Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File:                     GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier:          mimqm6SpCnQpShSv1hKiAApZwE+NmHP8h5Ot9hZLzco=
Subject key identifier:   3A:DF:27:63:A4:6F:4F:DB:20:50:E4:27:B3:0F:80:33:7A:42:12:E8
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer:       /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial:       018F4F48593271B993E523983332F4CE7970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number:          115A
Signing time:             Mon 06 May 2024 19:01:32 +0000
Manifest this update:     Mon 06 May 2024 19:01:32 +0000
Manifest next update:     Tue 07 May 2024 19:01:32 +0000
Files and hashes:         1: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: Nf4EZdeLKkOhMFzTSjnNYSr2qiTO20nNSBb5b+P3W+s=)
                          2: N-8Zk4kO2utmQC-ywwu7AXC8Lbc.roa (hash: 9/eImTn4kG133BumR3q8s0OePqsgR4zPHrdf4tz4pQg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 19:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:48:59:32:71:b9:93:e5:23:98:33:32:f4:ce:79:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
        Validity
            Not Before: May  6 19:01:32 2024 GMT
            Not After : May  7 19:01:32 2024 GMT
        Subject: CN=3adf2763a46f4fdb2050e427b30f80337a4212e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:65:1c:be:45:e1:b6:84:93:4a:4e:cd:da:c8:
                    35:3c:6e:c0:18:f0:2a:59:5d:ef:0c:eb:11:85:cb:
                    d7:56:01:ce:d2:19:bd:3e:5b:6b:5c:73:cc:8f:40:
                    d6:70:65:70:cc:43:0d:77:e7:6c:3c:75:81:f0:83:
                    5b:82:87:25:ba:ee:54:83:93:85:b7:9c:56:83:b9:
                    be:31:39:e0:00:d8:4b:3f:b7:83:65:cd:25:bd:09:
                    17:c5:6a:d9:16:78:46:0d:2f:fa:85:31:91:17:1b:
                    d5:35:50:eb:31:bd:27:d3:e2:ce:b0:99:5c:17:d3:
                    8e:fd:6c:a5:88:55:fb:e0:12:0e:1b:c0:4d:d5:40:
                    3c:ea:0d:f4:7e:19:e2:ed:c9:0a:8d:28:c6:ab:87:
                    e3:d2:c7:cc:5b:82:ff:60:51:5d:fb:8a:b1:c1:af:
                    25:73:a4:0c:20:5c:a6:3b:f1:57:f5:46:d9:e6:14:
                    67:49:e4:d0:79:bc:66:b5:84:bb:18:d6:97:c5:f5:
                    27:0c:5b:c5:97:45:16:ec:fd:20:5d:ee:5f:f0:47:
                    64:8e:1f:3e:a0:b9:7a:12:be:2d:a0:f6:c4:e8:b9:
                    f1:f1:57:84:7f:8d:ee:f2:7d:a5:b9:2f:23:52:67:
                    75:53:96:6b:04:f0:dd:ed:ab:75:5b:46:ca:51:ca:
                    4f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DF:27:63:A4:6F:4F:DB:20:50:E4:27:B3:0F:80:33:7A:42:12:E8
            X509v3 Authority Key Identifier:
                keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d7:45:f8:76:43:33:ab:57:5a:85:6b:95:b5:3b:8f:57:a9:
         11:f2:a1:33:0d:c0:d8:fd:14:a5:15:aa:c5:ea:1c:fb:d0:e5:
         5a:25:ce:b8:ad:47:d6:db:25:43:37:53:fe:58:56:8e:fa:36:
         1d:31:6b:36:e6:99:51:56:08:b4:6d:c2:d5:1d:3e:80:6a:ef:
         18:25:6c:52:77:c9:f2:2a:cc:00:81:24:11:ba:9f:45:9e:fd:
         3a:c8:f9:08:86:16:08:b3:9c:b8:22:4a:ec:2c:3d:6d:b5:e8:
         21:48:93:45:38:f2:58:4d:05:ad:6a:4c:2e:b6:17:e3:6b:fc:
         7c:4b:76:57:e1:45:91:11:05:9f:f1:5e:2c:b3:3e:12:84:d3:
         09:1f:6a:98:f6:8b:96:9a:99:74:09:92:61:7e:33:21:e4:ca:
         16:1e:c2:c2:fc:6b:12:14:4b:a0:9a:3d:c8:84:b8:f7:06:2a:
         f1:88:b6:94:6b:ec:57:52:14:d3:e2:ab:a0:92:b6:2c:d5:30:
         ed:a9:1a:a7:de:e5:4b:9f:7f:13:b0:9f:b3:4f:4d:d6:53:9b:
         08:c0:23:52:a0:60:6b:48:a6:e9:a7:e9:c4:88:77:96:d6:06:
         f8:06:a1:85:62:3c:81:13:88:48:46:85:04:f0:c9:b1:f8:be:
         e2:00:b1:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9PSFkycbmT5SOYMzL0znlwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYjcwZTM0ODhkYzgzMWQ0NWE3NTc0NGUyZjhiYmEyNjdm
ZDMxZDYwHhcNMjQwNTA2MTkwMTMyWhcNMjQwNTA3MTkwMTMyWjAzMTEwLwYDVQQD
EygzYWRmMjc2M2E0NmY0ZmRiMjA1MGU0MjdiMzBmODAzMzdhNDIxMmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02UcvkXhtoSTSk7N2sg1PG7AGPAq
WV3vDOsRhcvXVgHO0hm9PltrXHPMj0DWcGVwzEMNd+dsPHWB8INbgocluu5Ug5OF
t5xWg7m+MTngANhLP7eDZc0lvQkXxWrZFnhGDS/6hTGRFxvVNVDrMb0n0+LOsJlc
F9OO/WyliFX74BIOG8BN1UA86g30fhni7ckKjSjGq4fj0sfMW4L/YFFd+4qxwa8l
c6QMIFymO/FX9UbZ5hRnSeTQebxmtYS7GNaXxfUnDFvFl0UW7P0gXe5f8Edkjh8+
oLl6Er4toPbE6Lnx8VeEf43u8n2luS8jUmd1U5ZrBPDd7at1W0bKUcpPLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrfJ2Okb0/bIFDkJ7MPgDN6QhLoMB8GA1UdIwQY
MBaAFBq3DjSI3IMdRadXROL4u6Jn/THWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMt
MDk3MzNjYjAyNjllLzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMtMDk3MzNjYjAyNjll
LzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtdF+HZD
M6tXWoVrlbU7j1epEfKhMw3A2P0UpRWqxeoc+9DlWiXOuK1H1tslQzdT/lhWjvo2
HTFrNuaZUVYItG3C1R0+gGrvGCVsUnfJ8irMAIEkEbqfRZ79Osj5CIYWCLOcuCJK
7Cw9bbXoIUiTRTjyWE0FrWpMLrYX42v8fEt2V+FFkREFn/FeLLM+EoTTCR9qmPaL
lpqZdAmSYX4zIeTKFh7CwvxrEhRLoJo9yIS49wYq8Yi2lGvsV1IU0+KroJK2LNUw
7akap97lS59/E7Cfs09N1lObCMAjUqBga0im6afpxIh3ltYG+AahhWI8gROISEaF
BPDJsfi+4gCxww==
-----END CERTIFICATE-----
Generated at Mon May 6 23:50:54 2024 by rpki-client on console-ams.rpki-client.org