Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File:                     CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier:          tUaZrXC1ZXJoTiWkclccblRcEp3r9Z6/WYuQk34R1uY=
Subject key identifier:   10:4F:2A:BB:E4:E7:DF:06:D0:EF:68:F6:99:2A:02:8D:21:F2:5B:98
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer:       /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial:       018F87B6CAA199C75FF2C92E65AEEB2215D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number:          E8
Signing time:             Fri 17 May 2024 18:00:54 +0000
Manifest this update:     Fri 17 May 2024 18:00:54 +0000
Manifest next update:     Sat 18 May 2024 18:00:54 +0000
Files and hashes:         1: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: E5scRzKzSVCeKJdjWTrnNCqe87wjnzouLZtIG53sPJU=)
                          2: hNRI4S_udptfEHNLzR1cCdL0Fyc.roa (hash: aqWVSi2tbawPqoXxM+/JB/gKcBdcEu9o5eXepRCVXNw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:ca:a1:99:c7:5f:f2:c9:2e:65:ae:eb:22:15:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
        Validity
            Not Before: May 17 18:00:54 2024 GMT
            Not After : May 18 18:00:54 2024 GMT
        Subject: CN=104f2abbe4e7df06d0ef68f6992a028d21f25b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b6:29:0a:c0:fb:83:79:5b:5b:8f:ab:f9:ba:
                    92:9a:e6:82:f2:dd:8f:92:73:d1:29:12:55:13:b4:
                    04:79:d1:eb:36:22:ce:ed:b2:4a:5f:f7:7a:e1:eb:
                    ba:da:be:29:3c:b4:d4:f8:6a:0e:2d:62:4d:ed:3c:
                    bb:e7:01:71:7e:47:e4:4c:8c:2c:18:42:7b:6c:39:
                    49:db:e9:71:69:67:43:e9:77:05:dc:9d:1e:ba:75:
                    5c:e7:dd:62:34:a1:7d:71:b9:b6:89:95:00:cb:92:
                    8c:98:be:a1:e5:df:09:98:e6:1a:52:16:cc:54:3a:
                    37:a3:07:b2:df:a9:52:7e:e9:93:a5:8a:55:80:58:
                    e5:e5:78:63:2a:e9:fd:b5:10:a3:9c:27:f8:46:69:
                    22:e5:88:5b:9d:87:9b:fb:0a:43:a6:44:88:7b:68:
                    3f:4b:88:1c:06:15:54:23:9e:cc:a6:a4:c6:93:a7:
                    c9:0c:b1:dc:b8:51:18:86:ec:93:2f:28:91:ac:9e:
                    cf:97:6d:26:84:68:bc:6f:69:dd:7f:a0:a9:72:cb:
                    bc:b8:6d:f4:de:32:db:56:47:ca:bd:e7:1b:c5:b2:
                    ea:3e:72:d0:00:50:9d:21:be:db:a5:ac:51:6d:31:
                    44:2d:4f:77:24:de:d0:5a:5e:2b:70:8d:7b:06:27:
                    8c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4F:2A:BB:E4:E7:DF:06:D0:EF:68:F6:99:2A:02:8D:21:F2:5B:98
            X509v3 Authority Key Identifier:
                keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a9:b2:3d:29:c4:f4:f2:ed:44:24:56:50:07:08:ed:b2:0d:
         d3:ab:9d:aa:b4:31:34:0f:0f:00:3e:98:e3:83:df:7b:92:1c:
         3a:4c:7e:d7:3c:5a:1a:61:6c:d7:e5:b8:27:23:ce:9f:4c:b6:
         2b:a0:2f:81:61:29:81:7a:21:51:9a:b2:3f:7d:7e:39:eb:16:
         c7:38:9e:3a:bf:70:bf:34:99:f5:6b:6e:ec:9c:ac:75:bf:eb:
         6e:99:06:49:dc:b0:37:e4:64:a2:89:b1:7b:9e:19:60:4f:fc:
         58:ea:00:5e:ba:03:36:54:32:92:a5:a6:d3:46:da:6c:6f:0c:
         6c:fc:be:66:ca:3f:32:20:4c:6d:10:df:52:84:08:01:04:02:
         80:68:ae:16:36:5c:60:68:b7:ac:c9:86:c0:8d:e5:d2:c1:ab:
         c2:8b:99:3d:92:b8:0e:c4:fe:0e:b5:fc:89:dd:cf:33:85:dd:
         db:d5:ed:db:e7:d7:18:85:b0:91:b4:61:e1:78:55:8f:ee:35:
         58:23:66:17:53:50:ed:ad:bd:25:6c:48:2b:53:0c:28:11:56:
         d2:ed:53:ec:c9:4c:1b:ff:8c:92:70:35:17:ba:0b:b2:d9:a2:
         6a:f9:37:0c:59:42:b5:81:15:a6:4e:41:38:12:c9:f0:68:71:
         df:10:cc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:34:44 2024 by rpki-client on console-fra.rpki-client.org