Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
File:                     GCJVGHajpiZZn0Z8eucJuBwU30k.mft (raw, json)
Hash identifier:          8gXl68p/BM+tszjZeqQk4nqbTfmKKmOKmC6SnRO0lFM=
Subject key identifier:   F2:4F:25:82:93:DE:E4:43:89:07:2C:25:55:D1:CA:9D:7E:59:C2:6A
Authority key identifier: 18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49
Certificate issuer:       /CN=1822551876a3a626599f467c7ae709b81c14df49
Certificate serial:       0193523E11EF45DEEB0EF8BA28DBEEDAC65B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
Manifest number:          0BC9
Signing time:             Fri 22 Nov 2024 05:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:19 +0000
Files and hashes:         1: GCJVGHajpiZZn0Z8eucJuBwU30k.crl (hash: z6Sl2UEwtIoxvds6miYcZaY7KLVcrApTC9ysiel80oA=)
                          2: k6T52QWmEzIhJHLePyfOrn8MadA.roa (hash: iuWq77QXB/sdfsN8fqgYExRRtGoYJ+0AMmH9Uajsuus=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:11:ef:45:de:eb:0e:f8:ba:28:db:ee:da:c6:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1822551876a3a626599f467c7ae709b81c14df49
        Validity
            Not Before: Nov 22 05:00:19 2024 GMT
            Not After : Nov 23 05:00:19 2024 GMT
        Subject: CN=f24f258293dee44389072c2555d1ca9d7e59c26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:39:ae:4b:af:33:8b:20:cd:5b:21:4f:16:8f:
                    d4:7c:47:99:9b:b2:fb:00:82:dc:4c:c9:0f:4d:75:
                    ef:03:e6:4a:a8:6a:26:53:09:52:0c:de:34:ce:a7:
                    6a:6f:30:c2:f4:55:4d:52:fb:09:3c:5a:54:63:20:
                    14:22:88:de:7e:d6:63:84:bb:c9:1e:5f:84:b5:64:
                    34:70:6d:e5:56:c4:a5:a6:45:35:d5:f5:e4:7a:53:
                    88:29:19:ad:75:e6:8e:3f:d7:5e:25:fa:f8:73:1c:
                    ad:60:58:a2:1e:c0:d0:4b:df:49:2c:dd:f2:ca:3c:
                    c3:3d:30:c1:50:f8:2e:14:3b:ca:79:84:65:67:e1:
                    53:e5:8e:e7:f0:94:0f:fa:50:b7:de:f2:e8:dc:9c:
                    99:0e:bf:83:47:aa:cf:20:fc:ac:6a:fb:0e:7e:7c:
                    26:ed:c4:8d:7e:ff:8d:86:d2:bd:2d:40:59:4d:4f:
                    82:f3:60:95:65:6a:ae:86:2e:dd:53:76:7b:9b:db:
                    b2:8f:c8:92:b8:6f:3f:0e:5f:be:d2:54:41:90:b1:
                    e9:b2:3d:f6:b8:2d:79:77:ba:63:41:41:e9:d6:58:
                    e5:d1:33:b5:7a:b0:a6:e3:25:93:71:08:ea:19:c4:
                    2c:c5:cb:94:d6:72:e5:18:ea:7f:f3:4b:ae:a2:e9:
                    9b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4F:25:82:93:DE:E4:43:89:07:2C:25:55:D1:CA:9D:7E:59:C2:6A
            X509v3 Authority Key Identifier:
                keyid:18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:04:e4:4a:d3:ec:a8:97:50:a6:64:d1:ff:0e:a7:93:ea:eb:
         0e:57:bb:8b:4a:8f:6b:10:ca:af:ba:bb:1e:c4:c9:3b:d9:2f:
         c7:db:91:27:02:f1:c4:be:aa:91:8b:29:e6:02:a7:a5:89:d7:
         0d:90:3a:a4:46:b4:3a:84:81:a3:4a:86:34:1f:9e:26:ac:2c:
         18:fa:f7:82:ba:87:68:0e:1e:80:27:88:df:b2:e2:b2:39:ae:
         f2:d2:06:dc:69:a3:83:bf:f2:bc:66:2e:f3:07:8a:1b:39:8a:
         a2:5c:cc:9f:0e:1a:af:c9:19:63:8d:79:c3:cf:a3:53:71:37:
         01:3f:73:d5:7f:89:7e:33:36:db:91:5b:ea:99:6e:96:f5:48:
         34:68:dc:e7:65:f4:fc:aa:dd:15:ba:16:43:e2:51:c9:07:a0:
         eb:82:a7:4b:19:22:8b:85:ee:e7:82:9a:10:49:72:93:3b:88:
         af:b5:e8:ea:b2:52:8e:a8:91:2f:82:70:de:15:9a:b0:b7:fc:
         9a:57:a0:ae:c3:5c:a2:8c:6b:91:02:50:cc:40:66:80:2c:80:
         a8:b6:63:39:95:60:cc:a0:68:ec:75:9d:d9:ab:b6:a6:b8:9c:
         33:79:74:2e:bf:5d:cc:9d:36:48:cc:7c:77:c2:54:11:63:9e:
         7e:f9:0d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:09:35 2024 by rpki-client on console-ams.rpki-client.org