Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
File:                     F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json)
Hash identifier:          J1+FH0KvpnEr7j3LM+sxWVy3CZjIzJuMBTY/Iz1M3q8=
Subject key identifier:   7C:BC:AF:24:B1:84:AF:17:8E:1C:77:96:15:EE:C1:B6:22:58:66:9C
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Certificate issuer:       /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial:       018F31746768E8D36A506C7191BB7F458080
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
Manifest number:          0A1C
Signing time:             Wed 01 May 2024 00:01:03 +0000
Manifest this update:     Wed 01 May 2024 00:01:03 +0000
Manifest next update:     Thu 02 May 2024 00:01:03 +0000
Files and hashes:         1: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: GyL+PV5qJzQDwK4zpd+TeJ75ec38MI/d/72JGNRkLPs=)
                          2: fmfax-B5bsHPXY_UTyDMokB0Jvc.roa (hash: rMGVner7d48NGxbJxNee+0KtddgiekXS54fkkb7MfDc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 22:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:31:74:67:68:e8:d3:6a:50:6c:71:91:bb:7f:45:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
        Validity
            Not Before: May  1 00:01:03 2024 GMT
            Not After : May  2 00:01:03 2024 GMT
        Subject: CN=7cbcaf24b184af178e1c779615eec1b62258669c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:69:92:31:6a:1b:de:da:2c:9e:14:7a:1f:dd:
                    6b:97:e6:ba:06:9f:df:c5:70:39:4c:95:e3:fd:ea:
                    8a:91:bb:c7:bf:66:95:89:cc:7e:e6:31:3b:e1:1e:
                    d6:cc:81:1a:41:da:4e:3d:8c:c9:6b:ba:87:f2:33:
                    ce:58:2e:42:a7:54:69:50:12:a4:1c:93:fd:04:59:
                    62:07:bc:39:c9:98:19:7f:18:fd:19:52:ee:7d:64:
                    0b:4f:84:e8:3e:66:71:f8:4e:e5:54:4e:de:00:b5:
                    5f:43:31:18:f7:95:cc:bf:1c:b1:48:b2:0c:a5:56:
                    87:96:ae:aa:5a:84:2c:49:d9:7c:12:46:8f:c1:74:
                    36:80:ba:ef:b6:e0:40:de:0d:89:b9:a1:43:44:8b:
                    d4:5d:7c:65:60:c0:39:6c:1c:74:ec:98:45:a3:e8:
                    8b:40:4a:95:c8:fc:7b:0b:f9:a3:de:7c:fd:4c:6a:
                    53:33:56:32:e5:75:65:15:3d:f8:31:d7:f4:0c:61:
                    ec:16:71:39:9b:86:c9:4d:16:69:00:6e:06:fd:3b:
                    e7:fb:21:95:41:32:65:f1:c3:53:fa:07:ec:d7:83:
                    89:09:5f:11:c4:a3:74:26:6f:63:d6:87:24:04:33:
                    28:42:38:00:99:9f:dd:23:fb:f0:14:7c:ef:df:e9:
                    47:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BC:AF:24:B1:84:AF:17:8E:1C:77:96:15:EE:C1:B6:22:58:66:9C
            X509v3 Authority Key Identifier:
                keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:06:c0:96:cb:d5:1d:14:6b:94:da:e7:2b:50:71:4b:f2:40:
         19:f6:dd:d0:8b:5f:f6:66:5e:85:91:0d:b2:26:69:58:36:b2:
         62:3a:59:d5:c7:12:56:ea:3b:ae:72:c0:58:2f:e4:69:0b:fc:
         b9:d7:89:16:a7:3d:96:9c:34:0f:82:08:79:bc:b3:e5:14:c6:
         db:16:62:58:07:87:1b:16:49:8b:83:c7:da:49:d0:a8:72:e2:
         55:5c:24:a0:ec:fd:0e:05:4c:3d:3b:bf:4c:1b:2b:16:86:e1:
         00:12:3d:e8:18:8b:a7:ba:29:3e:d4:f7:d0:be:ef:77:24:8c:
         42:36:ca:79:6f:d5:95:11:e0:07:a7:0b:01:1c:69:af:ee:cc:
         38:1c:56:6b:70:31:57:81:c3:64:2c:29:54:92:8d:e6:a3:e0:
         ac:40:69:f4:f1:0d:fa:c2:77:66:3d:8e:2e:a3:71:84:c3:a4:
         37:e2:59:72:a5:3a:4c:78:02:8b:10:5e:5e:12:c3:10:d5:43:
         72:be:72:04:69:69:a0:f3:0d:0e:af:5b:4c:28:9e:4a:63:3e:
         26:17:4f:f0:21:54:a0:82:01:c5:e9:f6:10:7e:10:c9:57:86:
         b3:e4:3e:f4:36:6a:4c:47:2e:e3:55:b4:b7:30:6c:30:de:60:
         b8:b6:d2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:48:29 2024 by rpki-client on console-ams.rpki-client.org