Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
File:                     08ixCjj4HGTiASB7_DVEwpcq9fM.mft (raw, json)
Hash identifier:          bb6v7/WAEWCW+kfTzB88jWbhYywPQlyTFfnSOpPOBZc=
Subject key identifier:   40:6F:AE:F0:64:34:21:94:4C:F4:FB:2A:0E:84:3D:4E:36:43:21:CB
Authority key identifier: D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3
Certificate issuer:       /CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
Certificate serial:       018F1858E84DF2F3C8B18E1A9473BBC1BD1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
Manifest number:          0AFE
Signing time:             Fri 26 Apr 2024 03:00:30 +0000
Manifest this update:     Fri 26 Apr 2024 03:00:30 +0000
Manifest next update:     Sat 27 Apr 2024 03:00:30 +0000
Files and hashes:         1: 08ixCjj4HGTiASB7_DVEwpcq9fM.crl (hash: oUzMy+jugiEHnKDzuK3LVIiC7WFChALBeqjX2Tj7+nU=)
                          2: ysZfVorUQmswH_FXovyIIoRmcp0.roa (hash: vEL2T3FDGhbO8ezjb+9xo4o6l2aPDp3nmioCLwZOP1U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Apr 2024 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:18:58:e8:4d:f2:f3:c8:b1:8e:1a:94:73:bb:c1:bd:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
        Validity
            Not Before: Apr 26 03:00:30 2024 GMT
            Not After : Apr 27 03:00:30 2024 GMT
        Subject: CN=406faef0643421944cf4fb2a0e843d4e364321cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:96:c2:c4:8a:17:c5:7b:d5:5c:e8:4d:bc:f0:
                    7b:3a:95:ed:0c:98:94:55:88:16:07:3a:a0:c1:ae:
                    78:6e:88:cd:2c:b4:c5:8c:53:6a:6a:f6:68:b5:a5:
                    85:5a:67:52:fa:59:9a:28:83:ec:b2:e8:8c:26:22:
                    20:9c:83:e3:7d:f1:75:87:6b:6b:6c:23:04:e7:53:
                    a7:6d:28:00:85:fc:ad:30:8c:d3:0f:a5:f1:d5:07:
                    f4:2f:fc:2d:39:4f:2f:94:69:62:c6:34:01:7b:a6:
                    ec:6b:7c:58:b7:5c:d7:f2:2b:d7:f5:68:11:a6:84:
                    73:d0:d4:44:37:c8:d9:e3:6e:11:0c:3b:38:d0:88:
                    70:b0:78:7c:e8:fe:0d:60:12:cc:7a:81:a0:d1:c2:
                    61:b0:05:4c:1d:47:15:a4:9c:ae:22:90:22:93:eb:
                    a1:da:c5:8a:bb:0d:eb:6e:34:da:b9:90:22:35:fa:
                    f7:65:23:b8:10:ec:eb:14:a1:47:9d:7f:75:5b:01:
                    d5:9e:cc:7d:db:15:ac:b4:b6:9f:17:5d:b1:01:cf:
                    0b:a2:36:ad:0f:39:fb:3a:6d:04:82:e6:36:21:20:
                    28:66:32:1a:7f:ae:54:35:38:a9:32:95:c1:ec:00:
                    a0:04:a6:8d:4e:b8:ed:49:de:c4:67:8d:2e:74:ea:
                    55:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6F:AE:F0:64:34:21:94:4C:F4:FB:2A:0E:84:3D:4E:36:43:21:CB
            X509v3 Authority Key Identifier:
                keyid:D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:2f:9d:cc:90:76:97:d9:78:3a:1f:0d:46:f7:d2:b1:99:35:
         d5:55:79:45:e7:82:88:16:fe:02:73:44:b8:63:bd:09:df:be:
         5f:18:4c:07:4f:34:ab:00:06:88:15:35:92:f1:f7:f7:64:10:
         3b:a5:8a:60:bd:96:db:85:81:37:60:a1:a4:d0:2c:9d:89:35:
         02:55:fd:87:2f:4e:9a:3b:4c:d5:5e:fb:89:1a:8d:10:63:d0:
         ed:63:53:11:ba:65:1b:d5:0a:ea:fa:38:2a:20:1b:56:9a:6b:
         47:1c:bd:fb:34:62:bb:f9:38:72:f2:6a:84:75:b4:c4:68:60:
         4a:40:dc:52:0a:8c:00:79:03:b5:74:0a:ec:0e:ad:a2:fa:04:
         93:93:de:65:cd:db:17:87:e8:bd:dc:e5:b7:d6:c1:e6:b6:4d:
         14:29:db:cd:38:f0:d9:d7:ae:5a:90:fb:16:1e:19:24:be:cc:
         72:08:c6:f9:cf:4f:dd:f7:e7:97:5d:3c:a7:31:19:0f:05:06:
         73:83:6c:88:89:2b:63:20:ef:5d:f4:4c:1f:26:6a:9f:8e:28:
         b5:3f:69:9e:d4:3b:44:19:e6:b9:c7:d5:c8:c2:75:0f:27:7a:
         ae:0b:79:32:97:1f:1b:3c:76:5a:18:e8:06:2e:52:79:eb:05:
         72:da:1c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:24:38 2024 by rpki-client on console-ams.rpki-client.org