Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
File:                     G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json)
Hash identifier:          3Mo9XhDLWOuYBzYGT2dFfMg+88L73RvTI6MqcFIOQWM=
Subject key identifier:   B3:E3:9A:77:7F:D0:03:BF:18:CA:9B:6E:82:FF:5F:73:B0:B9:3E:07
Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Certificate issuer:       /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Certificate serial:       018F4FB624236A82326D20AB3E4D52DE4CE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
Manifest number:          115C
Signing time:             Mon 06 May 2024 21:01:27 +0000
Manifest this update:     Mon 06 May 2024 21:01:27 +0000
Manifest next update:     Tue 07 May 2024 21:01:27 +0000
Files and hashes:         1: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: PqQd5e1pmzAi6tn7mfn0acqw6XUTbzsMo4grrnSJfuw=)
                          2: vRDIBAGq8YZQcKsJNhXM8uwmA6s.roa (hash: 4s0Rts72OqTZrbaSS90/Xk0LeEEOM3FbIfgbDf36Dj0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:b6:24:23:6a:82:32:6d:20:ab:3e:4d:52:de:4c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
        Validity
            Not Before: May  6 21:01:27 2024 GMT
            Not After : May  7 21:01:27 2024 GMT
        Subject: CN=b3e39a777fd003bf18ca9b6e82ff5f73b0b93e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:43:38:41:1a:1d:93:f2:f3:51:13:a8:83:
                    34:79:07:b4:19:77:5d:e1:e3:b0:21:bd:77:f2:1f:
                    cf:91:fb:5a:5a:cd:fb:57:3f:e7:12:0d:0a:b4:be:
                    16:a0:ce:1f:8b:5c:ab:18:0d:bc:71:4b:6a:c3:19:
                    ec:62:8d:29:1f:38:83:ae:91:af:3f:dc:b3:b2:f4:
                    3b:23:c3:b5:f0:2e:33:f3:b6:fa:52:c6:b6:8c:6e:
                    ab:25:97:3f:ae:05:2e:f2:2e:48:b7:ed:ca:e8:eb:
                    39:3b:73:fb:94:94:6b:df:fd:8d:59:45:a1:62:8a:
                    4a:42:60:94:25:83:a0:f0:41:bd:3e:5f:fa:07:0a:
                    cb:a7:4d:16:1a:f7:c8:f0:1f:63:5a:96:30:1c:70:
                    bc:e3:8a:a5:1f:28:92:69:58:1d:f9:72:97:6c:6f:
                    71:4d:19:f5:45:53:99:16:f7:3e:fb:8e:aa:f0:fe:
                    70:8e:e0:ff:0c:b4:78:61:b2:76:c5:47:21:04:ca:
                    a5:6d:72:11:92:e3:61:16:0e:3c:7c:97:36:c7:28:
                    be:77:b4:38:b2:3a:7e:73:04:88:b2:d9:5b:27:01:
                    24:70:6c:49:ae:5a:89:1f:32:c3:4d:b1:8c:a8:53:
                    f9:e6:b3:53:5a:fc:b4:39:c9:ac:66:62:05:ee:1f:
                    f4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E3:9A:77:7F:D0:03:BF:18:CA:9B:6E:82:FF:5F:73:B0:B9:3E:07
            X509v3 Authority Key Identifier:
                keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:7f:04:1b:9a:16:d6:5c:fa:69:c7:bf:fd:52:40:7b:b0:5c:
         e7:5e:b0:f7:8c:62:60:82:c2:af:45:9c:80:9d:6e:89:08:8b:
         c2:e0:92:09:bd:38:54:b2:66:34:4a:31:a2:8c:4f:36:23:63:
         41:67:e9:8a:49:b5:54:22:9b:7b:62:02:f3:72:6a:2c:25:ea:
         be:e2:cb:fa:01:c3:ed:f0:82:b8:28:7b:b7:c7:14:42:80:84:
         ac:0d:fd:a7:c7:27:e0:4b:8c:92:e9:1d:a9:c1:e5:84:ea:1c:
         4d:e8:90:f2:52:70:52:8c:cf:93:12:1f:5f:22:6f:69:31:0a:
         76:78:7d:d7:2d:ce:40:70:c2:7d:c1:42:fb:79:a0:be:85:9a:
         5a:ca:40:d4:05:ef:cb:2a:51:27:48:a8:ff:66:df:82:64:f3:
         fc:c0:cb:63:b5:76:ce:ad:de:fc:66:9f:15:8f:2e:11:35:34:
         7e:79:35:d8:2d:ce:39:b2:3b:78:fa:8c:41:2e:6d:51:5d:e5:
         5a:d9:e2:84:59:d5:d4:2a:e0:aa:d8:13:ba:ac:45:71:6f:98:
         d5:f4:3b:86:b7:ac:c2:ed:84:80:d9:cb:ef:e3:3a:74:15:2d:
         10:d9:52:e5:bb:27:d1:45:62:b2:d4:4a:24:88:e5:34:db:6b:
         d9:67:a1:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9PtiQjaoIybSCrPk1S3kzgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZWY1YWExNGQzMTQwYzdjN2M0OTg4ZjE5ZGE5NDMxZWIx
YTQwZjEwHhcNMjQwNTA2MjEwMTI3WhcNMjQwNTA3MjEwMTI3WjAzMTEwLwYDVQQD
EyhiM2UzOWE3NzdmZDAwM2JmMThjYTliNmU4MmZmNWY3M2IwYjkzZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYVDOEEaHZPy81ETqIM0eQe0GXdd
4eOwIb138h/PkftaWs37Vz/nEg0KtL4WoM4fi1yrGA28cUtqwxnsYo0pHziDrpGv
P9yzsvQ7I8O18C4z87b6Usa2jG6rJZc/rgUu8i5It+3K6Os5O3P7lJRr3/2NWUWh
YopKQmCUJYOg8EG9Pl/6BwrLp00WGvfI8B9jWpYwHHC844qlHyiSaVgd+XKXbG9x
TRn1RVOZFvc++46q8P5wjuD/DLR4YbJ2xUchBMqlbXIRkuNhFg48fJc2xyi+d7Q4
sjp+cwSIstlbJwEkcGxJrlqJHzLDTbGMqFP55rNTWvy0OcmsZmIF7h/0nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPjmnd/0AO/GMqbboL/X3OwuT4HMB8GA1UdIwQY
MBaAFBvvWqFNMUDHx8SYjxnalDHrGkDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81ZDYxNjctZjAyYi00NGRiLWI1NjUt
MGU0MzgyMzEwY2E1LzEvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC81ZDYxNjctZjAyYi00NGRiLWI1NjUtMGU0MzgyMzEwY2E1
LzEvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQH8EG5oW
1lz6ace//VJAe7Bc516w94xiYILCr0WcgJ1uiQiLwuCSCb04VLJmNEoxooxPNiNj
QWfpikm1VCKbe2IC83JqLCXqvuLL+gHD7fCCuCh7t8cUQoCErA39p8cn4EuMkukd
qcHlhOocTeiQ8lJwUozPkxIfXyJvaTEKdnh91y3OQHDCfcFC+3mgvoWaWspA1AXv
yypRJ0io/2bfgmTz/MDLY7V2zq3e/GafFY8uETU0fnk12C3OObI7ePqMQS5tUV3l
WtnihFnV1CrgqtgTuqxFcW+Y1fQ7hreswu2EgNnL7+M6dBUtENlS5bsn0UVistRK
JIjlNNtr2Weh1w==
-----END CERTIFICATE-----
Generated at Tue May 7 00:51:15 2024 by rpki-client on console-fra.rpki-client.org