Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
File:                     pOd3fHr7fUObRvaBxMe_aoJS4xU.mft (raw, json)
Hash identifier:          VBrTb1TMWhS+IJ5sVr9h2Pl0jVgVlbBNdivJOszAKTY=
Subject key identifier:   C5:DE:7C:0B:E3:D0:9F:DC:13:9B:C8:AE:9E:ED:4E:92:E5:1A:35:53
Authority key identifier: A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
Certificate issuer:       /CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Certificate serial:       018F874A927CB559621FEB0CAC1052381410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
Manifest number:          0862
Signing time:             Fri 17 May 2024 16:02:42 +0000
Manifest this update:     Fri 17 May 2024 16:02:42 +0000
Manifest next update:     Sat 18 May 2024 16:02:42 +0000
Files and hashes:         1: pOd3fHr7fUObRvaBxMe_aoJS4xU.crl (hash: 10FADy4wJfY2HhsLu+RgLQGaUIaEq2iyrCNyHlmHZOk=)
                          2: prkLS8BTdWIcRuJR2QEoOdxmM98.roa (hash: fiXyfAIvbwFyYsB2/dIPfwi5IZ8LQaxFs/V84Wxm/V4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:92:7c:b5:59:62:1f:eb:0c:ac:10:52:38:14:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
        Validity
            Not Before: May 17 16:02:42 2024 GMT
            Not After : May 18 16:02:42 2024 GMT
        Subject: CN=c5de7c0be3d09fdc139bc8ae9eed4e92e51a3553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a7:70:95:12:4c:51:dc:85:43:a1:88:49:fa:
                    96:ce:1b:ec:88:82:35:ff:cc:41:58:54:b4:aa:74:
                    71:ba:8f:f7:46:75:38:16:4e:c5:f2:a0:13:7a:72:
                    e6:4c:ac:f4:a4:92:75:d0:2a:de:a8:b8:fe:5b:7a:
                    fb:de:90:c8:c1:b6:6a:00:ac:df:f6:a2:a3:cb:b7:
                    f8:57:0b:32:20:0f:58:44:2b:0e:89:34:ca:f8:e0:
                    9d:35:a4:e4:ca:04:18:2c:4c:fc:e4:6a:24:c3:64:
                    b3:ab:6f:55:4e:f3:80:c7:18:bf:a6:23:6b:d5:4b:
                    fb:4c:83:93:83:34:e9:1c:cb:62:df:50:f4:45:fc:
                    a4:52:52:0e:9d:f3:bc:88:ba:98:97:b9:74:82:f5:
                    81:f4:b8:f1:2a:b7:aa:9b:dc:f9:95:5c:4b:81:5e:
                    77:ac:46:fa:10:b7:8f:c9:e8:e9:b0:e5:d7:96:cb:
                    fe:5a:50:88:40:f9:d4:b0:40:90:a3:cf:5b:d5:71:
                    ac:ee:ff:f4:cf:63:b4:cb:5a:0e:e3:e0:d1:6c:4a:
                    d6:3d:05:f2:8e:73:f3:71:93:1d:b4:74:e7:ae:43:
                    63:28:fa:e9:cc:ac:5d:cd:03:7c:04:1a:78:9d:4d:
                    82:d3:a9:3b:f8:10:ad:c5:81:c1:87:22:76:eb:42:
                    4f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DE:7C:0B:E3:D0:9F:DC:13:9B:C8:AE:9E:ED:4E:92:E5:1A:35:53
            X509v3 Authority Key Identifier:
                keyid:A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:6e:9b:b0:b5:70:4d:e8:d1:f0:ff:c1:85:67:c0:5a:5b:97:
         31:ea:f2:86:a7:4f:07:75:83:7f:46:3e:7d:0f:b5:de:63:f6:
         fb:2c:7d:2e:a5:87:66:7a:99:db:b9:33:a9:4a:31:ef:93:62:
         36:c1:f4:5c:e7:cb:7d:68:21:6b:41:74:d1:74:8d:1a:64:a9:
         6a:18:99:66:a5:03:73:21:84:26:80:e9:ab:a8:98:88:2d:0f:
         29:4e:84:00:dc:79:12:09:e2:3f:df:82:bf:65:b8:f1:9b:50:
         ee:d9:51:85:2a:93:ba:4d:b2:d4:e6:3a:1c:34:24:04:8c:6d:
         c2:e3:92:e4:41:9c:31:d1:eb:e6:1b:f3:28:0b:3a:70:48:d8:
         e7:67:39:03:29:84:97:90:90:3e:2d:4d:5c:b7:cf:b5:6f:51:
         f2:fe:30:bd:9e:b5:ca:40:1b:08:6a:35:d6:87:fe:e1:70:82:
         5c:fb:86:2b:bc:26:5a:0a:91:31:c5:8c:fd:f1:eb:12:7f:66:
         8e:f3:03:aa:50:21:ca:c4:2b:37:ee:4d:72:a9:dc:d9:e3:26:
         e1:9a:4a:99:4f:ea:ba:6f:a6:86:13:3d:4c:0f:f5:71:66:5c:
         97:96:38:ff:d3:ac:b9:31:b5:54:ab:1e:11:80:5b:78:2e:ed:
         47:00:b0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:37:59 2024 by rpki-client on console-fra.rpki-client.org