Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
File:                     sL0oE0WvbNVBVNTP908ZWjiP_8E.mft (raw, json)
Hash identifier:          wcyhCIh2rjD9bvgSJqxjrCSonFL6r3iRg3v6eiBqg4E=
Subject key identifier:   D2:1C:F8:4A:D0:C3:3E:6F:15:5B:52:85:07:0F:CF:7F:EA:1E:CD:D8
Authority key identifier: B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
Certificate issuer:       /CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Certificate serial:       019070F70D4A9E9B972300F7F90D8ABF47C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
Manifest number:          11F2
Signing time:             Tue 02 Jul 2024 01:02:37 +0000
Manifest this update:     Tue 02 Jul 2024 01:02:37 +0000
Manifest next update:     Wed 03 Jul 2024 01:02:37 +0000
Files and hashes:         1: i4h2fkkBo371b86xWL3gNVEI1v0.roa (hash: /CisSReDAOp4j9wh0Torz6Ob1dcjIePOkcdlxLKmfMc=)
                          2: sL0oE0WvbNVBVNTP908ZWjiP_8E.crl (hash: JDmJs3V7fKb2VDLj85BnZuBbiGMajr7b6mdj3h+DDMU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 22:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:70:f7:0d:4a:9e:9b:97:23:00:f7:f9:0d:8a:bf:47:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bd281345af6cd54154d4cff74f195a388fffc1
        Validity
            Not Before: Jul  2 01:02:37 2024 GMT
            Not After : Jul  3 01:02:37 2024 GMT
        Subject: CN=d21cf84ad0c33e6f155b5285070fcf7fea1ecdd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:25:9a:ae:10:35:f7:25:4a:3e:c8:5d:bc:a3:
                    a8:a1:34:5f:83:c5:02:41:6a:89:de:b5:09:40:3c:
                    29:c3:c6:c4:ec:5f:1a:5f:c1:a1:70:d8:77:24:4d:
                    91:28:b6:bf:f7:e0:86:71:0a:99:c2:79:16:97:4c:
                    5c:89:a8:01:db:58:b4:b0:98:9a:e7:ae:e9:56:44:
                    8d:37:97:83:46:bb:81:98:37:d7:a4:cd:56:a4:8d:
                    43:4f:17:23:7a:d5:6e:f6:f7:6e:56:db:4c:b7:17:
                    5f:8a:24:45:2d:25:74:bc:cf:7f:3a:61:18:21:59:
                    ac:e9:7a:5f:36:fb:0e:00:a5:02:76:af:56:28:e5:
                    b3:5e:da:15:f9:59:73:ae:52:c2:0b:79:4d:c7:9b:
                    e5:38:73:41:d7:ca:d0:1b:01:b3:a2:df:45:76:b0:
                    36:20:cf:48:0c:87:53:d3:9c:62:a8:36:00:22:af:
                    24:b1:ef:de:cb:e6:6e:e8:64:b0:64:78:36:64:c4:
                    df:9f:20:15:f5:ff:98:6f:eb:b7:a0:43:b2:72:5d:
                    5b:d9:63:ce:47:04:2b:32:ed:4c:0b:5f:72:29:87:
                    1a:a2:09:c2:1b:a6:cf:26:44:2a:ff:e4:6e:d7:a4:
                    da:eb:50:22:27:8c:d1:89:8e:cb:d6:69:15:c4:ef:
                    a5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1C:F8:4A:D0:C3:3E:6F:15:5B:52:85:07:0F:CF:7F:EA:1E:CD:D8
            X509v3 Authority Key Identifier:
                keyid:B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:7a:16:d9:65:73:5a:9e:56:f1:bd:e3:fe:8c:1f:08:30:77:
         9f:d3:f7:93:d8:da:d8:f6:36:58:f6:ed:ae:7d:08:73:b7:34:
         9b:9f:0d:bb:bf:2b:0f:10:92:c3:01:6e:85:d4:27:8b:1f:f1:
         e1:fc:76:13:c8:ab:51:b1:29:04:64:b7:21:04:16:e2:31:71:
         14:b3:0c:30:63:7c:64:79:c8:0b:df:58:a5:e4:f3:52:50:e5:
         66:01:4f:69:b5:a1:16:cb:00:e6:29:9e:2c:94:17:6c:4d:c2:
         c1:6e:03:50:6b:17:6a:71:fd:c4:05:70:ea:9d:b6:a6:65:b3:
         60:52:3a:e7:77:04:7e:c7:61:a9:8c:17:60:79:2a:65:c1:24:
         ec:1f:24:e8:96:60:cd:63:67:eb:25:38:27:1a:a9:12:e5:e9:
         8a:ac:17:67:1a:d9:bc:7d:de:e6:d4:5e:60:0e:50:5c:49:2b:
         ae:5f:11:cd:1b:9a:09:36:82:f3:ef:da:2b:e0:62:bc:8a:45:
         8b:47:a9:15:fd:26:4b:91:df:e3:22:44:2e:f0:ec:7c:bd:c4:
         1b:9a:09:3c:14:0b:f8:5e:e2:e3:ab:a4:d8:a3:1d:a0:2a:71:
         91:91:a1:11:e1:b7:4f:31:b3:94:53:25:5f:14:90:28:88:9f:
         66:74:2d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 06:02:58 2024 by rpki-client on console-fra.rpki-client.org