Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
File:                     Gsiv14efVVs88EP38zpmDV5htdw.mft (raw, json)
Hash identifier:          XDECkQqh13yUeHMO5cGfrD3cxwLBzU5po1RFTheMD/g=
Subject key identifier:   1B:C3:AA:E8:90:60:0F:2E:2E:FF:52:98:0A:68:8F:A9:63:DA:97:11
Authority key identifier: 1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC
Certificate issuer:       /CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
Certificate serial:       018F22DD1CB9978514543669562912E4D31E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
Manifest number:          0470
Signing time:             Sun 28 Apr 2024 04:01:07 +0000
Manifest this update:     Sun 28 Apr 2024 04:01:07 +0000
Manifest next update:     Mon 29 Apr 2024 04:01:07 +0000
Files and hashes:         1: Gsiv14efVVs88EP38zpmDV5htdw.crl (hash: T7vlpU6Mpnd3iz9iI1mieP87oe3k+x6k8PElltVJN0g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:dd:1c:b9:97:85:14:54:36:69:56:29:12:e4:d3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
        Validity
            Not Before: Apr 28 04:01:07 2024 GMT
            Not After : Apr 29 04:01:07 2024 GMT
        Subject: CN=1bc3aae890600f2e2eff52980a688fa963da9711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:31:a0:39:a0:79:99:59:ee:eb:fd:06:bf:e5:
                    24:c9:96:4a:7b:f7:af:87:01:e1:0e:d7:81:68:d0:
                    37:fe:d2:49:92:31:30:d3:d4:ed:e8:1d:eb:d4:cf:
                    9b:9a:88:ee:e5:e6:99:73:b9:06:86:ee:37:7b:bc:
                    ae:57:c7:87:6b:09:e4:17:48:5e:ab:b7:32:25:66:
                    33:c5:dc:70:cb:90:fe:b5:81:30:3f:4b:87:d9:45:
                    4c:fa:5f:68:0f:4b:87:f0:46:1b:b7:69:13:54:ab:
                    57:2d:c6:f1:b1:8b:95:83:ec:f6:57:43:b0:73:b5:
                    29:da:0f:18:be:29:71:b4:f8:2c:2f:fe:a6:68:b4:
                    9b:2c:e0:ed:5b:d0:a8:38:5d:63:1e:17:d5:fe:47:
                    dc:e0:30:47:26:a5:88:6e:6b:96:7c:ca:be:5a:52:
                    30:fd:ca:8d:af:99:c1:1a:d2:47:77:dd:3e:9f:e6:
                    07:a0:68:39:0d:79:13:d0:c1:a1:78:df:73:5c:05:
                    49:31:33:c4:d5:88:40:6d:48:ab:41:7e:2e:d9:d8:
                    f8:87:13:23:5a:2c:d7:8a:ad:3b:b5:44:84:18:1e:
                    85:3c:cd:14:2d:48:7d:18:1e:cf:01:00:89:2d:59:
                    5e:23:e5:2c:fa:73:07:7b:2c:d7:dd:f6:c7:c5:5d:
                    85:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C3:AA:E8:90:60:0F:2E:2E:FF:52:98:0A:68:8F:A9:63:DA:97:11
            X509v3 Authority Key Identifier:
                keyid:1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:39:78:54:2f:42:a6:4c:83:d7:c5:06:6b:db:9c:a0:43:c1:
         02:33:c5:03:74:67:69:e7:85:3b:b0:1b:25:99:11:5d:5b:16:
         83:7e:72:7c:9f:bf:97:fb:26:78:9e:6d:18:70:34:00:ad:3c:
         4c:fc:3d:76:f8:4f:05:e6:7d:89:9f:06:2b:2b:31:32:fa:47:
         46:7b:42:f1:3f:78:57:5f:eb:1b:f9:43:dd:d7:2d:46:90:08:
         83:53:9c:fe:8c:4d:6a:04:84:79:55:72:0c:9c:8c:9e:12:ec:
         49:27:0f:65:59:b8:43:e0:61:39:8d:0d:5a:aa:6e:64:2a:35:
         1e:32:c7:5f:5e:20:29:10:a6:3c:5d:78:0d:3c:25:cb:69:6b:
         34:ff:2e:a5:31:f8:c0:00:69:6f:9d:3f:19:b9:69:fc:63:85:
         5a:02:33:c8:98:6e:82:c0:f7:10:4a:61:b2:d6:59:a0:a5:0c:
         c2:1e:48:0b:a6:2d:c6:65:79:e7:1f:4f:d4:a1:88:b8:fd:0e:
         9e:1e:b3:cf:51:49:3d:0b:4e:12:b4:7c:13:7e:f0:8a:69:e5:
         0b:3b:a7:32:97:21:ca:47:d4:53:41:92:01:eb:94:5d:13:00:
         ca:df:f7:76:f8:77:10:4b:85:58:8e:87:d5:6e:a2:41:b4:5e:
         7f:d4:d0:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8i3Ry5l4UUVDZpVikS5NMeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYzhhZmQ3ODc5ZjU1NWIzY2YwNDNmN2YzM2E2NjBkNWU2
MWI1ZGMwHhcNMjQwNDI4MDQwMTA3WhcNMjQwNDI5MDQwMTA3WjAzMTEwLwYDVQQD
EygxYmMzYWFlODkwNjAwZjJlMmVmZjUyOTgwYTY4OGZhOTYzZGE5NzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDGgOaB5mVnu6/0Gv+UkyZZKe/ev
hwHhDteBaNA3/tJJkjEw09Tt6B3r1M+bmoju5eaZc7kGhu43e7yuV8eHawnkF0he
q7cyJWYzxdxwy5D+tYEwP0uH2UVM+l9oD0uH8EYbt2kTVKtXLcbxsYuVg+z2V0Ow
c7Up2g8YvilxtPgsL/6maLSbLODtW9CoOF1jHhfV/kfc4DBHJqWIbmuWfMq+WlIw
/cqNr5nBGtJHd90+n+YHoGg5DXkT0MGheN9zXAVJMTPE1YhAbUirQX4u2dj4hxMj
WizXiq07tUSEGB6FPM0ULUh9GB7PAQCJLVleI+Us+nMHeyzX3fbHxV2FyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvDquiQYA8uLv9SmApoj6lj2pcRMB8GA1UdIwQY
MBaAFBrIr9eHn1VbPPBD9/M6Zg1eYbXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NpdjE0ZWZWVnM4OEVQMzh6cG1EVjVodGR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS81NzY1Y2QtY2E5OC00NWNmLWE0Y2Qt
Y2IxMjgzNzM1NDg1LzEvR3NpdjE0ZWZWVnM4OEVQMzh6cG1EVjVodGR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS81NzY1Y2QtY2E5OC00NWNmLWE0Y2QtY2IxMjgzNzM1NDg1
LzEvR3NpdjE0ZWZWVnM4OEVQMzh6cG1EVjVodGR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDl4VC9C
pkyD18UGa9ucoEPBAjPFA3RnaeeFO7AbJZkRXVsWg35yfJ+/l/smeJ5tGHA0AK08
TPw9dvhPBeZ9iZ8GKysxMvpHRntC8T94V1/rG/lD3dctRpAIg1Oc/oxNagSEeVVy
DJyMnhLsSScPZVm4Q+BhOY0NWqpuZCo1HjLHX14gKRCmPF14DTwly2lrNP8upTH4
wABpb50/Gblp/GOFWgIzyJhugsD3EEphstZZoKUMwh5IC6YtxmV55x9P1KGIuP0O
nh6zz1FJPQtOErR8E37wimnlCzunMpchykfUU0GSAeuUXRMAyt/3dvh3EEuFWI6H
1W6iQbRef9TQUA==
-----END CERTIFICATE-----
Generated at Sun Apr 28 05:51:58 2024 by rpki-client on console-ams.rpki-client.org