:F1:8F:0B:4E
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Certificate issuer:       /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial:       018F4F49505B0F9BD5A4DE0139183248B7F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
Manifest number:          09B3
Signing time:             Mon 06 May 2024 19:02:35 +0000
Manifest this update:     Mon 06 May 2024 19:02:35 +0000
Manifest next update:     Tue 07 May 2024 19:02:35 +0000
Files and hashes:         1: GKhKjkdfZgbnoS-SszDWPY-IC-A.crl (hash: gUrP0xH6JbzGdWxxR/78091SFnScsOBs5ZkSfQ8bV0A=)
                          2: JBKZBh61F0zxICWg3iLuJQ2dPiE.roa (hash: 3BiwAxZrJ3LoTklXWNQnYuG+OtnQehCMIIksZyP3Ky8=)
                          3: XaXP-5zt19E-3mFwub8yCz7YQDw.roa (hash: trFZTtlTJvUUnhtCRoloMjMFeZLLPMAhFZQZRqFmZRs=)
                          4: lCQgGsc2M_wcfNZvAAgSmg1J-vA.roa (hash: iHxFIqem6L0881lUjATCMsom3+kS582GKI+oAwgSOeA=)
                          5: mZHkjVtrlDFyQjfO3aiXX_L1UTo.roa (hash: 8FGCvZDsEo+NPqMtTajX3H72bTgkFjQemV0d8dQLBYI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 19:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:49:50:5b:0f:9b:d5:a4:de:01:39:18:32:48:b7:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
        Validity
            Not Before: May  6 19:02:35 2024 GMT
            Not After : May  7 19:02:35 2024 GMT
        Subject: CN=d3cf68de86fdada877a91dcda0c82e13f18f0b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fe:c9:3c:9a:8b:04:a2:cd:ae:84:e0:46:2e:
                    d0:8b:ac:15:95:68:57:76:72:ba:7e:00:20:80:0e:
                    a7:b7:3f:cc:ae:51:c9:08:67:f8:e5:d2:67:97:b2:
                    96:35:d6:da:f3:64:af:4b:fa:f8:13:55:fc:05:cd:
                    7a:7d:1d:b9:41:0a:16:3c:5c:27:11:9d:58:49:8e:
                    98:86:87:d3:ba:fc:c0:11:d9:f9:9c:cd:71:3f:95:
                    a6:17:f2:8a:ed:8c:1f:15:2b:d8:8d:09:74:b9:5b:
                    0f:93:7c:6b:09:51:42:8a:16:de:37:75:28:30:6e:
                    7b:8f:64:08:49:1c:73:ea:05:71:a1:4f:0d:50:77:
                    d2:eb:0a:65:86:3f:58:32:44:c8:db:ee:58:a5:38:
                    97:24:3f:26:64:1b:bb:5c:63:e8:17:39:45:01:24:
                    2b:06:56:9b:ef:e5:ab:49:9b:14:d5:62:1a:93:3f:
                    9e:82:e6:32:57:5a:02:67:fb:89:24:9b:9d:d4:19:
                    8d:55:e7:72:16:5c:05:f7:fd:85:46:5e:bc:fb:3b:
                    79:0c:ac:5b:59:f3:67:74:8d:b8:3a:7c:d7:48:a1:
                    ee:c4:43:41:a0:ae:bf:2c:1f:d4:78:62:3a:f1:10:
                    f1:da:c4:53:b1:04:72:d7:a5:99:b2:17:a7:52:a9:
                    61:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CF:68:DE:86:FD:AD:A8:77:A9:1D:CD:A0:C8:2E:13:F1:8F:0B:4E
            X509v3 Authority Key Identifier:
                keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e3:75:6c:03:41:97:dd:cc:e9:01:c6:31:50:ba:07:3a:d3:
         7e:f4:0b:0a:f3:5d:27:78:75:10:26:1f:f7:91:92:7c:d7:ec:
         cb:d9:6c:2d:ff:31:73:e6:a2:4e:5a:69:35:18:5f:69:e6:2b:
         9c:09:7d:af:f8:d8:67:9b:c3:47:5e:f2:32:2f:15:42:eb:cb:
         eb:e2:4c:25:25:01:05:e5:f7:88:ca:47:59:18:20:03:18:39:
         bb:b4:1e:4f:96:8b:d5:14:c6:66:8c:93:4c:29:24:27:8c:2c:
         90:57:1e:ed:54:e8:c3:72:2e:bf:41:7e:ea:0e:e3:66:63:11:
         b8:52:14:25:6f:fa:93:fe:da:f1:6d:04:02:be:98:8d:00:0d:
         f7:3a:9f:cb:50:2a:ab:96:0e:4f:26:cb:22:9e:c9:88:bf:95:
         5a:74:a5:39:6f:52:61:00:56:ab:3e:3d:96:ba:fe:e8:5f:03:
         6a:ca:50:ab:f1:57:bc:52:45:45:af:9a:65:35:51:4d:35:a0:
         b3:be:33:b9:1f:31:4a:59:99:c0:cb:4d:04:c9:2f:f6:76:2f:
         6d:d3:6c:d9:50:84:28:1a:d6:74:6e:fc:9a:d5:60:92:34:b6:
         59:d5:00:2a:c0:42:f5:97:f3:a4:5a:c2:c6:00:10:72:e6:22:
         b6:ef:1a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:48:57 2024 by rpki-client on console-ams.rpki-client.org