Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
File:                     GE__PPkA52quDSzS533-riTF0kw.mft (raw, json)
Hash identifier:          CkCX35pfCgcBiHo65DMVHpc4/3zcE8w84p6W369f8jo=
Subject key identifier:   E4:32:94:40:DD:85:4C:26:7B:5D:E0:84:14:7E:68:6D:D6:93:E0:1B
Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
Certificate issuer:       /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Certificate serial:       018F4C10342B267F06BFE248D3282C4BAA8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
Manifest number:          07C6
Signing time:             Mon 06 May 2024 04:01:21 +0000
Manifest this update:     Mon 06 May 2024 04:01:21 +0000
Manifest next update:     Tue 07 May 2024 04:01:21 +0000
Files and hashes:         1: GE__PPkA52quDSzS533-riTF0kw.crl (hash: eZanbT0aXrD4mexUfazB42J6sVhp+z/H0XKKuI+pA3c=)
                          2: nBLc5V6uUocnYVAJzpl5ZsTAKpM.roa (hash: dKkMM4Qt7g8NeTJpLTHJn4a6Bht7gWPq2igMiiHo1VQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:10:34:2b:26:7f:06:bf:e2:48:d3:28:2c:4b:aa:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
        Validity
            Not Before: May  6 04:01:21 2024 GMT
            Not After : May  7 04:01:21 2024 GMT
        Subject: CN=e4329440dd854c267b5de084147e686dd693e01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c6:fa:87:a6:b2:cd:bf:53:bc:77:ce:a9:6b:
                    5d:e0:c0:e1:d5:1a:fa:a5:ce:95:35:09:0c:cb:23:
                    b6:94:27:c5:92:fb:98:fa:b8:be:1a:4f:03:b3:1f:
                    8e:ed:1d:12:79:ee:3c:e0:6f:0e:62:a0:23:c5:b5:
                    22:6d:22:0f:ac:d4:ae:17:e8:d4:34:88:6b:ec:be:
                    8a:c3:bc:01:14:a4:50:d8:ec:de:02:4f:8d:03:a2:
                    7a:85:25:0c:d3:63:bf:b3:d9:e3:03:b2:be:13:de:
                    ed:59:cd:05:b3:92:73:3b:85:0b:eb:30:0a:cb:85:
                    30:cb:8a:0d:fb:b0:be:60:94:52:93:cf:4a:b5:3e:
                    d1:78:b7:9c:3b:82:97:fd:08:b4:2b:81:e9:d6:ff:
                    4a:33:18:f7:41:ed:52:e5:91:a8:dd:c1:cb:c5:28:
                    89:d8:b0:a6:ea:bf:b5:2e:d4:f9:9e:3b:b2:a4:06:
                    d2:5c:cb:b7:06:88:59:72:70:b6:a6:df:fc:b2:65:
                    8a:30:dc:c1:fa:e6:c4:80:76:8b:da:df:81:be:57:
                    4f:3a:07:0f:13:55:26:51:e5:04:25:bb:b1:83:ec:
                    53:92:41:5e:b5:37:7d:3e:61:08:08:da:74:13:7a:
                    46:31:21:2d:a3:87:21:c6:cb:d2:91:10:17:5b:62:
                    e7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:32:94:40:DD:85:4C:26:7B:5D:E0:84:14:7E:68:6D:D6:93:E0:1B
            X509v3 Authority Key Identifier:
                keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f6:64:f9:46:72:0f:4b:61:30:c5:ec:51:6a:8d:7d:f6:09:
         37:65:74:48:69:dd:31:5a:15:23:5c:01:f5:83:2d:56:f8:53:
         2c:df:b4:20:e9:ef:f8:d8:11:73:00:c8:76:0f:28:c0:93:a2:
         39:25:d6:79:5a:ad:9d:cc:20:94:2f:f6:b0:05:1f:b9:99:de:
         21:37:54:dc:4e:f3:7c:66:ec:37:3b:55:3d:13:32:eb:57:d2:
         c8:7f:2e:01:16:84:95:f2:9c:b1:77:7c:8c:74:9c:85:78:3c:
         6a:88:b1:4f:bf:20:46:f3:fb:4a:ff:ba:a5:9b:53:1e:ae:2d:
         ba:bb:7a:e5:1d:67:6d:12:8e:5f:3c:fa:7b:42:bc:0a:4b:eb:
         2c:0b:dd:19:ca:51:ac:77:50:3b:13:85:41:c1:96:fe:53:c0:
         85:2a:58:0b:9e:0c:f7:68:12:ac:08:4c:27:e5:fe:c6:e3:4c:
         e9:44:e4:c7:4d:71:14:aa:11:49:e0:ff:00:b8:81:53:3f:ea:
         4f:1e:fb:92:26:5b:b7:49:71:02:ba:90:3e:cd:bb:94:dc:f2:
         31:4d:88:3c:6f:34:7f:c5:6f:77:e1:57:ef:9e:1c:fc:cd:a8:
         55:85:c2:1b:3b:44:aa:41:03:c9:6f:21:16:06:24:cc:7d:99:
         45:f2:05:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9MEDQrJn8Gv+JI0ygsS6qNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NGZmZjNjZjkwMGU3NmFhZTBkMmNkMmU3N2RmZWFlMjRj
NWQyNGMwHhcNMjQwNTA2MDQwMTIxWhcNMjQwNTA3MDQwMTIxWjAzMTEwLwYDVQQD
EyhlNDMyOTQ0MGRkODU0YzI2N2I1ZGUwODQxNDdlNjg2ZGQ2OTNlMDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Mb6h6ayzb9TvHfOqWtd4MDh1Rr6
pc6VNQkMyyO2lCfFkvuY+ri+Gk8Dsx+O7R0See484G8OYqAjxbUibSIPrNSuF+jU
NIhr7L6Kw7wBFKRQ2OzeAk+NA6J6hSUM02O/s9njA7K+E97tWc0Fs5JzO4UL6zAK
y4Uwy4oN+7C+YJRSk89KtT7ReLecO4KX/Qi0K4Hp1v9KMxj3Qe1S5ZGo3cHLxSiJ
2LCm6r+1LtT5njuypAbSXMu3BohZcnC2pt/8smWKMNzB+ubEgHaL2t+BvldPOgcP
E1UmUeUEJbuxg+xTkkFetTd9PmEICNp0E3pGMSEto4chxsvSkRAXW2Ln8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQylEDdhUwme13ghBR+aG3Wk+AbMB8GA1UdIwQY
MBaAFBhP/zz5AOdqrg0s0ud9/q4kxdJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0VfX1BQa0E1MnF1RFN6UzUzMy1yaVRGMGt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hOTY2NmUtZmNmMC00ZmI2LWE0NTIt
MzhiMzkyYzZlMWJmLzEvR0VfX1BQa0E1MnF1RFN6UzUzMy1yaVRGMGt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hOTY2NmUtZmNmMC00ZmI2LWE0NTItMzhiMzkyYzZlMWJm
LzEvR0VfX1BQa0E1MnF1RFN6UzUzMy1yaVRGMGt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvZk+UZy
D0thMMXsUWqNffYJN2V0SGndMVoVI1wB9YMtVvhTLN+0IOnv+NgRcwDIdg8owJOi
OSXWeVqtncwglC/2sAUfuZneITdU3E7zfGbsNztVPRMy61fSyH8uARaElfKcsXd8
jHSchXg8aoixT78gRvP7Sv+6pZtTHq4turt65R1nbRKOXzz6e0K8CkvrLAvdGcpR
rHdQOxOFQcGW/lPAhSpYC54M92gSrAhMJ+X+xuNM6UTkx01xFKoRSeD/ALiBUz/q
Tx77kiZbt0lxArqQPs27lNzyMU2IPG80f8Vvd+FX754c/M2oVYXCGztEqkEDyW8h
FgYkzH2ZRfIFvg==
-----END CERTIFICATE-----
Generated at Mon May 6 09:15:27 2024 by rpki-client on console-ams.rpki-client.org