Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
File:                     GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft (raw, json)
Hash identifier:          54Nvb9/MnTHxGUx3PoNwm41MxCzF39Iw4u9zpCPCD6I=
Subject key identifier:   7E:91:C0:C4:29:C0:90:28:B9:A2:DF:EA:91:9E:E8:58:99:8A:B0:42
Authority key identifier: 19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F
Certificate issuer:       /CN=19337ca56de7c3b977875369ecde53852515746f
Certificate serial:       01938BF6D253801EA51BC5830AD5BCB11ED6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
Manifest number:          0EDC
Signing time:             Tue 03 Dec 2024 10:00:28 +0000
Manifest this update:     Tue 03 Dec 2024 10:00:28 +0000
Manifest next update:     Wed 04 Dec 2024 10:00:28 +0000
Files and hashes:         1: GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl (hash: Tb9HVhi/v6J0aFs+BUBFmmjQfBPSOzEKIOmgk5CgNjk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:f6:d2:53:80:1e:a5:1b:c5:83:0a:d5:bc:b1:1e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19337ca56de7c3b977875369ecde53852515746f
        Validity
            Not Before: Dec  3 10:00:28 2024 GMT
            Not After : Dec  4 10:00:28 2024 GMT
        Subject: CN=7e91c0c429c09028b9a2dfea919ee858998ab042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:62:d1:5e:b0:25:60:ee:a4:97:32:83:46:49:
                    79:de:19:16:7a:10:91:61:41:ac:cd:d7:0c:a0:28:
                    2e:58:4a:74:be:bc:d2:52:a1:88:b2:00:18:28:4f:
                    e9:36:8d:dc:80:14:68:9a:03:ca:17:85:0b:1d:35:
                    68:1a:0c:bb:fd:7d:05:cf:32:0d:83:8c:c6:3d:8c:
                    66:c4:e1:0b:5a:00:95:51:23:35:45:34:ae:da:5c:
                    06:57:ba:6d:0c:55:92:fa:a7:80:5e:70:d4:8c:8c:
                    20:0a:59:a7:7c:c9:4b:80:fc:6f:f8:76:64:a9:71:
                    0c:16:47:07:7c:77:a9:26:79:05:fe:4e:42:21:dc:
                    79:58:94:70:94:1d:6b:ac:f3:1f:1b:ac:0c:a8:ef:
                    aa:c0:fb:c0:e5:cf:5b:c6:7d:3b:fe:3e:8c:74:59:
                    1e:55:b1:1e:a9:1e:b9:57:7f:55:f1:e7:c7:a9:bf:
                    bd:b7:e3:68:3e:9d:32:3a:bb:88:9e:1c:3f:bc:87:
                    ac:8e:d6:c1:5d:bf:2f:86:5c:8d:b0:c2:73:78:7b:
                    4d:10:fa:3e:78:04:13:73:d1:00:e5:8d:6b:db:37:
                    cd:b6:46:26:cf:59:f1:eb:37:fa:d5:ee:11:94:45:
                    47:56:95:7f:a6:65:c3:59:6a:61:cb:c4:58:43:a2:
                    1a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:91:C0:C4:29:C0:90:28:B9:A2:DF:EA:91:9E:E8:58:99:8A:B0:42
            X509v3 Authority Key Identifier:
                keyid:19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b9:e3:e9:27:82:27:1e:c2:ee:99:ea:89:44:a3:7f:2c:1a:
         9c:56:cd:81:5b:28:b8:cb:00:92:e1:c3:c4:bf:5e:1d:59:cb:
         bb:6c:06:77:44:58:27:08:90:81:67:32:0c:12:7c:80:1b:21:
         ea:dd:be:ff:42:ea:3a:5b:09:6d:27:97:f3:ba:3b:a4:6d:94:
         da:8a:4e:43:53:c4:64:af:d2:f7:59:77:bc:cf:47:43:8a:74:
         a6:69:b0:c1:b2:47:c2:9d:e8:9b:15:ca:9d:ce:f8:68:ea:86:
         ec:8c:01:7e:7a:0a:2f:1c:b0:15:1d:cd:19:d3:fe:4e:b6:85:
         29:5d:61:da:0e:10:71:89:88:67:51:ae:4b:17:3d:27:10:80:
         28:5f:47:39:37:7e:f6:70:8c:0f:c5:dd:51:8b:b1:70:ba:f4:
         d9:b9:8d:dd:c1:af:94:5b:48:59:f1:6a:51:73:31:d3:29:ea:
         0d:7c:c6:41:98:ac:49:ba:74:6d:d9:ad:bc:12:31:c6:f1:e5:
         64:f7:68:72:a0:49:de:61:a0:88:cc:54:3e:14:d3:4c:bd:48:
         af:43:1a:eb:40:78:77:33:73:5c:25:dd:ef:8e:1d:ba:e1:1c:
         9e:14:92:68:e6:8b:4b:c9:5f:da:0e:e2:4d:44:67:b5:f3:db:
         4f:04:f1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 18:31:14 2024 by rpki-client on console-fra.rpki-client.org