Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
File:                     0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft (raw, json)
Hash identifier:          e4GezOMnI5O2k0WzC+yVtl67QfwE7MmHUwWBNiFLiv4=
Subject key identifier:   A2:A1:6C:B8:55:2B:76:F0:0D:59:47:C3:EA:E5:53:01:DC:E2:AA:17
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Certificate issuer:       /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial:       018F46EA1534C2DD4898EAB9F8D798C1E35F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
Manifest number:          0B2C
Signing time:             Sun 05 May 2024 04:01:36 +0000
Manifest this update:     Sun 05 May 2024 04:01:36 +0000
Manifest next update:     Mon 06 May 2024 04:01:36 +0000
Files and hashes:         1: 0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl (hash: Ot6thVzwSEBFGuXsI0ivZeUhB2Furdpntu+Fta6UW7c=)
                          2: HZks6rUp4qDByVVDUSeruilIZF8.roa (hash: wbtyBWjZAPKsN7F9FS9PHRCEchE8w86EltPXU7R360c=)
                          3: L4replaSmBkVrtCczGyU9xRgiew.roa (hash: 4dhI2aUP6nN1kt9EFPYwY64nLx/5AlrVMmUGVnv+b1k=)
                          4: ck4kWYzF08V03G_mvJ4cjfKIx4E.roa (hash: EQmZ+HDKtEqkPTVSDQRNmL0TD9UyEo+pf2x9YyRHHX8=)
                          5: lN8Lc53ZWBNC6b7Urx9R32BBkX8.roa (hash: FFrzyBAy0b8coQCrj+O+xzIp/rl0/tLVEYxfL55Ion4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:ea:15:34:c2:dd:48:98:ea:b9:f8:d7:98:c1:e3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
        Validity
            Not Before: May  5 04:01:36 2024 GMT
            Not After : May  6 04:01:36 2024 GMT
        Subject: CN=a2a16cb8552b76f00d5947c3eae55301dce2aa17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:74:34:f4:eb:ea:c9:cf:7f:9f:d7:da:65:7f:
                    db:d1:6a:2d:39:b4:d1:97:fa:4e:3a:e0:cb:d3:21:
                    be:f7:a0:c6:ec:0c:b4:12:90:9b:21:4d:40:ff:5f:
                    51:83:52:aa:30:db:b6:20:c6:a9:4a:39:b5:81:d6:
                    70:3a:9d:08:99:2f:ff:79:20:1a:2b:23:5e:aa:7f:
                    d9:8c:aa:5d:7d:4b:7c:55:60:3d:8a:90:36:32:0f:
                    1c:00:e1:38:54:8a:2d:23:19:ab:34:77:86:ab:bf:
                    8b:3b:92:d4:41:ba:e8:d4:b6:39:77:06:70:ae:b4:
                    68:04:60:c1:f9:b2:e1:26:1a:86:7c:f1:9d:07:1a:
                    69:74:ba:bc:05:b5:82:8b:01:ec:78:fe:31:d5:28:
                    06:1f:f3:b8:e9:23:61:5b:36:09:11:e7:95:09:7e:
                    40:bf:87:02:bf:20:f3:b9:4d:dd:6f:db:80:60:bb:
                    31:5f:d1:c0:bd:95:7c:ad:14:03:69:1c:e2:69:df:
                    7c:ae:e9:08:aa:f0:3e:18:a7:e2:43:e1:69:03:9e:
                    78:46:e8:40:76:a3:ec:a9:b5:ff:80:54:a6:db:bf:
                    54:b6:8d:98:50:e8:5d:68:a4:a5:33:f6:d9:b3:5d:
                    15:e0:16:e7:7a:eb:65:51:de:31:05:a2:b7:d7:28:
                    56:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A1:6C:B8:55:2B:76:F0:0D:59:47:C3:EA:E5:53:01:DC:E2:AA:17
            X509v3 Authority Key Identifier:
                keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c5:4d:1c:e8:2a:3b:d1:00:29:5c:82:9d:54:e3:36:25:61:
         ac:a0:77:44:1a:af:da:0a:4b:97:b1:e8:f1:39:ce:13:83:50:
         17:ca:3b:d9:66:55:e7:e6:ca:df:81:c5:6c:cc:3c:42:96:88:
         3f:7b:c0:28:18:2a:fd:9a:00:b2:16:0e:d4:7a:7f:fd:d7:88:
         8c:b2:dc:cc:32:85:d0:cb:0d:6f:d1:3e:61:f4:36:ea:8d:e5:
         bd:0b:30:44:a7:d3:35:82:48:61:dd:ce:14:6a:4c:d4:77:11:
         e9:c7:b0:2c:5c:05:24:1a:13:fc:25:af:23:a1:86:38:1c:ef:
         59:90:37:64:37:9c:4e:03:ab:2a:80:d1:fe:4f:63:27:f1:4c:
         16:94:20:f9:ac:1c:d5:02:40:e7:d6:a5:87:c3:a8:33:f6:91:
         98:98:bd:b1:00:cc:a2:50:c2:95:f5:77:1c:d5:79:3d:ac:b6:
         ec:6f:35:c5:c2:6b:67:6b:fa:ea:04:32:b1:9a:6c:b5:cd:c3:
         ae:8e:b9:52:f1:24:53:40:db:56:f4:f9:5d:6b:29:f0:03:82:
         71:dc:44:81:cb:f9:4e:bc:2f:6b:f8:88:46:62:57:a5:45:bd:
         7d:f7:a0:cc:06:6b:63:b6:95:23:30:7f:0a:b2:3e:4d:eb:0b:
         91:57:c0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 04:36:14 2024 by rpki-client on console-fra.rpki-client.org