Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
File:                     1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft (raw, json)
Hash identifier:          7Iq07PToL2JKpaqz+KiwH21Vxx2NXWEkUS2eBalJEN0=
Subject key identifier:   25:F2:69:C4:A5:4D:B1:F9:82:3B:30:B4:6D:E5:DB:DD:59:11:A0:45
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Certificate issuer:       /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial:       018F89379026A777456C7E2F04C5BBF23B2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
Manifest number:          0328
Signing time:             Sat 18 May 2024 01:01:10 +0000
Manifest this update:     Sat 18 May 2024 01:01:10 +0000
Manifest next update:     Sun 19 May 2024 01:01:10 +0000
Files and hashes:         1: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl (hash: 5wVk+c3Eo4JlwRfu7GaftYnohRvllzfffQbCuS81RjE=)
                          2: L0iolrwbuvaMmyrFJBQRD6OWnaM.roa (hash: FE4uF3AHljjXoDneX1c/3559a6pUl9uwUCsC3yY19eI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:90:26:a7:77:45:6c:7e:2f:04:c5:bb:f2:3b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
        Validity
            Not Before: May 18 01:01:10 2024 GMT
            Not After : May 19 01:01:10 2024 GMT
        Subject: CN=25f269c4a54db1f9823b30b46de5dbdd5911a045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:29:d0:91:4a:53:ea:fb:58:df:a5:f5:ca:
                    c9:2e:28:f5:1f:1c:55:75:a6:20:58:f0:e9:10:1c:
                    01:d6:b3:85:f6:b9:06:ba:1b:94:44:48:48:a1:2c:
                    89:1f:61:46:19:26:bb:bd:76:a4:b2:73:07:e6:93:
                    f3:a3:b3:5a:a2:af:ae:d4:26:14:b0:f5:6a:1d:de:
                    fe:94:7f:d8:d5:0d:ee:12:af:27:05:df:72:75:6c:
                    19:92:30:6f:fe:a2:8c:74:68:1b:41:23:b9:14:b4:
                    6c:f5:1a:60:ba:7b:8e:f8:ab:75:96:39:f0:4c:69:
                    b2:bf:ad:18:cb:fe:cd:97:c0:0a:3c:53:05:8d:6a:
                    f9:e3:68:0a:4a:28:f8:f5:3b:54:18:7d:a2:cb:32:
                    bc:da:dd:0d:8a:12:89:cc:dd:38:2a:70:7a:3f:0e:
                    f6:bd:6a:2e:41:96:b2:ea:24:54:bb:2d:97:ac:db:
                    77:1c:c4:80:da:b4:e4:c5:ff:b7:9a:58:98:08:52:
                    37:43:65:45:b5:8f:68:6c:7b:27:2b:2f:80:35:bf:
                    30:d2:8e:b4:50:56:df:7a:9f:3e:82:be:f1:c5:ae:
                    1a:62:3e:39:fc:9a:c3:73:63:39:ec:aa:5a:06:50:
                    8a:7f:b9:7d:c9:88:54:b4:9a:fb:a4:65:88:08:9a:
                    2f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F2:69:C4:A5:4D:B1:F9:82:3B:30:B4:6D:E5:DB:DD:59:11:A0:45
            X509v3 Authority Key Identifier:
                keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:28:10:77:0d:5b:7d:af:9d:8f:b1:fc:08:d1:0f:40:88:cd:
         b5:cb:11:cf:76:4d:11:7c:4c:04:3a:17:ae:5d:cb:79:da:81:
         fc:70:53:3c:9c:6f:67:d5:99:ea:5b:ad:04:f7:7f:b0:29:72:
         e3:81:d7:3d:f1:8d:0e:b4:5a:96:f9:83:fb:84:6d:fb:2b:f1:
         dc:9c:19:1f:33:24:e1:29:c0:70:33:0f:44:e2:cc:af:a3:99:
         1b:f1:8f:a2:c0:33:1f:f1:40:4e:bb:3a:a5:cd:7f:59:9a:00:
         cf:c7:ea:a2:ac:db:17:1f:ca:e4:bf:70:23:51:0b:d1:de:df:
         bf:60:43:ed:77:f5:ac:14:33:0e:61:3f:df:69:ca:da:84:ad:
         1c:2c:f4:2a:49:a9:af:48:52:89:6c:d0:2f:a8:9f:f9:e0:6c:
         8d:b8:da:d8:af:4a:79:2e:d0:8f:1a:7f:18:87:94:23:13:9e:
         e8:a3:77:f4:29:d2:1a:26:d9:f5:e6:93:50:9e:13:b7:86:54:
         5c:91:13:1f:68:38:1d:e2:31:a7:ec:36:99:77:63:e1:8e:36:
         52:ba:22:48:5a:3c:91:6b:23:08:92:b6:a2:85:e6:68:8d:49:
         41:1f:61:23:5a:87:15:4a:e9:7b:25:ea:b7:3f:6a:6b:cf:e5:
         70:c4:24:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:37 2024 by rpki-client on console-fra.rpki-client.org