Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
File:                     GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft (raw, json)
Hash identifier:          rjyjeIap0cayRKakYiNKksZm2hKGaSXsrUXdYQRj4XI=
Subject key identifier:   ED:C9:C4:C9:FC:D1:2E:48:E4:AB:E6:ED:8F:DF:5C:90:41:D7:0D:DA
Authority key identifier: 1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
Certificate issuer:       /CN=1ab634dc74f6037ba47311d127420e76f296be54
Certificate serial:       018F3663D7EB8C2A32D499F1C9C7D03C8A50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
Manifest number:          1151
Signing time:             Wed 01 May 2024 23:01:04 +0000
Manifest this update:     Wed 01 May 2024 23:01:04 +0000
Manifest next update:     Thu 02 May 2024 23:01:04 +0000
Files and hashes:         1: GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl (hash: 66HGf2/7N6xEBkNKQREXx1ln7pJJCtQaviDjJzA6eOY=)
                          2: YSasuzkGTJIYisCAUe-2ivt9Iy0.roa (hash: 0H8t/YpwUQ7lQfzE70W+AIhCwvjauhaTUntpsMmS7Rs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:63:d7:eb:8c:2a:32:d4:99:f1:c9:c7:d0:3c:8a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab634dc74f6037ba47311d127420e76f296be54
        Validity
            Not Before: May  1 23:01:04 2024 GMT
            Not After : May  2 23:01:04 2024 GMT
        Subject: CN=edc9c4c9fcd12e48e4abe6ed8fdf5c9041d70dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:91:5d:6d:3f:87:08:ee:c9:55:64:0a:7b:
                    61:f1:4c:93:53:4e:15:55:6e:1e:3b:a3:9a:d5:be:
                    98:38:a8:c2:06:35:e7:f7:34:5b:fd:1f:c3:4e:3c:
                    f9:f3:42:97:87:8e:28:45:c5:79:ef:93:f5:ae:1d:
                    89:d8:ae:09:86:aa:37:55:ac:19:e3:40:4c:be:9e:
                    6b:d3:c1:79:df:5c:38:40:c5:e2:71:92:9e:68:56:
                    05:28:ed:b8:c2:c6:bf:12:3b:f0:9c:e9:c6:43:a2:
                    8f:58:57:46:0b:44:83:b4:a4:5f:1a:cc:9a:62:0e:
                    39:aa:0b:34:42:e3:ab:9d:ff:f6:08:bc:0a:ca:b4:
                    06:a0:e3:28:ec:9a:54:44:fc:6f:eb:10:77:e9:6b:
                    33:2f:cb:fc:89:47:74:03:11:cb:55:9e:ed:d4:59:
                    38:a9:3a:17:d6:f5:e4:98:d5:e8:dc:3e:c7:e9:54:
                    5a:ac:74:ef:e3:4d:d6:08:ce:ac:58:83:af:23:13:
                    73:bb:d2:9a:92:46:53:10:0d:67:ed:8a:7c:77:f9:
                    92:6c:f8:44:ca:f7:d4:04:0e:72:ed:36:67:ab:4b:
                    55:63:59:a0:97:87:f8:9c:02:d7:3b:e9:6c:bc:d0:
                    b2:b5:37:0d:f7:26:5e:94:f6:a1:4b:5f:d6:88:ec:
                    8f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C9:C4:C9:FC:D1:2E:48:E4:AB:E6:ED:8F:DF:5C:90:41:D7:0D:DA
            X509v3 Authority Key Identifier:
                keyid:1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1c:b7:76:d2:9b:f2:a0:ea:d6:e3:03:39:9b:68:71:2c:e1:
         ed:ad:c7:fe:85:c4:20:c7:c3:2b:14:0d:4e:3c:ad:cf:47:62:
         ea:a4:03:f1:d5:05:4f:94:1c:a0:89:95:45:da:86:d0:65:78:
         99:fa:1e:5e:d3:89:4c:6d:1d:c8:28:0d:6b:45:70:dd:2b:87:
         e5:12:c6:0f:dc:07:03:37:7c:ae:e2:25:ab:f2:15:60:7b:65:
         1d:ea:20:ec:82:20:b7:02:dd:18:34:42:30:31:01:dc:42:cc:
         b8:8c:17:aa:b7:80:0d:8d:39:6e:b9:60:03:e6:85:7e:85:1e:
         b2:d2:7e:29:6c:fd:94:a8:b2:94:5f:09:41:70:19:07:ca:f5:
         b6:f6:40:8b:0b:6e:cd:52:2c:08:c2:18:52:a7:16:7a:6b:cc:
         20:fb:b9:b4:a7:d4:31:63:9d:86:c7:6c:fd:bf:c2:c6:f9:e2:
         c1:31:93:fa:cc:97:55:23:61:49:f0:0b:21:f4:03:5e:8e:bd:
         73:7b:37:5d:07:61:58:cd:49:f0:cb:ee:bc:35:06:af:da:dd:
         85:51:a7:fc:9c:b9:bd:fa:cf:7d:d1:61:26:40:56:01:38:82:
         2a:dc:2d:80:09:e4:61:6b:a2:16:a4:f1:ae:ce:c3:dd:e9:2e:
         58:07:2c:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY82Y9frjCoy1JnxycfQPIpQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYjYzNGRjNzRmNjAzN2JhNDczMTFkMTI3NDIwZTc2ZjI5
NmJlNTQwHhcNMjQwNTAxMjMwMTA0WhcNMjQwNTAyMjMwMTA0WjAzMTEwLwYDVQQD
EyhlZGM5YzRjOWZjZDEyZTQ4ZTRhYmU2ZWQ4ZmRmNWM5MDQxZDcwZGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1uRXW0/hwjuyVVkCnth8UyTU04V
VW4eO6Oa1b6YOKjCBjXn9zRb/R/DTjz580KXh44oRcV575P1rh2J2K4Jhqo3VawZ
40BMvp5r08F531w4QMXicZKeaFYFKO24wsa/EjvwnOnGQ6KPWFdGC0SDtKRfGsya
Yg45qgs0QuOrnf/2CLwKyrQGoOMo7JpURPxv6xB36WszL8v8iUd0AxHLVZ7t1Fk4
qToX1vXkmNXo3D7H6VRarHTv403WCM6sWIOvIxNzu9KakkZTEA1n7Yp8d/mSbPhE
yvfUBA5y7TZnq0tVY1mgl4f4nALXO+lsvNCytTcN9yZelPahS1/WiOyPJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3JxMn80S5I5Kvm7Y/fXJBB1w3aMB8GA1UdIwQY
MBaAFBq2NNx09gN7pHMR0SdCDnbylr5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3JZMDNIVDJBM3VrY3hIUkowSU9kdktXdmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83YTI2ZTYtZjdhZS00ZGYwLTllY2It
ZDg3OWY3ZTcwOWQ2LzEvR3JZMDNIVDJBM3VrY3hIUkowSU9kdktXdmxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83YTI2ZTYtZjdhZS00ZGYwLTllY2ItZDg3OWY3ZTcwOWQ2
LzEvR3JZMDNIVDJBM3VrY3hIUkowSU9kdktXdmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChy3dtKb
8qDq1uMDOZtocSzh7a3H/oXEIMfDKxQNTjytz0di6qQD8dUFT5QcoImVRdqG0GV4
mfoeXtOJTG0dyCgNa0Vw3SuH5RLGD9wHAzd8ruIlq/IVYHtlHeog7IIgtwLdGDRC
MDEB3ELMuIwXqreADY05brlgA+aFfoUestJ+KWz9lKiylF8JQXAZB8r1tvZAiwtu
zVIsCMIYUqcWemvMIPu5tKfUMWOdhsds/b/CxvniwTGT+syXVSNhSfALIfQDXo69
c3s3XQdhWM1J8MvuvDUGr9rdhVGn/Jy5vfrPfdFhJkBWATiCKtwtgAnkYWuiFqTx
rs7D3ekuWAcsJQ==
-----END CERTIFICATE-----
Generated at Thu May 2 02:58:14 2024 by rpki-client on console-fra.rpki-client.org