Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
File:                     0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json)
Hash identifier:          urtJ+kumbDkxoTJOItoFiu9bYj7ZnN8CQ8LPTc6ya7w=
Subject key identifier:   4A:43:A2:5B:4D:6C:9B:25:9A:86:43:A7:F1:7F:24:54:1F:FA:81:8E
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Certificate issuer:       /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial:       018FB67E0423A36C3B6FDE40E478983EEB58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
Manifest number:          080F
Signing time:             Sun 26 May 2024 20:01:02 +0000
Manifest this update:     Sun 26 May 2024 20:01:02 +0000
Manifest next update:     Mon 27 May 2024 20:01:02 +0000
Files and hashes:         1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: cka2pC/KTHEPX11C16CdX6qmHmQHXGJp0GyACV0Hxvg=)
                          2: Bb-UKNOnYn4MC6yhjm0JWEjUZ7c.roa (hash: 8Ad1iWG5xsVM4XDAHCZc1oGqihzHUaQCQxye39KV8ew=)
                          3: FnfsUrj9jCD0wazsa-jPrFT5Obc.roa (hash: gKc045wynWQwTcJeMAUKrQB0fRtUIE8NZ/2+TWh7mpw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b6:7e:04:23:a3:6c:3b:6f:de:40:e4:78:98:3e:eb:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
        Validity
            Not Before: May 26 20:01:02 2024 GMT
            Not After : May 27 20:01:02 2024 GMT
        Subject: CN=4a43a25b4d6c9b259a8643a7f17f24541ffa818e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1a:3e:52:6a:45:23:84:74:8f:b1:a6:9f:34:
                    af:3c:4a:77:9f:29:f1:5c:25:e5:0f:fd:2b:af:1c:
                    80:04:82:0f:72:30:14:9b:17:2d:e3:3f:d1:6f:dc:
                    9e:f5:2e:27:2e:ee:89:51:60:b8:41:fb:b0:55:db:
                    f1:0e:c8:ca:5d:4f:9a:75:a2:77:78:c2:17:0a:40:
                    1f:48:1a:dd:8a:ee:7c:1d:09:c6:fa:6a:be:2a:27:
                    ea:11:d7:97:a1:9a:79:0f:04:f5:94:71:58:1e:ea:
                    29:89:f2:60:6f:5e:cf:e5:10:39:87:bf:36:f3:d2:
                    be:0e:17:6c:fd:c2:8a:60:13:37:07:e4:8d:f5:09:
                    80:e7:ff:da:cb:b9:08:fc:76:13:8b:a7:ff:d5:1d:
                    5f:83:3d:92:06:97:fa:6e:17:41:5e:b5:34:b5:f3:
                    c9:63:43:ac:af:08:a2:f5:6d:eb:40:0c:55:42:62:
                    fb:3b:1f:fe:ce:60:41:18:51:67:a4:36:b7:94:7a:
                    68:2e:36:5b:dc:34:c2:f5:b3:aa:a6:a7:8f:77:73:
                    d3:c9:1e:ce:14:bd:43:48:d5:b5:c8:78:30:43:13:
                    b0:87:2d:fc:eb:91:ae:57:78:35:45:a3:d7:ef:e6:
                    68:6b:24:af:14:87:df:5c:cf:3e:bc:64:0c:35:22:
                    e5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:43:A2:5B:4D:6C:9B:25:9A:86:43:A7:F1:7F:24:54:1F:FA:81:8E
            X509v3 Authority Key Identifier:
                keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:96:f0:56:6f:51:ec:1c:08:08:73:52:0b:f4:cd:76:ab:1d:
         5a:1e:c5:4b:07:75:31:27:1b:c2:08:93:65:56:ce:ad:62:a6:
         6e:be:23:84:c1:5f:d0:9e:3e:7e:7b:aa:62:8a:a5:52:5c:39:
         2f:11:8c:7f:0e:d4:04:39:8c:60:c2:51:a5:1b:90:e1:b0:10:
         8e:a1:53:71:5d:51:12:2d:a8:05:f0:87:80:ac:a4:92:da:d1:
         f4:67:5d:81:88:a0:fa:ae:5c:9d:9b:8f:87:5c:69:1a:71:2b:
         85:b3:50:88:c8:fe:39:6b:2d:ef:a8:c9:3c:95:95:9f:b6:03:
         13:19:bb:4e:c8:47:ef:da:12:d3:1a:b8:7c:b4:94:88:6e:68:
         1e:6d:a0:72:e7:ac:99:e8:97:5d:dd:24:bc:4c:fd:9b:3a:6e:
         9b:a3:0c:31:47:45:0d:d8:24:d1:c9:84:c2:ce:3f:ee:c5:80:
         13:7a:41:af:6d:4d:de:a8:9a:ae:6d:4b:94:5c:33:f3:86:64:
         c0:ca:e6:09:71:18:d2:1a:aa:a7:30:f6:b9:e6:bf:84:10:77:
         3d:61:bb:e0:9b:1e:a2:09:9c:0d:41:c2:50:6d:30:f3:8e:fb:
         b1:92:d3:af:11:44:a6:81:0a:71:ca:84:45:d0:37:e3:18:11:
         8a:a0:f6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 04:01:43 2024 by rpki-client on console-fra.rpki-client.org