Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File:                     H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier:          HII7umXI9WcyyCy5+xRWtL29efIoMfk+GStTU0QdXEc=
Subject key identifier:   D0:0D:B7:F2:94:96:1E:37:BE:AE:2A:1E:95:EF:88:8E:DF:53:F5:BD
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer:       /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial:       018F43B1ED4A0DB97DAEC14F9839C5271B8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number:          10E8
Signing time:             Sat 04 May 2024 13:01:25 +0000
Manifest this update:     Sat 04 May 2024 13:01:25 +0000
Manifest next update:     Sun 05 May 2024 13:01:25 +0000
Files and hashes:         1: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: BQREgIftYNqtUtI7FjYoniewdYLeHGM2OQ9kjyH5Jf8=)
                          2: V9RM5wBLRU81rswJ7oqA74XI-C4.roa (hash: 6n/9wUc/asQLLx3ymPeOE8p9fX/8Mufa7WFVPcNOJjM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b1:ed:4a:0d:b9:7d:ae:c1:4f:98:39:c5:27:1b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
        Validity
            Not Before: May  4 13:01:25 2024 GMT
            Not After : May  5 13:01:25 2024 GMT
        Subject: CN=d00db7f294961e37beae2a1e95ef888edf53f5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:55:98:c2:0d:07:1b:2d:5d:b6:d9:9a:08:00:
                    eb:e0:27:18:7b:aa:7f:e8:88:b3:12:e3:bf:95:49:
                    19:61:50:d8:f4:f7:9b:42:a0:3d:1f:50:a1:3a:71:
                    0f:f9:92:e0:43:28:1f:41:57:8d:7f:42:2b:78:a8:
                    ec:13:e1:99:12:0b:c5:d8:34:dd:2f:3e:ab:ae:e3:
                    d4:9f:d4:5d:a0:3c:7e:c9:bd:8b:77:99:3c:e7:14:
                    bb:29:f1:99:1d:e5:38:ae:2f:2f:8a:db:77:f6:78:
                    d1:75:5e:62:cb:b5:42:42:ca:9d:7e:a3:63:79:af:
                    ba:40:e7:3e:f2:db:6b:30:0d:fc:ff:e2:0a:eb:90:
                    99:c4:2c:5a:44:3a:13:de:d4:d9:41:29:df:64:36:
                    8a:de:5b:63:53:a9:9c:d5:c3:fa:3e:42:90:a9:04:
                    62:26:60:a5:96:61:07:f5:31:75:2f:d7:2d:13:4d:
                    12:61:09:36:7f:d4:0b:04:86:c8:e2:55:02:68:df:
                    98:d3:2e:52:be:06:02:f3:88:c4:b3:11:fe:7e:e3:
                    b1:c5:e4:f6:26:f4:4e:e8:aa:32:dc:4f:cd:a8:c7:
                    58:f9:c9:86:41:57:71:78:0f:5a:fa:82:e7:5b:0c:
                    7f:ce:f4:ca:94:c0:53:90:0f:39:81:ef:b4:ca:39:
                    2e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0D:B7:F2:94:96:1E:37:BE:AE:2A:1E:95:EF:88:8E:DF:53:F5:BD
            X509v3 Authority Key Identifier:
                keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:6c:ca:bf:32:69:06:b7:21:1a:71:be:ed:bb:88:30:25:da:
         05:3c:c3:92:dd:67:1a:66:bc:96:94:95:ad:b8:36:27:00:f7:
         54:1b:b7:27:68:99:3f:20:98:dd:1d:dd:8e:59:90:4d:57:53:
         a9:a1:6f:a6:ed:37:1e:0b:32:ad:08:50:af:e5:b5:a1:11:2e:
         2c:cc:2b:55:c4:a1:f1:31:b6:62:27:74:a0:fd:85:01:80:1f:
         73:1d:cc:1e:5c:72:b2:39:42:37:f3:d6:f8:f6:3a:33:01:db:
         ed:d2:53:5c:a0:ff:be:93:bf:0d:ad:bc:e1:fa:0a:7c:d6:37:
         34:b3:86:af:27:e1:d7:cf:c4:5c:f6:02:3c:a4:86:bd:d3:64:
         4e:81:1b:a1:34:10:c8:34:d5:1a:c2:78:be:5c:d0:2e:91:0e:
         a8:62:da:ee:33:f9:d2:5a:80:1b:b8:cd:f1:be:14:88:02:1e:
         9c:3e:15:3f:30:e7:f8:56:3a:25:2f:5f:f1:84:78:bd:d9:65:
         d5:4f:0c:1b:f9:3d:b9:90:58:10:37:e3:ee:9d:44:87:6a:2f:
         f6:80:76:2a:d2:06:21:0a:4c:87:79:82:a5:e4:12:58:39:38:
         e2:8b:b0:ac:02:c7:c7:d5:96:88:ca:8d:a9:34:71:98:60:18:
         aa:2f:3e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:14:17 2024 by rpki-client on console-ams.rpki-client.org