Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
File:                     41b1wjzOxkZAaF5E1ZvEttRNqrk.mft (raw, json)
Hash identifier:          uZzNcyj8aSu2f4AroC+eBb3peJHgJdlomjkzoXLcBiU=
Subject key identifier:   2C:EB:C3:0C:C8:C8:3B:75:34:EF:0F:B1:AC:92:DE:88:B3:6F:EC:10
Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
Certificate issuer:       /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Certificate serial:       018F22DF339B5E6C99F90DB40111AB2D331B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
Manifest number:          0552
Signing time:             Sun 28 Apr 2024 04:03:24 +0000
Manifest this update:     Sun 28 Apr 2024 04:03:24 +0000
Manifest next update:     Mon 29 Apr 2024 04:03:24 +0000
Files and hashes:         1: 41b1wjzOxkZAaF5E1ZvEttRNqrk.crl (hash: fXBU1zh1OIHO+IjDd630e9wItp+WWgPgEyBx4/xGzN0=)
                          2: bphPIpGVOBk9bI5lRL_a-BXdGqA.roa (hash: 0H92+Wi0NZWfhjNU6PcS2YztStj10CYVAytPDoRuX70=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 04:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:df:33:9b:5e:6c:99:f9:0d:b4:01:11:ab:2d:33:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
        Validity
            Not Before: Apr 28 04:03:24 2024 GMT
            Not After : Apr 29 04:03:24 2024 GMT
        Subject: CN=2cebc30cc8c83b7534ef0fb1ac92de88b36fec10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:42:93:78:fb:92:1a:61:55:bf:3f:ee:c6:
                    92:25:58:66:9c:bc:ae:24:74:b0:6a:c5:c7:d6:1b:
                    1a:3f:80:a1:94:22:d0:a7:6a:ca:af:65:fb:8d:ab:
                    ce:f4:d4:5a:bc:8e:66:9a:44:df:ea:26:2f:fa:d8:
                    94:86:ce:18:c3:3b:be:e6:6f:b7:1b:26:db:d4:a6:
                    f2:5b:de:0b:73:28:24:2b:3a:7d:e3:fa:d4:88:07:
                    d4:f4:10:f8:95:8c:81:11:bb:80:c5:3f:6a:be:10:
                    70:da:92:03:e0:1f:25:e1:11:ef:da:f9:cf:4a:2d:
                    26:84:66:38:ef:12:c4:03:e0:8d:53:c5:3e:fd:ac:
                    b4:54:8f:d0:db:2d:1a:56:db:3f:d9:74:9e:5f:ad:
                    65:e6:5d:f2:98:ee:6c:d6:fe:5c:bf:11:45:93:be:
                    b4:7c:8a:2b:76:e3:8a:a1:70:e9:99:5a:ba:fa:43:
                    a8:0e:e0:93:4f:25:f9:59:e3:cb:e2:e8:95:95:8e:
                    b2:92:be:8e:7b:8e:13:8a:ab:64:69:92:11:f5:e5:
                    2f:9d:eb:37:6a:bf:55:03:d4:64:9b:03:2f:a9:42:
                    1b:a1:c5:41:ad:48:8a:05:68:63:e3:54:ab:55:24:
                    b9:46:95:1c:44:f7:a8:85:e5:fd:ea:be:fc:ec:b6:
                    a9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EB:C3:0C:C8:C8:3B:75:34:EF:0F:B1:AC:92:DE:88:B3:6F:EC:10
            X509v3 Authority Key Identifier:
                keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9a:64:e8:43:5a:e7:c9:f0:de:e7:07:4a:32:b4:81:94:21:
         64:c2:a3:ca:12:f5:00:cf:8d:fc:d3:43:32:a3:35:a8:df:f6:
         f0:94:42:75:27:75:14:e2:34:b5:e6:ab:6f:d5:ad:54:96:57:
         81:a0:19:e9:95:97:b4:52:c0:f0:fe:d7:8d:c9:a1:98:89:f5:
         22:e4:4f:5a:ae:ac:74:75:6d:e8:39:25:71:fb:85:90:85:d5:
         b5:ac:44:c3:54:a3:6c:27:dc:cd:41:c7:75:6b:8d:82:e8:5d:
         03:bb:d7:4f:da:e2:83:48:ab:f1:f5:8a:55:39:c6:28:a3:06:
         39:44:53:ec:a0:cf:c4:06:2f:a3:4d:96:24:6d:a4:7f:35:46:
         9e:f9:a8:98:96:2d:cc:5d:e5:1d:3a:59:2e:03:d1:48:99:e7:
         37:e4:4b:b3:c9:af:e6:21:e3:17:17:0b:3f:b4:66:28:fc:a5:
         17:4a:26:52:49:74:45:c9:ad:37:aa:b5:41:91:06:be:c8:9c:
         ca:45:57:7e:0b:3b:05:76:73:02:91:78:2d:cf:1a:78:09:09:
         cb:e5:6c:61:a2:07:fd:39:88:d1:a1:62:ef:b4:e4:6f:24:10:
         c9:63:f3:c2:13:bd:33:e7:6b:ee:86:03:a6:46:03:ad:85:72:
         42:3b:6f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:08:44 2024 by rpki-client on console-ams.rpki-client.org