Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
File:                     8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft (raw, json)
Hash identifier:          q6bHS1XfOq+e89F0FE3bsUKtrRcC4ym2seGeTfwK9CI=
Subject key identifier:   E7:23:B6:28:6E:DE:DC:CC:E0:A4:A6:91:76:D6:77:0A:D6:B4:BF:61
Authority key identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
Certificate issuer:       /CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Certificate serial:       018F381B784E793261E95C619C64F558F601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
Manifest number:          10E1
Signing time:             Thu 02 May 2024 07:01:15 +0000
Manifest this update:     Thu 02 May 2024 07:01:15 +0000
Manifest next update:     Fri 03 May 2024 07:01:15 +0000
Files and hashes:         1: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl (hash: 80RuEqrMNmaFQbt92/QwARC7fOSnTkowNgXie9cXdsQ=)
                          2: okPiyX-G0ceAVoVM4I0tQaNyg1c.roa (hash: TNzg8xT0lNWX9Yzp7QsyJh5XaMKqvxh0I+9d/t8YA6s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1b:78:4e:79:32:61:e9:5c:61:9c:64:f5:58:f6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f210bac96aff25b2aa931c4297446be37ffe2ada
        Validity
            Not Before: May  2 07:01:15 2024 GMT
            Not After : May  3 07:01:15 2024 GMT
        Subject: CN=e723b6286ededccce0a4a69176d6770ad6b4bf61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:09:37:67:3d:67:b4:07:5a:d5:db:bc:7c:
                    37:aa:b6:f4:f1:fc:62:1a:0f:2e:bc:9d:d5:b4:e5:
                    98:0c:eb:7b:48:c3:08:31:4b:62:3f:3d:92:08:6a:
                    17:f3:98:30:f4:64:dd:8c:84:5e:e2:56:36:b6:0a:
                    e4:ed:eb:bb:cd:44:b0:b0:1a:06:82:ed:cc:3b:c9:
                    0d:34:e3:b7:48:ff:72:15:32:25:68:d0:2d:c5:c5:
                    45:fa:6a:ea:ab:8f:cc:16:4b:89:9d:85:5f:c7:ad:
                    62:f9:8e:46:46:60:6f:e4:d6:31:39:81:2d:25:3a:
                    20:e4:68:f9:cc:1b:95:cc:1c:48:2e:68:8c:46:19:
                    f6:22:fd:9d:df:d1:90:ff:44:9b:b0:78:3e:48:86:
                    8c:52:08:dc:24:63:b2:bd:1f:79:f4:6f:2d:07:e3:
                    ff:93:2a:82:5b:8a:c2:d7:dd:89:86:45:61:7c:c8:
                    c6:43:3f:ea:5f:2a:9d:54:7f:b5:15:1d:a6:07:3a:
                    bd:3a:0e:42:93:ea:30:39:10:ec:11:7d:0c:98:d3:
                    d9:00:93:d9:01:d5:b3:1b:26:ba:f5:ad:24:e3:cc:
                    d7:16:75:2c:52:0d:6f:fc:2b:46:b2:08:17:e8:cb:
                    08:a1:21:a1:2a:39:64:7c:16:a0:24:98:84:3c:cc:
                    d6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:23:B6:28:6E:DE:DC:CC:E0:A4:A6:91:76:D6:77:0A:D6:B4:BF:61
            X509v3 Authority Key Identifier:
                keyid:F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f5:89:95:5f:f9:32:69:7b:37:79:da:32:66:5c:dd:c6:15:
         17:2c:95:2d:e2:db:ad:e1:70:4f:83:fb:51:42:db:a6:e0:5e:
         68:88:c1:f3:1c:c5:e9:fd:c8:71:7a:3a:19:a5:d5:07:91:50:
         e9:8f:e2:a2:db:59:81:af:ff:a6:27:d2:db:c4:bb:e8:a4:79:
         20:bc:dc:e2:2f:17:86:00:19:3c:04:66:d1:87:3c:bf:bd:81:
         08:b6:45:2e:cc:87:0a:0d:89:f1:45:24:d5:4d:01:66:a3:04:
         72:e2:7c:7f:4f:b9:14:18:9b:f0:38:6d:6f:75:15:8f:41:0e:
         0b:19:ab:f4:6b:b4:a6:85:16:58:72:e5:b3:67:75:31:c5:6f:
         e6:90:fe:35:a0:6d:7a:c2:67:f2:06:3f:bb:96:77:3f:3b:a5:
         65:f2:89:e1:e8:31:32:93:ef:e1:c1:d3:2a:0b:cd:c3:03:ac:
         5f:97:96:93:80:93:fd:be:7f:e2:0d:a0:5f:cd:6a:4e:8f:9a:
         33:f1:d3:51:eb:78:7b:8a:51:8d:38:43:86:c1:ab:3d:1e:a0:
         f1:c9:91:51:8e:6f:72:de:fc:ce:c4:bf:98:f1:d2:5a:b8:04:
         2f:73:f9:e4:74:12:ca:ed:e8:4d:14:52:12:c4:1d:8c:87:19:
         61:0e:be:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:40:08 2024 by rpki-client on console-ams.rpki-client.org