Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
File:                     GpnHX-V3fhNlc-HlHvumeB86WxY.mft (raw, json)
Hash identifier:          mzZXuSx5PO0uqHQ1SkjTaS7u/HaQHikG28EJ90177yU=
Subject key identifier:   FD:B7:7A:FE:A5:12:3D:1E:82:36:0D:F2:22:E5:2A:72:EB:C6:25:FC
Authority key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
Certificate issuer:       /CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Certificate serial:       018F20EFEBDD93FF7B2057F1058E769F563C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
Manifest number:          1146
Signing time:             Sat 27 Apr 2024 19:02:25 +0000
Manifest this update:     Sat 27 Apr 2024 19:02:25 +0000
Manifest next update:     Sun 28 Apr 2024 19:02:25 +0000
Files and hashes:         1: GpnHX-V3fhNlc-HlHvumeB86WxY.crl (hash: WiYVFuOnHsfdZs85GQ44lnz/asbJIuv+Y+uOsxasLC0=)
                          2: aPOWaRJR-FGrN3u-8zh82-1PBwc.roa (hash: tw7J1wNC6LeOrw8JgIU3vE8suFymEvXhHV92CbdtCks=)
                          3: jwxvgONINcPP0d2dGaGth8QHC2I.roa (hash: UIAeQpMI4UvvbXc4JA8Gd5ismBT1DVGH+W2l9hGo1CQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:ef:eb:dd:93:ff:7b:20:57:f1:05:8e:76:9f:56:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
        Validity
            Not Before: Apr 27 19:02:25 2024 GMT
            Not After : Apr 28 19:02:25 2024 GMT
        Subject: CN=fdb77afea5123d1e82360df222e52a72ebc625fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7f:b2:d9:34:68:2a:ec:cc:64:6f:9c:f9:93:
                    34:1c:42:c8:53:61:5f:b5:24:67:36:ab:fe:83:bc:
                    39:65:2a:94:b0:7d:93:77:42:0e:d2:cb:df:12:d2:
                    f2:de:36:2c:a9:a0:24:d8:b3:fe:e2:0e:a6:1a:90:
                    8a:25:65:72:bf:84:db:d4:be:45:84:dd:0b:eb:ea:
                    13:72:d7:36:f2:a9:fa:52:2b:96:b6:53:a7:13:de:
                    d3:01:61:00:bc:4d:0e:75:73:56:65:4f:69:c7:c2:
                    e8:47:34:2a:9b:71:90:a6:91:4a:e1:01:d6:24:4b:
                    a6:3d:f2:36:cf:e4:82:e2:00:8e:31:8d:c7:85:09:
                    30:ff:87:fd:0e:68:ef:8e:d7:5a:8f:8a:6a:17:7b:
                    18:4b:95:2a:0f:e4:db:86:d4:9f:99:9d:56:45:ec:
                    7f:0a:9f:f4:c8:14:19:24:d2:5a:fb:52:82:4a:e6:
                    a0:ca:bb:95:60:7a:18:50:a4:54:06:5f:c6:1a:94:
                    11:de:45:f6:96:18:a0:a9:66:8d:60:6f:f0:25:ff:
                    01:30:d9:b1:b4:a0:66:1f:22:b4:91:ae:d5:d1:7e:
                    48:39:46:4d:fa:2e:ac:e9:d5:56:09:60:82:cc:bc:
                    1f:eb:3a:29:4c:24:fa:a7:30:1b:94:00:56:60:7f:
                    81:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B7:7A:FE:A5:12:3D:1E:82:36:0D:F2:22:E5:2A:72:EB:C6:25:FC
            X509v3 Authority Key Identifier:
                keyid:1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:16:f3:c8:b7:01:d7:3c:67:af:ce:37:b5:88:42:5c:a8:ee:
         18:c1:55:c5:f9:be:17:97:46:8c:37:7e:63:56:1e:fb:bc:4f:
         6f:62:82:a6:a6:14:e7:ee:ef:5f:ac:72:f6:0a:39:a4:d4:50:
         54:ed:08:52:0c:bc:4c:a8:cf:d5:f3:6d:6d:46:4b:b9:ae:8d:
         9a:1e:0b:ee:f5:f8:11:d9:5c:2e:61:0f:c7:3d:11:ca:2d:ff:
         7a:63:bb:13:db:f7:0e:10:23:bd:87:ed:c6:f3:97:38:f3:66:
         96:ef:bd:e9:74:9f:58:a4:f6:bb:58:67:16:7f:d8:10:02:72:
         c2:0d:16:43:6a:c2:65:61:37:9a:34:ed:32:3d:50:68:14:49:
         cd:b2:26:3d:38:e6:a3:db:9d:ab:cd:d9:bd:1e:48:7e:f7:e7:
         8a:b1:b3:e4:66:74:bd:91:f1:46:ec:7d:82:a9:c2:2c:ab:70:
         73:30:0d:4a:9e:ba:b7:46:47:7a:df:65:20:16:0f:83:81:41:
         44:a2:a9:b0:10:38:24:8b:32:8a:d5:88:67:4a:72:6d:7c:49:
         cc:b3:bc:2e:fd:f3:a2:37:a1:e7:69:21:e5:44:36:93:af:a7:
         f5:a0:7c:ad:80:c6:12:e8:0d:4d:23:e9:d3:c3:12:66:76:46:
         41:88:8f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:40:37 2024 by rpki-client on console-ams.rpki-client.org