Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
File:                     CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json)
Hash identifier:          eO4NDtZ+pWZCmWwdd45RC722bCSRAfVkgEOzrjOHCWc=
Subject key identifier:   1E:50:3B:72:D4:7E:8B:59:45:95:0A:6A:73:D0:DC:E5:5C:55:42:7D
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Certificate issuer:       /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial:       018F4F494E7833572914A870074B1E09A891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
Manifest number:          0CDA
Signing time:             Mon 06 May 2024 19:02:35 +0000
Manifest this update:     Mon 06 May 2024 19:02:35 +0000
Manifest next update:     Tue 07 May 2024 19:02:35 +0000
Files and hashes:         1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: KaedFALe9dze8+zQRpdRiDV5JOALcZ2oA+O/jkX/smA=)
                          2: QSlw35T018bS9HDX-KMHLrpMuOw.roa (hash: jcQehnE3yRgffBvAFI1OMPNKfI+l9JbbPSfH5c9a7ns=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 19:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:49:4e:78:33:57:29:14:a8:70:07:4b:1e:09:a8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
        Validity
            Not Before: May  6 19:02:35 2024 GMT
            Not After : May  7 19:02:35 2024 GMT
        Subject: CN=1e503b72d47e8b5945950a6a73d0dce55c55427d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:5f:d6:fa:c7:76:e6:e8:2f:63:a1:f4:8f:
                    d8:a4:7e:50:c9:99:00:4e:a9:a1:76:5d:f1:43:cc:
                    de:25:f5:79:c5:72:da:91:67:90:86:33:06:52:35:
                    d1:d0:4b:88:5d:bc:3c:81:8e:bc:07:1c:34:36:56:
                    16:95:2a:b6:91:98:39:d3:2a:7b:73:61:8e:86:e8:
                    13:cb:f3:11:e5:01:eb:be:56:f7:82:18:25:27:1e:
                    56:0f:d6:38:73:6b:34:97:92:81:bf:e0:3e:93:76:
                    c0:35:4a:e5:ee:a0:fb:47:4a:fb:06:3f:72:96:56:
                    79:22:77:4f:1a:5f:83:21:2d:b8:2e:41:62:35:b2:
                    ab:25:d0:10:59:3f:e7:7e:c2:47:71:4f:13:17:ad:
                    03:26:27:93:93:f6:81:4a:33:23:c1:a2:7c:c8:3b:
                    e5:5f:aa:c6:7b:7a:ce:a9:6f:3a:40:02:0a:e2:12:
                    06:ce:58:f3:d9:61:ee:c5:19:13:8a:e5:1f:e5:e8:
                    2c:30:a5:4e:d5:46:e0:49:c7:bd:53:ca:6a:27:8f:
                    c4:3d:0e:8c:3f:0e:be:da:cc:06:6b:5a:49:41:11:
                    5b:34:37:21:79:f1:6a:03:9b:f4:c2:d8:e7:11:e6:
                    13:59:e8:5e:7f:ea:1b:df:d3:bf:69:97:29:e9:d6:
                    c6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:50:3B:72:D4:7E:8B:59:45:95:0A:6A:73:D0:DC:E5:5C:55:42:7D
            X509v3 Authority Key Identifier:
                keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:b6:33:7c:1d:bb:5d:e5:b3:29:44:06:fb:76:bc:05:d5:83:
         0e:26:89:20:6f:39:ef:4e:27:77:9a:3e:78:6a:45:c8:48:ae:
         e7:f0:9f:2a:eb:07:84:ee:2e:6b:9c:69:af:53:4c:da:d4:ca:
         e7:8d:ae:2a:0a:c1:0c:f1:15:f2:ba:77:fa:0c:1a:c8:6c:38:
         88:41:38:49:6c:39:b9:8e:8b:c2:ee:5c:6a:2e:0c:c1:fa:56:
         25:1f:9b:9d:ab:51:1c:45:59:9e:86:f8:3d:33:70:74:71:92:
         5e:36:1f:52:a7:b8:fd:e5:6a:ab:67:ea:97:d4:f0:d7:d5:49:
         82:9c:a5:c3:f4:58:54:74:89:a5:c9:7f:7b:84:04:a8:85:ec:
         f9:48:87:33:20:18:28:fb:d3:7a:f3:f4:c2:c6:24:93:c9:55:
         d7:68:55:d0:74:b2:87:65:85:51:99:fe:68:2d:6d:a2:62:04:
         be:3b:e9:8c:f2:dd:58:6f:e7:89:4e:5c:cd:02:ed:5d:00:70:
         11:ca:08:65:fa:1a:1c:9f:65:4d:72:18:6f:88:3a:40:d2:a3:
         38:0a:8e:08:2f:df:30:c4:86:87:61:24:e8:2c:65:4f:4b:fd:
         f1:48:0c:e1:e0:16:87:02:18:5e:21:da:0a:6e:6e:0f:97:ff:
         e3:a6:b6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:52:40 2024 by rpki-client on console-ams.rpki-client.org