Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
File:                     1-RqCIwAuMSTluwboLU9go3m5Pc0.mft (raw, json)
Hash identifier:          QVLRE7U9Myr1zopHxqhRZkJ1iBxcoMJPbFoeT2510kw=
Subject key identifier:   B8:25:12:9F:74:36:83:6D:94:F7:A4:C1:12:02:D9:A9:79:FB:A3:EA
Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Certificate issuer:       /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Certificate serial:       018F48A178C87165D89B70B32505C6233F0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
Manifest number:          0C08
Signing time:             Sun 05 May 2024 12:01:32 +0000
Manifest this update:     Sun 05 May 2024 12:01:32 +0000
Manifest next update:     Mon 06 May 2024 12:01:32 +0000
Files and hashes:         1: 1-RqCIwAuMSTluwboLU9go3m5Pc0.crl (hash: gAyg79SfTCmHDxllqA5RuTAcNhL7gN7LKf1L6660tdU=)
                          2: TdS5kXAq_qdaaZAQWWL5OhLp4mE.roa (hash: e1wRlh4VFYz1kqpRVUuP1aXN28nKzIblAAP3XfPWMNE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:48:a1:78:c8:71:65:d8:9b:70:b3:25:05:c6:23:3f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
        Validity
            Not Before: May  5 12:01:32 2024 GMT
            Not After : May  6 12:01:32 2024 GMT
        Subject: CN=b825129f7436836d94f7a4c11202d9a979fba3ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:03:b1:bb:2d:bf:37:f1:2f:6c:3e:a0:68:64:
                    5c:0e:c4:cf:9d:7f:91:39:a4:2d:7b:d8:e7:45:1c:
                    1d:19:17:5e:56:e4:14:1b:c2:77:78:3a:5d:16:17:
                    8b:38:8d:1f:35:67:c8:92:ee:24:e0:eb:88:1d:65:
                    94:02:ab:44:16:4a:d0:99:92:f1:e4:9a:6b:38:a0:
                    bb:5a:6e:84:5b:eb:21:ef:c4:83:09:2e:ec:1a:39:
                    7c:b1:2f:ca:b3:b5:e9:b7:12:c0:fd:93:74:9a:17:
                    60:5f:f2:26:77:b1:43:68:73:0b:a5:7b:a8:0b:26:
                    0a:e0:a2:7c:12:80:ad:e9:85:bf:4b:96:6d:4b:e5:
                    41:60:ba:da:fa:34:48:86:ab:eb:56:ee:16:75:64:
                    33:32:40:b5:70:a8:5c:af:04:25:9f:31:21:69:89:
                    52:c6:c5:b1:c9:f6:f9:c7:ad:f0:b2:03:7f:65:b6:
                    0a:13:22:41:bc:a0:20:a8:75:6b:8c:74:ca:9c:27:
                    c4:af:43:e5:8c:d2:83:8b:f5:dd:e0:ff:82:e9:93:
                    40:1e:f5:cd:fc:68:9b:12:b9:d3:18:27:f1:63:c8:
                    90:2b:b7:e8:68:c4:1b:1b:61:19:41:b5:9d:f2:85:
                    56:f8:38:ea:b6:6b:37:9c:ee:53:ef:d5:70:87:c3:
                    0c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:25:12:9F:74:36:83:6D:94:F7:A4:C1:12:02:D9:A9:79:FB:A3:EA
            X509v3 Authority Key Identifier:
                keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:3e:04:76:27:12:c4:6e:d7:60:f5:16:2f:b4:06:d2:6a:67:
         01:04:cb:1e:e8:bc:09:13:91:70:41:3c:d7:e8:78:ea:98:43:
         8d:5b:cb:21:4c:69:2c:0f:41:fd:d1:07:85:53:be:32:0d:54:
         65:b0:5f:5b:14:6e:0f:b5:bd:fe:a8:3d:ad:39:88:4c:a8:3b:
         c1:50:e4:06:c1:38:1d:64:b3:d0:99:61:4c:7c:06:9b:17:2e:
         e9:39:11:2c:b5:90:70:72:b4:08:ce:57:ed:ed:a0:51:0a:9c:
         64:3b:61:b0:c5:3b:6f:ac:c5:da:86:48:c8:05:10:a7:0b:61:
         a2:28:f2:53:c5:ec:d5:09:32:f8:1c:10:71:67:74:ef:1e:f7:
         2e:bc:5d:59:ae:49:d9:06:f3:f1:95:1e:5c:2f:52:2b:21:81:
         6e:a6:cf:d1:27:1e:2a:5d:b7:9b:8a:3b:01:11:bc:e6:29:8a:
         f7:7d:11:f2:57:1c:c1:bb:24:b3:25:64:75:33:c2:40:19:50:
         77:5b:8f:89:c2:dd:c7:11:ae:df:c6:70:9f:83:39:f9:48:8e:
         8c:b3:41:6c:3d:ba:8a:5d:cb:73:35:c4:e6:84:dd:ae:9b:8b:
         aa:7d:af:c1:0a:54:d8:88:06:ee:81:59:b5:e0:ca:7f:fe:3b:
         7f:44:80:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 14:30:38 2024 by rpki-client on console-ams.rpki-client.org