Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
File:                     08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json)
Hash identifier:          Tad63RHitne37Z+WoWzKJadmyVwiNnr+sQOnY3JvykU=
Subject key identifier:   64:36:A8:B0:9C:34:1C:17:CF:B7:1E:BD:BE:77:00:65:3C:C9:41:11
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Certificate issuer:       /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial:       018F44566F0D30BFBDD725EEA5F36694E34D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
Manifest number:          0A4D
Signing time:             Sat 04 May 2024 16:01:05 +0000
Manifest this update:     Sat 04 May 2024 16:01:05 +0000
Manifest next update:     Sun 05 May 2024 16:01:05 +0000
Files and hashes:         1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: kCcVz/cXzfMDM96BWfG+B3IdMiRaHlXT2/0YZ4XaGYc=)
                          2: GijxWA6tn4oaFU-p7yYRtLYS0qI.roa (hash: ZKFqXH3GoI3lhezJ8ENZsYs4V2VCYI0+2HT7UsgfHo0=)
                          3: HHTP7IxCjkSLc9YMbfscMlkIbrI.roa (hash: NkrRLUiM7IsWh8uXBQqHHA7PzbIyplOiba6A8GdYgvg=)
                          4: lfTJm8Jozkyjdg2vZx6igTpsv2o.roa (hash: 1hODlYCb2ErTn+XdAJcw6VNFZhMQAd1nL3ro3sJ3nu8=)
                          5: msYggzHFe-pP8-gJYimbbCq9UyI.roa (hash: XISeGGw817R/9OfQpPMedHLAojxcRYepJDAc341WQdQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:56:6f:0d:30:bf:bd:d7:25:ee:a5:f3:66:94:e3:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
        Validity
            Not Before: May  4 16:01:05 2024 GMT
            Not After : May  5 16:01:05 2024 GMT
        Subject: CN=6436a8b09c341c17cfb71ebdbe7700653cc94111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:45:4c:7b:06:74:8e:00:32:81:76:7c:61:b6:
                    ac:d2:ca:a0:70:68:19:93:b2:e3:d3:4c:cb:15:e9:
                    2a:94:9e:14:21:f4:64:27:61:8e:12:ea:ff:1c:ce:
                    03:0c:1c:16:00:1a:f4:f2:d4:8f:ef:ea:76:26:b5:
                    41:cf:e2:d0:11:10:ad:40:32:89:40:19:0c:9d:83:
                    a7:20:e3:2e:0c:4c:dc:98:c2:fe:28:d9:2d:22:a4:
                    f9:e2:a0:12:01:37:21:7d:f5:a6:23:22:44:99:9c:
                    9e:cf:ff:d2:99:42:f3:92:32:c1:b4:da:96:ff:ae:
                    a7:ed:ce:ec:4f:7c:d1:af:b7:86:6c:20:52:3c:59:
                    7c:ab:cc:b4:40:15:13:ef:04:4a:d4:08:d3:0a:f9:
                    f2:86:84:a3:59:2f:3d:b6:75:fc:f2:2a:18:16:05:
                    61:4f:74:2e:58:39:b9:98:b7:0b:fb:2e:78:39:1d:
                    34:9d:43:01:b9:f0:53:65:c3:1d:cc:10:95:84:8c:
                    d9:c9:b3:d0:98:e3:fa:b0:ee:ef:f1:e6:28:4f:7a:
                    ed:b5:9e:cc:c5:81:9b:3b:37:84:2e:ab:3f:24:c3:
                    b5:aa:74:7d:69:fb:d8:ca:ce:ae:b6:3d:d3:4c:f9:
                    ac:b4:5d:57:ad:3b:fc:a7:f4:e2:dc:1f:1e:4a:75:
                    c4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:36:A8:B0:9C:34:1C:17:CF:B7:1E:BD:BE:77:00:65:3C:C9:41:11
            X509v3 Authority Key Identifier:
                keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c0:dd:17:e5:6c:00:81:6c:ac:58:aa:6a:59:d9:b1:e4:94:
         b9:e4:0f:73:b3:c1:91:8d:9a:c4:ba:7b:41:b9:64:e2:aa:b4:
         11:1b:ca:a8:dd:68:3d:54:67:10:94:db:8b:b9:35:7d:48:3b:
         91:82:83:a4:d5:ff:85:58:a4:91:92:f7:3b:e2:db:fe:a1:42:
         60:2d:96:b6:a2:21:33:42:dd:53:77:93:3f:91:9b:d0:21:b2:
         9f:62:56:13:cb:a8:ab:66:76:b5:20:94:ff:e7:b3:eb:33:3b:
         b4:3b:bf:c3:1b:f7:f8:bd:2d:5f:ec:d7:c5:5c:f9:f7:35:f6:
         56:2c:58:9e:77:f2:f4:26:bb:26:2d:a3:c9:4c:c6:06:c2:94:
         12:48:65:f9:2c:b3:fb:cd:00:a2:e5:5f:06:42:8f:ad:4d:fb:
         55:45:31:dc:54:9b:cb:ef:fe:3c:04:81:f7:35:8e:ce:65:4d:
         89:09:2d:0a:d4:d0:1a:b0:d5:f0:b2:77:37:df:fa:37:f7:ad:
         05:0a:ba:03:3c:54:f1:74:eb:39:49:dc:d4:68:f7:12:5b:4c:
         34:6a:89:4f:16:4a:7c:e0:9e:a5:6f:6d:01:ce:5d:4f:14:16:
         85:df:9f:1d:0d:fa:69:b0:00:7a:fe:d1:91:1a:a5:fa:75:70:
         a8:19:25:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:51:23 2024 by rpki-client on console-ams.rpki-client.org