Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
File:                     GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft (raw, json)
Hash identifier:          d8mpLMLILuTPLv2OfPVdesYZIx244vIbOQga1Zc0P4g=
Subject key identifier:   DB:D7:30:1C:D2:4A:18:FF:14:EF:25:0E:7A:48:27:CD:DC:08:E1:45
Authority key identifier: 1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F
Certificate issuer:       /CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
Certificate serial:       018F24CBC37A25936EA69B4C5C59E9EA8146
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
Manifest number:          10D7
Signing time:             Sun 28 Apr 2024 13:01:24 +0000
Manifest this update:     Sun 28 Apr 2024 13:01:24 +0000
Manifest next update:     Mon 29 Apr 2024 13:01:24 +0000
Files and hashes:         1: GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl (hash: 8uN6xUYC7vRKxrenpzSMbDT0bBhyoDPnjIO1ScVzs1U=)
                          2: RRtn066IoJzSiQccXlc4HhNjXQw.roa (hash: tk4kYIkXyjLAYaYiy0wPYF6Z9sJ/F26DmqH9uc5jgg4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 12:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:24:cb:c3:7a:25:93:6e:a6:9b:4c:5c:59:e9:ea:81:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
        Validity
            Not Before: Apr 28 13:01:24 2024 GMT
            Not After : Apr 29 13:01:24 2024 GMT
        Subject: CN=dbd7301cd24a18ff14ef250e7a4827cddc08e145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:1d:89:fc:e9:1a:06:2d:5f:e8:fd:55:14:
                    05:37:f5:36:d4:37:9b:60:d9:02:0f:9c:78:c2:b7:
                    86:25:30:dc:21:88:24:cf:63:5b:df:d9:58:bd:a3:
                    9b:46:dc:4b:bd:06:2e:03:ee:32:f5:96:c9:54:8a:
                    d9:c2:51:64:ff:ba:11:62:4a:9f:01:d2:23:6d:be:
                    83:08:bd:23:97:8d:2f:71:ba:cf:13:f4:1b:b8:a8:
                    1f:d0:39:dd:1e:ab:a3:8d:7a:dc:30:8d:46:77:8c:
                    42:fe:0c:88:68:f3:f3:bd:7a:62:80:f9:dc:64:40:
                    bc:5a:25:19:e0:a4:cc:24:61:db:b2:6d:00:e4:8d:
                    34:33:14:de:94:d2:b9:f0:b6:ea:b8:1f:d7:13:09:
                    8c:6b:91:f1:e4:b6:e4:d8:d2:b7:44:90:68:8f:ab:
                    2e:07:ac:88:dd:fe:cd:21:0a:61:ed:f3:66:68:aa:
                    9f:44:9a:cb:dc:57:0e:6b:90:bd:e2:df:29:44:ac:
                    52:75:01:39:b7:ff:bd:19:79:5a:03:35:e2:af:92:
                    4d:52:80:45:1c:da:22:ba:0c:10:9c:24:a1:82:10:
                    94:a6:60:bc:da:f5:a8:e8:6a:c6:ff:f3:5c:6d:7a:
                    a7:e5:8f:a9:44:48:cf:a3:84:ee:1c:c5:25:20:31:
                    e3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D7:30:1C:D2:4A:18:FF:14:EF:25:0E:7A:48:27:CD:DC:08:E1:45
            X509v3 Authority Key Identifier:
                keyid:1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:22:f5:e8:bd:76:7a:04:8f:0e:e2:29:1c:c8:1f:7c:5b:b7:
         c9:d2:cb:8f:6a:43:1d:54:fb:27:8f:e2:a9:5e:a1:ed:a7:45:
         76:d0:85:48:86:f8:05:5f:e6:43:b5:5c:5b:31:aa:c4:1f:d7:
         72:83:52:8e:4f:f0:e6:90:4d:07:34:ca:c8:2a:6a:d7:54:c5:
         fe:68:44:4f:a2:87:31:af:9d:b6:57:50:f0:a9:bf:a7:4d:3a:
         46:8f:e1:6e:15:84:fa:cf:9d:19:f0:aa:03:18:8a:e3:98:5f:
         bc:32:ae:94:c7:70:cf:8d:34:71:57:6e:cb:e5:47:af:d0:93:
         46:e0:b3:8a:98:d2:44:c2:9f:e6:18:55:7d:1d:05:76:51:be:
         3b:cf:76:ff:88:0a:d4:6b:ce:d2:86:cd:b6:f0:71:8c:c0:46:
         55:7e:d1:4e:63:cb:25:40:ae:72:0d:4b:ce:50:2e:b4:fa:f9:
         3b:1c:fa:04:7b:7a:4d:03:fd:2d:37:17:5d:ed:52:2e:5b:16:
         7f:7a:57:c5:90:89:91:7c:bd:e1:68:0f:97:c0:b1:61:6d:16:
         1e:7d:83:94:b7:d3:6d:ee:5c:79:7a:e4:dc:50:2b:fa:48:5a:
         8d:07:58:f5:35:6a:2b:d9:4c:44:ae:7d:f3:31:53:a2:c9:f4:
         e9:f0:8d:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8ky8N6JZNupptMXFnp6oFGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNzlhMGFjMzMxMmMxNjUzZjMwMGIwNDUxMGQ5YmYyYzlj
MmE1NWYwHhcNMjQwNDI4MTMwMTI0WhcNMjQwNDI5MTMwMTI0WjAzMTEwLwYDVQQD
EyhkYmQ3MzAxY2QyNGExOGZmMTRlZjI1MGU3YTQ4MjdjZGRjMDhlMTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo4difzpGgYtX+j9VRQFN/U21Deb
YNkCD5x4wreGJTDcIYgkz2Nb39lYvaObRtxLvQYuA+4y9ZbJVIrZwlFk/7oRYkqf
AdIjbb6DCL0jl40vcbrPE/QbuKgf0DndHqujjXrcMI1Gd4xC/gyIaPPzvXpigPnc
ZEC8WiUZ4KTMJGHbsm0A5I00MxTelNK58LbquB/XEwmMa5Hx5Lbk2NK3RJBoj6su
B6yI3f7NIQph7fNmaKqfRJrL3FcOa5C94t8pRKxSdQE5t/+9GXlaAzXir5JNUoBF
HNoiugwQnCShghCUpmC82vWo6GrG//NcbXqn5Y+pREjPo4TuHMUlIDHjOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvXMBzSShj/FO8lDnpIJ83cCOFFMB8GA1UdIwQY
MBaAFBp5oKwzEsFlPzALBFENm/LJwqVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR25tZ3JETVN3V1VfTUFzRVVRMmI4c25DcFY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zMjk5NjgtMjQ3Yy00ZGVhLTk5ZDIt
NjAxMDdiNGVhNGViLzEvR25tZ3JETVN3V1VfTUFzRVVRMmI4c25DcFY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zMjk5NjgtMjQ3Yy00ZGVhLTk5ZDItNjAxMDdiNGVhNGVi
LzEvR25tZ3JETVN3V1VfTUFzRVVRMmI4c25DcFY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyL16L12
egSPDuIpHMgffFu3ydLLj2pDHVT7J4/iqV6h7adFdtCFSIb4BV/mQ7VcWzGqxB/X
coNSjk/w5pBNBzTKyCpq11TF/mhET6KHMa+dtldQ8Km/p006Ro/hbhWE+s+dGfCq
AxiK45hfvDKulMdwz400cVduy+VHr9CTRuCzipjSRMKf5hhVfR0FdlG+O892/4gK
1GvO0obNtvBxjMBGVX7RTmPLJUCucg1LzlAutPr5Oxz6BHt6TQP9LTcXXe1SLlsW
f3pXxZCJkXy94WgPl8CxYW0WHn2DlLfTbe5ceXrk3FAr+khajQdY9TVqK9lMRK59
8zFTosn06fCN2A==
-----END CERTIFICATE-----
Generated at Sun Apr 28 17:49:57 2024 by rpki-client on console-fra.rpki-client.org