Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
File:                     Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft (raw, json)
Hash identifier:          FaKNGJkwx7wiOc80IwJlz1pDOzZrMmCnzJLHxt7K7Cc=
Subject key identifier:   DD:0B:4B:26:CF:9A:80:78:66:C3:70:2D:1B:AF:B4:C9:93:02:3F:88
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Certificate issuer:       /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial:       018F396565060424CE1A37A66F92F30C149F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
Manifest number:          08D1
Signing time:             Thu 02 May 2024 13:01:37 +0000
Manifest this update:     Thu 02 May 2024 13:01:37 +0000
Manifest next update:     Fri 03 May 2024 13:01:37 +0000
Files and hashes:         1: 1O7gu2kvuvn7017oTng-dQeTAa0.roa (hash: OT6WrJOyhkhsYl96CZgHLWxPY1slnsd9sVBdoJxdDhQ=)
                          2: 2BfraX45-B3YnX4Y_nUP4OFEobY.roa (hash: xIATUq+DXkZLbwzSJRRz6m9w/TNswrVmRq1S2zMhQvI=)
                          3: 8InhtxhJ2CokS8o8pl8Zx0fXDNI.roa (hash: wouYOr5NL8fihUC73ctUChORb0LZcEgoN1GTY/qNwx4=)
                          4: Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl (hash: gqNRccOqvG3rg/qkH9m4LCx3qAnyhEZ8eDv8GRiGfaA=)
                          5: JPm2yackomAR-H-UrUuFUr7nUKY.roa (hash: fTIKqs9EM7F+9BEEmVXrKB1SEfO0ckO6QpiFnl15vTE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 13:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:39:65:65:06:04:24:ce:1a:37:a6:6f:92:f3:0c:14:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
        Validity
            Not Before: May  2 13:01:37 2024 GMT
            Not After : May  3 13:01:37 2024 GMT
        Subject: CN=dd0b4b26cf9a807866c3702d1bafb4c993023f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4a:d1:1f:1f:27:1f:ff:8f:6d:d8:4b:ab:f6:
                    bd:07:82:ed:41:1a:a7:a8:2f:1e:07:a1:6c:5d:90:
                    b7:2a:2f:32:a3:a8:18:95:a3:bb:54:b1:dd:0a:52:
                    10:a8:44:d9:23:c8:5c:47:6b:3d:12:57:61:f0:52:
                    94:8d:38:82:46:55:76:43:48:62:f0:63:54:dd:f7:
                    0f:fd:7e:d2:2a:76:24:e2:c0:69:ff:cd:f3:cf:0c:
                    75:84:01:36:28:2e:88:53:61:8a:cc:98:07:ba:ed:
                    98:ee:0f:62:1e:fe:fa:ae:27:43:53:2c:0f:e8:ef:
                    b3:85:cc:3a:cf:45:d9:a5:65:80:3c:e3:cb:d4:ac:
                    8b:c3:28:bb:5a:86:5c:19:be:86:e6:cd:3b:26:cb:
                    e4:23:47:65:9b:2c:a6:66:2c:74:a8:a0:c7:9f:4f:
                    f4:9f:69:e7:88:57:cc:e5:24:c9:cc:2d:fb:9a:ac:
                    cd:d7:08:7e:a7:3f:06:11:b7:88:46:1e:d8:a3:ca:
                    7e:21:8c:b5:67:bb:ec:8e:82:b3:67:74:34:2a:41:
                    11:df:74:c3:b6:50:a2:c4:98:b9:79:bc:e0:85:97:
                    50:04:20:37:30:9a:a3:75:6e:9f:77:bd:ed:28:81:
                    82:35:1a:72:52:b2:91:3f:26:6d:0a:9f:01:89:ed:
                    3d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0B:4B:26:CF:9A:80:78:66:C3:70:2D:1B:AF:B4:C9:93:02:3F:88
            X509v3 Authority Key Identifier:
                keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:99:4a:47:98:d9:f1:5a:10:00:d3:1f:05:b0:93:72:6c:8c:
         93:a7:4d:ab:2c:f8:48:54:a6:a1:31:4d:3e:df:9b:a8:a8:9e:
         19:9b:54:0d:ef:de:28:30:6f:d8:79:47:8a:8a:65:5c:49:64:
         3f:5e:ba:23:3e:56:c5:cf:ed:23:72:44:e2:8d:13:ac:d6:e6:
         8d:e8:ce:b7:76:a8:e6:91:19:91:12:c1:88:a1:db:bf:99:39:
         af:47:ab:6d:c1:db:ac:54:fc:49:93:38:b3:a2:04:dc:9e:1c:
         46:96:5f:a2:11:58:5d:cb:3e:18:35:c8:52:94:56:47:f5:f2:
         3d:98:f9:51:07:9e:de:96:49:ed:9f:51:46:ba:44:00:41:60:
         46:fe:48:75:58:d2:52:f7:b2:91:e2:4b:51:26:69:69:25:b1:
         45:13:44:e1:61:d8:91:fd:f7:a7:91:8f:e8:a3:fc:ba:de:c7:
         fd:8a:14:65:d9:f8:15:7d:43:3b:97:7c:db:4f:73:f2:65:34:
         30:d7:6a:ec:df:40:a8:30:bf:bf:0a:42:47:fd:9a:a8:d5:87:
         c3:55:01:00:fb:2b:73:5d:11:2a:d5:d4:3e:1a:bd:bc:34:b3:
         af:fd:18:bf:34:73:d4:ff:48:0c:19:77:5b:2a:5d:96:48:4c:
         45:d7:5c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:08:55 2024 by rpki-client on console-fra.rpki-client.org