Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
File:                     GzKDA753IAE7cIOOSOupO0IDh90.mft (raw, json)
Hash identifier:          IhMmGes4Mploso5Uv0KWqW4Jv1ViJ/47oGvw1yL6ch8=
Subject key identifier:   52:C5:B1:AB:8F:84:F9:B1:4E:D2:25:2E:AD:0C:CB:F1:75:2C:65:CE
Authority key identifier: 1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD
Certificate issuer:       /CN=1b328303be7720013b70838e48eba93b420387dd
Certificate serial:       019355AD741E81004720A32B86C1B2A08D42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
Manifest number:          031B
Signing time:             Fri 22 Nov 2024 21:00:51 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:51 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:51 +0000
Files and hashes:         1: GzKDA753IAE7cIOOSOupO0IDh90.crl (hash: RXxakHWfeAqdylU0vaTu2NbLdGq7rcz7VXg1RI50s1E=)
                          2: r4oivauDHyhp3b5JRX56Qw6FR5k.roa (hash: tzb+g0KTKYZzOBz20G9iJCJV9MqpOWcULAa0LBfriKc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:74:1e:81:00:47:20:a3:2b:86:c1:b2:a0:8d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b328303be7720013b70838e48eba93b420387dd
        Validity
            Not Before: Nov 22 21:00:51 2024 GMT
            Not After : Nov 23 21:00:51 2024 GMT
        Subject: CN=52c5b1ab8f84f9b14ed2252ead0ccbf1752c65ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:34:a3:cc:cc:44:b0:b7:4a:5a:e6:ca:93:
                    1b:58:17:f2:de:ba:65:d5:dc:c8:8c:4b:f4:2b:e4:
                    db:1f:08:24:83:cf:d5:aa:99:f7:83:87:86:48:c3:
                    4d:ce:7e:14:ca:dc:79:a5:66:cb:d3:90:28:0e:1d:
                    45:35:39:4e:79:80:2f:0b:c2:a0:45:08:be:f5:e5:
                    7c:e9:64:79:7a:53:dc:b0:65:76:6a:91:e0:82:62:
                    f6:3e:56:03:97:ea:f7:af:95:4b:5a:76:22:12:7b:
                    99:06:51:9d:7e:d9:b5:50:b4:7e:5e:b9:78:ad:07:
                    41:fe:95:36:fc:93:60:2b:3b:a5:f1:22:7b:f9:48:
                    bd:3c:0f:be:30:d6:55:98:dc:6e:f8:ee:b7:b4:78:
                    0c:7a:d0:6b:a8:a9:54:f0:cf:b4:95:54:f7:d6:61:
                    dd:35:ad:d6:0e:b9:67:13:a8:17:08:50:40:8f:f5:
                    8e:a4:6b:e3:97:8f:fb:df:10:46:88:a8:ec:ed:bf:
                    73:60:81:b8:31:e9:4e:5f:ef:65:d7:f0:ff:34:6a:
                    21:51:97:9d:36:67:33:41:2d:c6:d8:a8:ca:ef:81:
                    25:23:92:74:ff:7a:8e:3d:30:8e:5b:04:16:20:7b:
                    08:6c:6a:32:dc:24:75:0a:4a:f8:82:79:33:3b:5d:
                    87:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C5:B1:AB:8F:84:F9:B1:4E:D2:25:2E:AD:0C:CB:F1:75:2C:65:CE
            X509v3 Authority Key Identifier:
                keyid:1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:50:38:24:37:d2:e7:d4:37:37:bb:a0:97:d4:86:85:97:21:
         ce:67:3c:93:d4:3d:0f:09:b7:b9:65:a8:70:ac:40:4b:ab:16:
         0f:db:ec:2e:66:a7:d0:a9:32:74:af:7d:a1:60:b0:c7:e2:16:
         b0:07:df:15:d2:bc:75:69:33:7a:05:6e:e0:21:58:6c:46:9a:
         32:c8:07:d8:7e:df:a9:f9:e6:74:ac:b8:94:22:25:be:29:15:
         65:29:48:89:91:4b:90:03:8b:cb:f5:ce:6d:8f:66:b2:1d:a6:
         49:1c:c4:fc:d8:27:55:f3:66:87:0e:29:cb:f5:32:d9:bb:46:
         cd:a2:48:04:c5:47:5d:c6:d9:cf:24:76:0b:5b:30:f8:5b:81:
         93:26:53:c1:1d:1d:e2:1f:80:57:a2:6f:2b:04:c7:79:ee:c6:
         18:e1:bd:8c:6d:98:c1:37:e3:f2:0c:b8:1d:38:ba:44:d6:4b:
         0b:ab:90:18:3b:93:66:76:40:7f:da:52:90:f4:36:24:e9:89:
         87:21:8d:ee:94:f3:03:dc:72:88:ee:22:f8:90:37:59:2a:16:
         93:60:3a:12:be:6c:85:99:06:37:ee:09:69:46:e9:ac:fd:c5:
         19:66:4c:fb:8f:52:7e:08:82:05:2d:36:ef:3c:b1:f9:86:e4:
         bd:b1:35:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:43:28 2024 by rpki-client on console-fra.rpki-client.org