Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
File:                     34CJqp4dXBKrrUOnAVEdocZfn6Y.mft (raw, json)
Hash identifier:          UK29HCjeMS5zqMrc60Ok+LZPLntBw2mxzHI6Y+Yq7Ks=
Subject key identifier:   18:01:ED:1E:E9:E9:18:DA:14:4E:3B:C4:9F:AD:F4:8A:88:64:5F:5C
Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
Certificate issuer:       /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Certificate serial:       018F2E72FA44CD5EB02C756DA2CA811D013D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
Manifest number:          0A57
Signing time:             Tue 30 Apr 2024 10:00:38 +0000
Manifest this update:     Tue 30 Apr 2024 10:00:38 +0000
Manifest next update:     Wed 01 May 2024 10:00:38 +0000
Files and hashes:         1: 34CJqp4dXBKrrUOnAVEdocZfn6Y.crl (hash: rIFOSvCvB2rJzSrmm28HWCYZ4rSZlM6VpGHu0FsJVds=)
                          2: rBABCV6d0DrXeaNPxpZAAye3sjU.roa (hash: 77Dmji7NOs4JNfucCagj5UVjEvu4VqbHoU1yw1xS9rY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 10:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2e:72:fa:44:cd:5e:b0:2c:75:6d:a2:ca:81:1d:01:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
        Validity
            Not Before: Apr 30 10:00:38 2024 GMT
            Not After : May  1 10:00:38 2024 GMT
        Subject: CN=1801ed1ee9e918da144e3bc49fadf48a88645f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c2:92:05:aa:02:09:37:7c:64:f5:f9:04:69:
                    01:25:af:16:a2:c3:d6:98:f5:fd:c4:fb:57:b1:82:
                    9a:25:dd:f4:92:b9:f1:82:62:93:67:9c:62:29:64:
                    0e:3d:f7:f0:64:e2:84:5a:a3:88:f8:d1:57:a4:a6:
                    54:fd:32:a0:79:76:58:c1:bc:8b:15:59:84:a4:62:
                    c2:c8:93:23:e2:3f:39:4a:54:29:01:5d:1c:63:63:
                    91:88:df:2b:da:04:ff:51:31:72:a8:66:93:aa:b7:
                    12:ee:cd:ea:be:ae:4c:09:5c:fb:a6:33:2a:86:ce:
                    7c:cc:5e:75:43:46:ea:80:1f:46:9b:ac:c9:fc:02:
                    7e:8b:5c:ec:80:3b:72:53:04:b1:d4:22:2a:04:2e:
                    8c:b6:56:03:aa:9e:bc:59:d0:f7:3a:32:98:ec:73:
                    b5:29:73:bb:f9:43:43:88:ca:be:94:da:c5:65:91:
                    b7:1c:29:aa:c6:a3:43:57:1e:3a:57:8a:7c:06:2d:
                    fd:7a:2c:e0:a8:85:04:1e:c9:97:d2:6a:5f:0e:87:
                    cf:e7:fc:82:79:f0:b9:1a:f4:2e:c2:c8:7c:84:70:
                    5d:50:50:fd:37:4a:54:85:35:00:1e:58:3d:0c:10:
                    92:ed:fc:d9:55:ab:c9:d2:21:5a:ba:e6:46:fd:21:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:01:ED:1E:E9:E9:18:DA:14:4E:3B:C4:9F:AD:F4:8A:88:64:5F:5C
            X509v3 Authority Key Identifier:
                keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:1c:3a:6f:76:4a:7e:91:50:0f:ee:d3:86:70:bc:d9:0b:b8:
         02:f2:a2:1a:d0:38:9a:7a:84:83:90:11:c6:dc:a6:78:1a:59:
         2b:92:97:c4:47:b8:ab:66:d2:5f:67:e7:fb:0b:a6:a3:af:18:
         23:3b:4d:39:6a:9f:c6:dd:9e:ae:32:58:b3:65:fd:b7:c6:09:
         74:7d:b9:7e:21:87:72:bd:1e:e4:2c:0d:da:f2:2e:7f:9b:eb:
         c9:5f:9f:d6:53:94:98:fe:ae:59:b8:68:7c:80:b5:da:25:f1:
         77:4c:9d:cd:63:c5:54:ac:0e:ea:f7:83:dd:b3:b5:43:2b:ca:
         5b:ea:da:9e:87:9c:b7:9c:7c:13:a4:8a:80:ef:62:b5:aa:de:
         4f:f8:e4:f3:7a:74:bd:66:67:09:42:6f:1c:3c:b7:48:2a:b5:
         db:05:0e:4a:72:49:17:b9:86:54:f4:a3:05:ba:7b:97:32:25:
         e5:be:3d:7a:9a:ca:4c:2e:3b:49:f5:5b:78:36:a4:32:83:2a:
         ce:c3:bc:d0:d4:2e:58:2b:2c:0c:0c:21:df:5a:29:78:e3:fe:
         e1:16:7b:c0:eb:dd:53:0e:fd:74:2c:3f:01:19:13:a2:84:a9:
         f9:59:dc:42:17:6b:a0:de:2b:4e:0c:48:40:89:e8:4d:bc:b7:
         ab:16:52:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 16:24:50 2024 by rpki-client on console-fra.rpki-client.org