Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
File:                     GEF3t2iRATugJ7Nebt_B6fgpXOw.mft (raw, json)
Hash identifier:          HyLLnajM2da9C/rsf/QGP2J3x1CMQj1cJ1rWkjO/twQ=
Subject key identifier:   16:2A:45:0E:CA:66:BA:BD:53:E1:20:A5:72:61:4C:58:F7:A5:99:67
Authority key identifier: 18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC
Certificate issuer:       /CN=184177b76891013ba027b35e6edfc1e9f8295cec
Certificate serial:       018F3BF9DBF6243982CED3F90BC2A49BB4A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
Manifest number:          06C4
Signing time:             Fri 03 May 2024 01:03:01 +0000
Manifest this update:     Fri 03 May 2024 01:03:01 +0000
Manifest next update:     Sat 04 May 2024 01:03:01 +0000
Files and hashes:         1: CNSTQYD0npEDZ-KnXtle_aBg--w.roa (hash: Ql1VCVC7vVk3lE34mILUZZ4rEF0rN5mS6yO1qvHfvKg=)
                          2: GEF3t2iRATugJ7Nebt_B6fgpXOw.crl (hash: EhKUdg+NuxrJmq80Vsu0DbqB25qe+o2mgOgihc4d+4I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 00:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f9:db:f6:24:39:82:ce:d3:f9:0b:c2:a4:9b:b4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184177b76891013ba027b35e6edfc1e9f8295cec
        Validity
            Not Before: May  3 01:03:01 2024 GMT
            Not After : May  4 01:03:01 2024 GMT
        Subject: CN=162a450eca66babd53e120a572614c58f7a59967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b5:68:4f:55:b0:75:18:3e:11:3e:25:28:a8:
                    fb:d4:05:0d:7b:56:fb:e6:2a:af:22:66:24:46:3b:
                    c3:11:77:34:e6:91:43:58:6c:63:fe:78:e1:ca:5d:
                    8e:b1:75:29:31:e6:4e:7a:99:16:46:86:8d:d9:1c:
                    57:36:85:85:09:64:c4:09:c9:83:ae:be:c9:b2:2e:
                    54:3c:87:bb:aa:bc:d2:2e:7d:af:8c:e6:18:26:0d:
                    ca:9e:9d:8e:a1:c8:fc:a2:68:16:e9:30:e6:11:db:
                    b8:90:06:b5:bf:4b:5b:cc:ff:c0:81:fa:48:94:72:
                    8e:21:3d:64:e4:9d:61:64:c3:49:78:fa:b7:e5:fc:
                    a9:90:f8:62:1a:4f:0f:96:4b:d7:40:1d:fd:c1:1c:
                    71:9f:52:4a:df:45:ff:d0:9f:6b:d1:f6:57:0a:0d:
                    e4:ef:94:1f:bb:de:a1:6a:6b:f2:d0:8c:4a:1b:3b:
                    d3:6d:29:f7:69:ad:45:4c:c4:05:3f:8b:4b:e3:23:
                    ea:a9:0c:c4:3d:65:51:6b:89:03:cc:f2:f4:e6:56:
                    39:6f:df:de:12:91:3d:c8:8a:d7:0a:45:c3:0f:13:
                    92:84:6c:58:b7:5d:9f:5c:58:07:66:11:9d:ba:0f:
                    82:b7:3d:de:98:18:d7:3a:49:5f:2d:f0:ab:5e:96:
                    fa:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2A:45:0E:CA:66:BA:BD:53:E1:20:A5:72:61:4C:58:F7:A5:99:67
            X509v3 Authority Key Identifier:
                keyid:18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:49:05:48:2f:18:c6:12:df:a3:5d:39:4c:c1:b3:e0:12:0f:
         fe:6f:fc:25:06:c7:3f:7d:9f:fa:ef:1d:03:53:e8:bc:39:74:
         2d:fc:e6:95:83:27:90:98:70:ca:b8:99:46:31:f6:42:7a:91:
         68:f2:cc:05:0d:32:f1:ec:e5:40:11:1d:14:71:50:cf:11:75:
         4a:34:f5:81:bf:82:da:18:a0:3c:06:08:31:fb:f0:8e:3f:22:
         4a:80:34:7c:92:bd:f5:8a:84:b6:60:74:b7:ce:0e:b5:92:22:
         65:17:f4:bc:ca:65:33:a8:c0:54:17:67:82:20:dc:22:d4:e2:
         49:8c:47:96:e3:e2:6c:b4:78:c3:7e:a6:72:26:80:64:66:e0:
         12:6a:c0:1a:af:0e:b4:55:40:3b:10:48:8d:df:20:57:91:89:
         37:70:3c:72:95:1c:fd:36:20:58:cf:39:f1:be:e7:8a:e8:f6:
         c2:4d:15:7e:c1:65:e1:f5:bc:67:02:f3:6c:5e:f1:1c:d9:9b:
         fd:63:66:07:8c:9f:c1:71:1f:eb:e3:7c:64:c9:bf:47:8b:e6:
         fc:e6:7a:cf:26:9a:f5:23:3f:3d:8a:0b:a0:f1:8c:c6:ab:82:
         92:dd:8c:ef:76:0c:68:ad:57:1a:7b:50:7e:1b:3c:ac:59:6b:
         d9:a2:2d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:43:44 2024 by rpki-client on console-ams.rpki-client.org