Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File:                     Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier:          aTg2nz1nMy2Z3/KfmyU1lQje7VD9CsAZUjGHeUoORho=
Subject key identifier:   48:F4:F0:68:27:85:B9:1C:92:96:8F:9D:D8:2A:CB:1A:F6:88:08:C0
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer:       /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial:       019048694170997D81C5B3876A28D03E745F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number:          0760
Signing time:             Mon 24 Jun 2024 04:02:55 +0000
Manifest this update:     Mon 24 Jun 2024 04:02:55 +0000
Manifest next update:     Tue 25 Jun 2024 04:02:55 +0000
Files and hashes:         1: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: /3StZft8g92jZkGhoKEqCQi+aWc3pMc3Xj1FwVciiKo=)
                          2: dAZLHVhfEA-6xjf2mftdjsvu8CQ.roa (hash: IBdeHJtEcqJ2Wrv/qLEvZ0hg7HBroD32PvJPMB+F+mo=)
                          3: glSyn9ZhnoDrM7qPF5erNeLtajE.roa (hash: UNus30gLvnBwtWL3qSyweIVHM6bx2fno/nSb/YhjSeE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:69:41:70:99:7d:81:c5:b3:87:6a:28:d0:3e:74:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
        Validity
            Not Before: Jun 24 04:02:55 2024 GMT
            Not After : Jun 25 04:02:55 2024 GMT
        Subject: CN=48f4f0682785b91c92968f9dd82acb1af68808c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a3:eb:b5:ab:2b:99:e3:36:3a:9e:d7:3f:b8:
                    6f:f3:4d:7d:d3:a9:90:2e:12:17:e3:22:7a:39:99:
                    1b:bb:a7:8e:6a:50:65:73:84:b0:5b:d1:14:e4:d9:
                    f6:1f:60:28:f0:b5:1e:44:6c:3e:69:30:9b:3c:85:
                    d7:2b:ec:f5:d0:8b:d2:c4:56:4e:2e:5b:14:93:9c:
                    50:47:a2:96:b7:38:d0:76:14:cf:6f:5c:7e:c6:b5:
                    8c:71:91:f1:2f:8c:39:25:25:55:e5:b5:d0:e8:e8:
                    d0:7a:e3:d4:19:35:58:23:4f:b2:49:a1:9e:85:3c:
                    99:37:2f:8e:5d:4f:97:83:d5:39:1e:34:a2:7a:85:
                    82:c5:d5:b4:e7:af:41:8e:f7:58:d6:dd:01:53:f9:
                    03:6f:3d:4a:99:41:56:68:3b:37:02:91:43:03:7a:
                    a5:43:1f:60:d7:b7:60:93:e1:bf:47:48:98:c8:f5:
                    71:a8:f3:0d:a5:da:59:74:d5:ad:6f:12:ac:7b:34:
                    89:f7:5e:32:1c:0c:ee:ee:f5:8d:46:e9:83:20:19:
                    6e:61:ee:9e:ea:1f:f9:da:78:e7:4a:59:a9:55:70:
                    2d:bd:24:fd:d0:b5:89:96:09:6e:ae:37:40:c7:fa:
                    15:2b:2d:dc:b8:a2:72:34:d9:91:bc:bf:7e:91:12:
                    df:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F4:F0:68:27:85:B9:1C:92:96:8F:9D:D8:2A:CB:1A:F6:88:08:C0
            X509v3 Authority Key Identifier:
                keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c6:60:0c:1b:05:1d:85:ec:0c:10:9c:b1:a8:10:77:19:b4:
         a2:07:cb:c8:3f:54:32:51:4e:0e:af:ca:35:c2:3e:33:7e:55:
         00:a6:b2:45:22:04:bb:32:6b:a3:86:1a:01:e6:72:a2:1e:a3:
         d9:14:64:fa:c2:8e:3c:82:55:11:d5:c5:f4:c6:ec:67:5e:c4:
         49:9a:b0:4c:21:18:ba:54:6e:27:cd:4d:59:97:68:c0:dd:96:
         19:68:f1:2b:96:33:a4:0d:d0:37:ae:b8:c6:a5:24:49:4d:20:
         1f:c0:3e:67:66:38:4a:0c:8e:cf:3c:a2:4f:08:26:de:d9:41:
         6c:a8:12:36:7c:47:0d:c5:5b:11:a7:42:eb:8a:07:eb:9c:ca:
         b5:d0:bc:4d:59:4d:25:9e:89:96:c8:e0:aa:12:4c:84:bb:c9:
         09:4e:3d:70:53:9a:48:1f:41:be:f4:ea:15:84:a8:9b:b1:20:
         60:12:4a:5c:15:c8:2f:2c:bf:ff:99:1f:47:3b:d8:04:e3:a3:
         d6:0a:68:09:77:51:61:c9:e7:28:46:ba:0e:b3:55:73:31:42:
         75:f3:2e:de:58:4b:36:5b:ca:4f:05:ad:bf:02:e7:53:ef:6e:
         a2:e4:93:ef:df:4b:fa:c8:e3:45:09:9c:77:c5:e1:40:ce:81:
         74:a9:d1:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBIaUFwmX2BxbOHaijQPnRfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMWQyMTU0YjkzMjRlZmIzOWNhMzhiYTE5MzFiYTVkZmI1
OWU4ZmQwHhcNMjQwNjI0MDQwMjU1WhcNMjQwNjI1MDQwMjU1WjAzMTEwLwYDVQQD
Eyg0OGY0ZjA2ODI3ODViOTFjOTI5NjhmOWRkODJhY2IxYWY2ODgwOGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKPrtasrmeM2Op7XP7hv801906mQ
LhIX4yJ6OZkbu6eOalBlc4SwW9EU5Nn2H2Ao8LUeRGw+aTCbPIXXK+z10IvSxFZO
LlsUk5xQR6KWtzjQdhTPb1x+xrWMcZHxL4w5JSVV5bXQ6OjQeuPUGTVYI0+ySaGe
hTyZNy+OXU+Xg9U5HjSieoWCxdW0569BjvdY1t0BU/kDbz1KmUFWaDs3ApFDA3ql
Qx9g17dgk+G/R0iYyPVxqPMNpdpZdNWtbxKsezSJ914yHAzu7vWNRumDIBluYe6e
6h/52njnSlmpVXAtvST90LWJlglurjdAx/oVKy3cuKJyNNmRvL9+kRLfpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEj08GgnhbkckpaPndgqyxr2iAjAMB8GA1UdIwQY
MBaAFBodIVS5Mk77Oco4uhkxul37Wej9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAt
ODkwMWIwNTJiODZiLzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAtODkwMWIwNTJiODZi
LzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScZgDBsF
HYXsDBCcsagQdxm0ogfLyD9UMlFODq/KNcI+M35VAKayRSIEuzJro4YaAeZyoh6j
2RRk+sKOPIJVEdXF9MbsZ17ESZqwTCEYulRuJ81NWZdowN2WGWjxK5YzpA3QN664
xqUkSU0gH8A+Z2Y4SgyOzzyiTwgm3tlBbKgSNnxHDcVbEadC64oH65zKtdC8TVlN
JZ6JlsjgqhJMhLvJCU49cFOaSB9BvvTqFYSom7EgYBJKXBXILyy//5kfRzvYBOOj
1gpoCXdRYcnnKEa6DrNVczFCdfMu3lhLNlvKTwWtvwLnU+9uouST799L+sjjRQmc
d8XhQM6BdKnR9w==
-----END CERTIFICATE-----
Generated at Mon Jun 24 10:26:56 2024 by rpki-client on console-fra.rpki-client.org