Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File:                     mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier:          rvwPRmrTQa5gp8vcfqP/wOOJq786Z9bThyyFBIBlej0=
Subject key identifier:   4B:7D:74:4C:AB:F4:70:DA:C2:7F:DA:10:13:83:57:93:20:09:0D:1A
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer:       /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial:       018F87ED7564C6736100693C44B2DEAA7FF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number:          1108
Signing time:             Fri 17 May 2024 19:00:37 +0000
Manifest this update:     Fri 17 May 2024 19:00:37 +0000
Manifest next update:     Sat 18 May 2024 19:00:37 +0000
Files and hashes:         1: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: RP7J2pGKOrcW57h9/FvfdvvUWVOp08ZN1p8o5tULwpk=)
                          2: p0GYzovoibRpIcNL4x5zm5sbcEM.roa (hash: La9kggZVzZnTCmHjgvtIBc9XIxyweBnCuqu6zwbucBc=)
                          3: tKcJ7cK8YTDpJbcUUK_4eURk_X4.roa (hash: IzsPIF5RtaP+WwJ3d64OUgSLbl03PGkJlsk3ktJx3X0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:75:64:c6:73:61:00:69:3c:44:b2:de:aa:7f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
        Validity
            Not Before: May 17 19:00:37 2024 GMT
            Not After : May 18 19:00:37 2024 GMT
        Subject: CN=4b7d744cabf470dac27fda101383579320090d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:59:b5:a0:f1:f2:b8:9f:91:9b:17:db:8d:77:
                    ec:fe:a8:38:a4:42:47:51:00:a5:52:24:8b:f2:7c:
                    a4:7f:2c:40:12:e6:18:c8:a3:ee:6a:57:8e:1d:ea:
                    62:b2:68:c1:86:62:dd:52:76:30:53:c5:57:04:2e:
                    ff:33:85:66:0e:35:aa:98:b8:1b:90:c8:c8:43:9a:
                    b9:4a:8a:22:89:64:6a:3d:fd:d8:8c:8b:49:ea:19:
                    05:67:75:53:64:d1:91:65:6e:43:17:06:b3:57:ea:
                    47:ee:59:d4:4b:a9:80:10:5c:39:cd:1f:e8:79:cf:
                    94:52:5d:94:eb:2b:8d:ca:3d:1f:a0:71:60:2d:50:
                    42:66:f6:db:8b:42:8f:be:7e:2c:ed:3e:a8:67:6a:
                    1d:57:37:51:31:16:c5:f4:f6:63:a3:6f:ef:0a:e3:
                    15:7b:40:c8:d1:56:b2:b1:b8:c4:c3:31:49:63:0f:
                    a2:28:14:de:a4:99:79:d9:b6:a6:89:24:dd:f5:10:
                    c3:c3:7d:27:68:b5:4f:6a:82:27:c3:43:69:7d:b3:
                    32:61:9a:60:1e:fb:95:d4:5e:35:82:f1:14:ce:f4:
                    22:91:5e:40:99:ab:d2:ab:2e:7f:42:dd:86:30:42:
                    11:e1:a1:0a:57:dd:41:8a:5c:71:5f:f1:44:8c:1f:
                    0c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7D:74:4C:AB:F4:70:DA:C2:7F:DA:10:13:83:57:93:20:09:0D:1A
            X509v3 Authority Key Identifier:
                keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:fe:37:46:4e:cf:d1:eb:35:c6:a0:ca:19:0c:02:01:43:ce:
         13:a5:40:70:f1:b5:e5:64:15:b1:69:35:59:17:0d:69:15:da:
         d3:31:40:f3:b2:55:bc:b8:64:50:5e:e2:86:8f:c0:27:c6:08:
         76:89:84:67:dd:e7:b8:9f:94:81:4d:1f:94:c2:80:da:3c:17:
         1c:bd:be:1a:2e:43:b8:50:27:2b:3e:e3:1c:99:7f:81:ec:a7:
         d6:28:20:1d:2b:d5:e1:8e:94:c3:9e:91:31:26:2f:f9:d5:41:
         bb:12:0f:e8:ef:15:07:22:c6:af:7a:1b:6e:2e:55:63:53:61:
         46:47:4f:3a:29:bd:dd:4a:01:64:ea:38:02:2d:b2:b8:85:8d:
         4d:8f:9f:26:8d:a2:cd:28:fa:a3:48:26:20:08:3e:ae:e3:b5:
         19:5e:60:ec:db:c3:af:2b:e8:0f:a7:fa:1b:c2:72:5c:a9:a9:
         de:48:9d:ea:6a:f4:4b:75:7a:c4:17:96:10:84:7b:64:79:0b:
         f6:b8:24:34:a4:06:99:22:87:2e:b2:ee:1e:d4:b9:1e:88:85:
         b2:80:0d:32:84:bd:4d:2a:7e:1a:03:50:ec:16:07:2d:fd:e6:
         bf:5f:12:c9:4a:6b:25:98:f8:7f:74:19:0a:4b:71:93:a5:48:
         98:a7:e3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:29 2024 by rpki-client on console-fra.rpki-client.org