Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
File:                     F84IIXrG5mPAjdFhj0mtpOvk_tw.mft (raw, json)
Hash identifier:          28x6vEAlEwWi0sf+W9NNUWPzIl8OKgA+u+nn61l3kdY=
Subject key identifier:   9E:74:19:97:62:CD:35:3A:12:D7:BE:7B:20:C1:34:5E:50:52:03:6F
Authority key identifier: 17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC
Certificate issuer:       /CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc
Certificate serial:       018F3BF8DA4F7267711CB5C23CB4F7A86EC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
Manifest number:          08A0
Signing time:             Fri 03 May 2024 01:01:55 +0000
Manifest this update:     Fri 03 May 2024 01:01:55 +0000
Manifest next update:     Sat 04 May 2024 01:01:55 +0000
Files and hashes:         1: F84IIXrG5mPAjdFhj0mtpOvk_tw.crl (hash: mSJ4JMesEBVEoVlAuxS3u9fVRa4x2BYYBwl36fRRKNY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 00:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f8:da:4f:72:67:71:1c:b5:c2:3c:b4:f7:a8:6e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc
        Validity
            Not Before: May  3 01:01:55 2024 GMT
            Not After : May  4 01:01:55 2024 GMT
        Subject: CN=9e74199762cd353a12d7be7b20c1345e5052036f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:88:4e:2a:1a:45:3a:67:a0:ec:ff:75:57:85:
                    3e:e9:0c:a6:d8:9a:dd:9b:00:ea:0e:18:77:9c:79:
                    5a:3f:1f:69:c3:01:d2:1b:f3:97:2c:df:ae:b7:49:
                    23:3c:71:ed:c0:b2:1b:51:a0:fa:e4:c9:9e:af:64:
                    4c:32:64:7f:b1:01:3c:8a:62:7e:92:92:65:13:57:
                    52:d2:12:f4:64:1d:63:c5:4a:a3:16:f9:fc:6a:ce:
                    e8:e4:1b:c8:7f:8c:15:d5:02:24:15:bf:29:25:c8:
                    ce:fb:2e:7e:b9:71:f8:1b:43:7d:81:38:78:1f:56:
                    5f:7c:d3:09:d3:a0:29:68:93:f3:bd:79:5d:d4:80:
                    f0:52:1e:b7:e8:b7:94:3a:2b:0c:cb:7b:26:db:62:
                    2d:6e:e3:38:6c:d2:44:6f:fb:c2:f7:57:4a:97:10:
                    35:cf:48:b6:74:4e:fd:fb:0b:90:df:44:9b:58:6c:
                    da:15:db:7e:3a:60:71:37:e1:2b:58:53:db:18:a3:
                    c9:d0:6d:cf:8e:da:dd:47:9c:de:af:3a:1a:16:2c:
                    5a:8f:8c:5d:18:39:ce:cf:e7:3c:d2:11:cc:6d:4c:
                    53:11:7c:80:fd:42:68:a7:11:ed:2f:99:9b:ae:e7:
                    c3:c9:71:4b:14:e7:c7:11:d3:f7:33:17:62:e9:e2:
                    26:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:74:19:97:62:CD:35:3A:12:D7:BE:7B:20:C1:34:5E:50:52:03:6F
            X509v3 Authority Key Identifier:
                keyid:17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:0c:bc:d6:94:82:ec:1a:31:02:5f:8a:4a:c2:95:10:7b:ed:
         65:cb:f7:1c:d4:bd:26:fc:c1:79:a7:89:f3:78:aa:60:c1:fa:
         bf:0f:0d:7f:7b:5b:4b:7e:b4:19:61:88:d3:2f:dd:f7:c8:ec:
         86:fa:d9:b3:74:14:fe:4c:01:c9:4f:54:27:ad:10:10:77:44:
         b9:d5:ce:ce:99:d1:4a:53:e3:d3:a8:3e:86:c3:bf:3c:ca:b8:
         0c:e9:bc:26:6c:1b:7f:cf:d6:84:40:06:a1:5c:26:36:19:c8:
         fd:15:97:ff:0c:9b:eb:75:cb:de:c4:91:2c:4d:59:10:1a:8a:
         74:5e:75:b9:f5:47:e3:47:0a:5b:f6:2f:d1:43:a8:8a:4f:31:
         45:ae:f7:c0:2f:b8:bc:d3:8c:90:72:30:1f:ed:c9:8e:12:b4:
         7c:f9:75:3c:bb:bb:bc:b5:0d:0d:22:af:58:68:98:f7:f1:9d:
         51:37:a5:1d:68:8d:c9:4a:53:ba:4e:44:56:42:b6:e1:bb:0a:
         eb:79:e8:54:d0:40:ba:6a:08:41:ce:06:92:40:9e:7e:a7:f6:
         08:c9:df:bc:b2:3f:4b:dd:d5:a1:9c:95:00:c6:f3:ca:d2:c9:
         f2:ec:f2:d6:b4:e5:38:9c:fb:66:38:ac:4a:2d:0f:9b:36:65:
         8d:e5:29:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:29:43 2024 by rpki-client on console-ams.rpki-client.org