Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
File:                     02vm8HVADTBaFt3mkOJcvZRkXL4.mft (raw, json)
Hash identifier:          9m1UZBESJyt7rGKrbop3QkYAO62U6AiS1CQBHzFwm4A=
Subject key identifier:   33:FD:DC:38:E4:C9:FE:2F:5C:28:1F:42:1C:10:A8:C5:E9:E4:97:71
Authority key identifier: D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
Certificate issuer:       /CN=d36be6f075400d305a16dde690e25cbd94645cbe
Certificate serial:       018F527FD73FDF129D3C2E16A6B0677D8077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
Manifest number:          10AD
Signing time:             Tue 07 May 2024 10:01:00 +0000
Manifest this update:     Tue 07 May 2024 10:01:00 +0000
Manifest next update:     Wed 08 May 2024 10:01:00 +0000
Files and hashes:         1: 02vm8HVADTBaFt3mkOJcvZRkXL4.crl (hash: dFOoYoducNe3xzuD5k2XnQrRIBlgf5bN7SQHWB4ybQU=)
                          2: 5YyMypA-wswjIPl18LqPNpNiTzA.roa (hash: C0nf2TLobWYopm1gjQlaLmQ0mSdnWSYhdyn3pdrrNZY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 10:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:52:7f:d7:3f:df:12:9d:3c:2e:16:a6:b0:67:7d:80:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36be6f075400d305a16dde690e25cbd94645cbe
        Validity
            Not Before: May  7 10:01:00 2024 GMT
            Not After : May  8 10:01:00 2024 GMT
        Subject: CN=33fddc38e4c9fe2f5c281f421c10a8c5e9e49771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c7:02:5e:7c:df:6c:12:58:72:49:71:d2:1f:
                    3c:88:99:87:61:84:63:50:3b:6e:5b:5c:5d:52:7a:
                    0c:c0:28:b2:11:a7:fc:68:80:36:67:d0:cf:92:07:
                    0e:40:bc:5e:6c:5d:d0:f3:5d:9b:9d:f3:32:a5:e9:
                    e5:4a:90:d5:1b:67:de:e8:bc:55:8a:40:11:35:65:
                    9b:ec:28:3d:30:d4:14:7b:c9:64:b8:7a:41:7a:a3:
                    b2:2c:d6:40:c0:66:25:c7:27:d6:9d:e8:54:63:43:
                    44:98:e9:27:f9:be:b9:c7:74:c9:0c:76:05:b5:8b:
                    1b:45:b5:cc:af:52:43:8e:7a:b9:1a:b9:73:6b:d9:
                    b4:09:12:4d:31:da:fc:80:67:3d:79:de:1a:4d:f2:
                    8e:e2:4c:35:99:1c:18:43:b1:2c:68:0d:e1:46:00:
                    87:61:75:86:ca:0f:a8:3c:95:4b:df:e8:b4:75:8f:
                    2c:b6:5f:f2:14:5d:79:7c:b6:15:ca:6b:a4:22:82:
                    6b:7f:c5:6c:79:54:2a:15:7d:ce:d4:57:08:1e:55:
                    2c:f1:9d:21:32:11:75:7a:05:a4:21:0e:e7:16:3b:
                    ee:5e:f9:48:3b:ea:db:67:0c:24:97:22:fe:74:57:
                    1b:86:ea:a0:5e:52:c7:96:9b:3e:47:82:43:39:ac:
                    29:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FD:DC:38:E4:C9:FE:2F:5C:28:1F:42:1C:10:A8:C5:E9:E4:97:71
            X509v3 Authority Key Identifier:
                keyid:D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a7:c2:f1:57:b6:e7:cb:1c:7b:81:6a:4b:fe:74:30:39:3f:
         ce:09:94:e8:95:d9:f4:83:e2:c5:03:ba:7f:97:2d:ab:53:d2:
         0e:c1:12:21:3c:34:5b:cc:b7:9f:77:86:5e:52:4e:b3:5c:7e:
         d9:52:83:97:cc:67:ce:83:30:66:e5:b7:45:04:53:06:67:31:
         11:d7:8a:cb:66:fc:8f:5c:74:67:ef:a9:35:0b:62:9a:cf:36:
         1b:96:5d:84:b7:08:66:3b:f4:b1:d2:3d:de:0d:77:2a:b3:52:
         67:0b:9d:a2:e1:4f:5c:a4:7c:0e:33:ee:31:ca:13:94:5f:de:
         db:f1:a8:2d:01:ea:0e:71:75:8c:5c:a2:6f:46:a1:dc:e2:0a:
         1e:1e:fe:d0:e2:c7:94:d9:01:ad:77:0d:34:f6:ea:95:ed:00:
         5e:5b:f5:63:ea:0b:b1:55:90:a3:10:a8:f4:12:bb:8f:f7:e8:
         e1:e7:e1:f2:e8:c1:ee:d0:77:68:6d:5d:b0:c8:94:d7:73:16:
         9c:67:07:ea:12:8d:36:03:a6:50:79:70:47:59:c5:a5:76:07:
         26:b3:5c:2f:8a:b4:8d:fc:b8:03:be:fd:f4:ec:74:87:2c:40:
         03:2a:3f:f0:f3:2b:57:aa:67:7c:82:e7:e5:d4:e0:ff:e3:46:
         0b:53:b4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:33:52 2024 by rpki-client on console-fra.rpki-client.org