Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
File:                     GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft (raw, json)
Hash identifier:          UtE8FpZMHJyv6QyXCWseZ05AEs11uiBwaNxpAkXZz94=
Subject key identifier:   78:C8:D8:20:FC:AB:83:01:DA:9F:6A:33:B7:45:AF:1E:B8:A5:05:18
Authority key identifier: 1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
Certificate issuer:       /CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Certificate serial:       018F3EF974BA49964D12F5237C25ED915D10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
Manifest number:          0F7F
Signing time:             Fri 03 May 2024 15:01:26 +0000
Manifest this update:     Fri 03 May 2024 15:01:26 +0000
Manifest next update:     Sat 04 May 2024 15:01:26 +0000
Files and hashes:         1: GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl (hash: OB5hQQzHmpPCIQY99qG7CSSqFAcbFy3CYumiyVhbgHA=)
                          2: kZYJ81QGoNR3KIT-L8jKOyTKOUw.roa (hash: 2ay0q2Mp0qxDnRzAGJbJVXlPHjAIoSZ1YGvcEdmIecY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3e:f9:74:ba:49:96:4d:12:f5:23:7c:25:ed:91:5d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
        Validity
            Not Before: May  3 15:01:26 2024 GMT
            Not After : May  4 15:01:26 2024 GMT
        Subject: CN=78c8d820fcab8301da9f6a33b745af1eb8a50518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:08:20:79:a5:66:6f:e2:5c:75:91:91:a5:4b:
                    70:48:19:8a:06:68:39:09:11:79:7d:a9:53:4f:c0:
                    12:f7:fd:60:92:14:33:79:8c:ba:74:48:04:a4:63:
                    ae:77:66:e8:c7:06:a2:dc:7e:f0:b3:9c:e2:63:1d:
                    d4:46:db:21:e8:16:ad:e8:61:10:2c:0c:69:71:04:
                    0d:7a:16:0f:37:cc:2b:15:49:2e:a0:bf:15:f6:fe:
                    08:08:25:21:33:05:80:90:98:b5:fe:5d:c2:f2:ed:
                    73:70:43:db:18:a5:b5:7a:0b:9c:34:e1:ff:17:30:
                    b3:bf:ea:dc:4c:64:df:5b:18:d2:b8:df:46:8e:48:
                    2e:ba:63:28:8e:f5:0c:68:43:31:48:a7:59:ef:39:
                    26:d4:51:76:7d:51:bc:ee:d6:73:2d:cc:8e:02:36:
                    81:1a:ab:8c:50:f6:39:83:e9:12:c2:90:ce:cb:d7:
                    da:e9:eb:59:84:46:bb:e6:5c:bb:44:1e:42:08:3b:
                    29:fe:08:7d:03:30:76:09:1a:6e:67:ea:ec:af:0f:
                    fc:91:fd:5b:ff:3f:81:a7:0f:43:fb:73:d0:61:a3:
                    6c:0a:36:c6:7f:d7:c7:5d:18:34:32:34:f6:06:39:
                    b7:f5:ae:69:95:3c:94:0b:d6:c6:1c:80:e6:ab:ba:
                    eb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C8:D8:20:FC:AB:83:01:DA:9F:6A:33:B7:45:AF:1E:B8:A5:05:18
            X509v3 Authority Key Identifier:
                keyid:1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:dc:b8:e4:49:48:06:af:b0:03:2b:35:6e:cd:cd:1a:3b:81:
         05:ff:82:3e:cc:c2:a0:d4:08:62:4a:10:4e:fe:1c:a4:8e:a2:
         50:8b:c1:af:bb:31:b2:ee:b1:dc:8a:23:63:47:22:9c:21:c8:
         f4:7a:bd:8a:df:bf:39:73:67:8e:05:8d:bf:d4:49:8a:2a:c7:
         a7:36:ba:d0:f0:ae:5e:70:87:be:1b:3f:b0:26:50:5b:c8:eb:
         66:a9:32:bf:33:6a:25:87:0a:df:0b:f6:6d:fe:e4:90:71:b8:
         bf:05:f4:be:d1:96:55:30:3e:2b:05:ea:d4:be:05:5d:e1:c0:
         27:61:06:f8:cf:32:b6:8a:57:18:22:b0:d9:9b:0c:60:0b:ff:
         7e:80:34:35:b2:9a:eb:7c:36:fe:57:ff:08:70:42:e6:8f:3d:
         be:46:0a:f7:c8:36:c2:17:cc:f4:9a:dc:77:55:07:1b:fd:c0:
         a6:67:38:63:52:75:01:b3:4b:0e:45:7f:26:46:2b:1b:c6:d1:
         33:19:8f:1f:24:60:d8:b7:32:f2:b6:8c:8f:52:12:25:5f:0b:
         8d:f4:59:cf:d0:b5:32:c4:df:33:74:6b:71:d3:3b:66:37:6b:
         cf:cb:79:b9:e0:a0:2b:71:d0:32:d0:b5:79:b0:50:47:f5:72:
         fa:b7:1f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 19:29:25 2024 by rpki-client on console-fra.rpki-client.org