Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/38e692-7616-4b8c-b05a-0a23d4ea584c/1/Gd_p_43rqZYxJbO08VGD8FTVmPQ.mft
File:                     Gd_p_43rqZYxJbO08VGD8FTVmPQ.mft (raw, json)
Hash identifier:          wy5HNnjWxFElGZfebZQfeuOR7hib6ZjKpFXBfE2hPKA=
Subject key identifier:   1C:16:F1:99:36:86:DE:F7:18:8F:18:F3:23:D9:E1:8A:CB:49:36:C5
Authority key identifier: 19:DF:E9:FF:8D:EB:A9:96:31:25:B3:B4:F1:51:83:F0:54:D5:98:F4
Certificate issuer:       /CN=19dfe9ff8deba9963125b3b4f15183f054d598f4
Certificate serial:       019037AB286021A108F46804A4CCD6603E2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gd_p_43rqZYxJbO08VGD8FTVmPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/38e692-7616-4b8c-b05a-0a23d4ea584c/1/Gd_p_43rqZYxJbO08VGD8FTVmPQ.mft
Manifest number:          01FF
Signing time:             Thu 20 Jun 2024 22:01:22 +0000
Manifest this update:     Thu 20 Jun 2024 22:01:22 +0000
Manifest next update:     Fri 21 Jun 2024 22:01:22 +0000
Files and hashes:         1: Gd_p_43rqZYxJbO08VGD8FTVmPQ.crl (hash: +cL/mI2p1Axf74wzPKbOHSyuLs71k6x3uOP261Xipic=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/38e692-7616-4b8c-b05a-0a23d4ea584c/1/Gd_p_43rqZYxJbO08VGD8FTVmPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/38e692-7616-4b8c-b05a-0a23d4ea584c/1/Gd_p_43rqZYxJbO08VGD8FTVmPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gd_p_43rqZYxJbO08VGD8FTVmPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 22:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:ab:28:60:21:a1:08:f4:68:04:a4:cc:d6:60:3e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19dfe9ff8deba9963125b3b4f15183f054d598f4
        Validity
            Not Before: Jun 20 22:01:22 2024 GMT
            Not After : Jun 21 22:01:22 2024 GMT
        Subject: CN=1c16f1993686def7188f18f323d9e18acb4936c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:ba:19:73:b0:68:7c:79:8b:fc:32:4c:2f:
                    26:af:20:ea:fa:61:c1:88:5e:03:46:2a:1f:0f:04:
                    bb:6a:74:84:59:8c:b6:74:e1:9d:d1:c9:07:ac:b1:
                    97:a5:9a:a0:68:14:56:9b:36:55:2e:13:43:b0:61:
                    6b:09:0b:63:68:45:af:5e:60:96:82:9d:54:e1:26:
                    d8:a9:b0:06:65:1d:fe:42:fc:d4:b5:59:5f:ff:78:
                    95:04:09:4f:ad:22:5a:cc:81:e9:56:9c:27:a0:3c:
                    36:54:5a:71:a1:3b:b4:e5:6d:9f:08:47:53:14:44:
                    0f:10:fa:e6:4e:e6:05:f2:cf:37:f0:f1:c0:5e:63:
                    97:99:50:cb:39:b4:af:68:84:e6:1c:36:66:80:7d:
                    c8:ab:32:29:72:f6:f7:b5:2b:44:61:b3:f6:83:3a:
                    51:57:53:81:99:34:c0:ad:c8:bf:42:e4:f3:6d:bb:
                    fb:a3:a0:ac:44:81:03:6e:02:80:e2:89:57:6f:02:
                    23:56:a5:71:b9:73:d9:03:3f:40:7a:46:f5:c3:9d:
                    15:e9:b0:1d:38:27:01:35:b3:84:29:c7:56:f2:de:
                    56:95:0b:8e:4d:18:40:b6:92:0d:da:57:2c:1b:87:
                    1b:16:a6:c4:77:5a:45:46:54:3e:9c:bb:62:29:ee:
                    6f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:16:F1:99:36:86:DE:F7:18:8F:18:F3:23:D9:E1:8A:CB:49:36:C5
            X509v3 Authority Key Identifier:
                keyid:19:DF:E9:FF:8D:EB:A9:96:31:25:B3:B4:F1:51:83:F0:54:D5:98:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gd_p_43rqZYxJbO08VGD8FTVmPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/38e692-7616-4b8c-b05a-0a23d4ea584c/1/Gd_p_43rqZYxJbO08VGD8FTVmPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/38e692-7616-4b8c-b05a-0a23d4ea584c/1/Gd_p_43rqZYxJbO08VGD8FTVmPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:fc:bb:86:53:ee:a8:21:c4:47:71:3e:12:94:86:8e:74:dc:
         32:1e:f5:7f:11:27:89:b8:95:54:37:1d:7e:ff:22:79:80:a7:
         18:4b:91:d1:c6:c7:fb:da:bf:fb:34:38:19:84:56:9f:db:c4:
         d3:e6:44:4b:9b:73:3b:bd:5d:8e:5f:68:4f:25:dc:05:48:53:
         ef:45:c9:a9:a4:09:58:e6:3e:49:bd:88:d3:19:b5:09:fd:12:
         29:6a:37:5f:f3:bc:48:89:e9:0b:24:00:5b:27:02:05:b0:a3:
         29:93:68:ba:24:dd:92:e8:5e:58:d0:b7:74:18:3e:3e:8a:25:
         1c:d2:f1:52:c2:f5:0b:4b:73:5a:05:04:21:df:f3:90:12:1c:
         0e:61:7c:43:9e:e3:9e:53:fa:2f:7a:78:5a:b0:9c:ba:cb:6b:
         69:fe:e0:08:49:01:8e:04:b1:45:3a:ec:9a:5b:8f:5e:f3:cc:
         6e:ff:52:66:bd:0f:a4:32:d8:04:80:2f:9d:e8:0e:be:bf:02:
         4f:5b:57:30:3f:e8:74:56:68:90:9a:3a:96:b5:0f:56:52:64:
         2e:fe:8b:81:16:e5:c6:e5:8d:f3:77:99:0d:e0:8c:73:35:e9:
         a0:65:76:3b:9b:b2:0b:e6:20:32:29:96:3c:f1:88:86:c1:c0:
         4d:30:d3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 08:22:57 2024 by rpki-client on console.sobornost.net