Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
File:                     2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json)
Hash identifier:          ov8hnPjtFNNHRZUQp+9ie8cSyYhL/GR+AW0hbmMIKNU=
Subject key identifier:   FF:24:F3:42:2C:86:29:0D:46:B6:54:1A:BD:54:6E:1F:51:DB:C0:83
Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
Certificate issuer:       /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Certificate serial:       018F467C47D9C50D7F5C8D67436B40041EEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
Manifest number:          07E1
Signing time:             Sun 05 May 2024 02:01:40 +0000
Manifest this update:     Sun 05 May 2024 02:01:40 +0000
Manifest next update:     Mon 06 May 2024 02:01:40 +0000
Files and hashes:         1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: Oi1S0jFBXmOix9bKLZerLyoGaWxkaMwwKWmrGLWrH8g=)
                          2: zvdo8v9xyCdy1mKyVrWjfGNxMHM.roa (hash: Au0agW13xl3mH0Bx/FwdF4hcEhPlEoQV0ckZrM2DC20=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:7c:47:d9:c5:0d:7f:5c:8d:67:43:6b:40:04:1e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
        Validity
            Not Before: May  5 02:01:40 2024 GMT
            Not After : May  6 02:01:40 2024 GMT
        Subject: CN=ff24f3422c86290d46b6541abd546e1f51dbc083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c8:f9:0c:52:6c:3f:a5:43:25:78:2d:b5:6a:
                    cf:13:8b:67:87:da:c3:36:4d:bd:1a:d9:28:c2:3d:
                    26:24:6d:3e:1f:28:31:0f:a9:e2:38:f8:16:2f:9d:
                    b2:8b:54:74:79:4b:ab:b4:dc:a3:18:b0:10:f8:59:
                    da:3c:49:a8:29:14:51:8c:26:10:fa:5e:6e:f9:eb:
                    d5:fb:4f:d5:0e:28:ef:65:26:42:ee:15:0b:bf:45:
                    88:2e:2d:13:4a:c1:83:50:fa:35:b1:cd:16:c7:c4:
                    08:ed:41:6d:f3:fd:f2:90:e3:4c:98:93:3e:1e:71:
                    db:0a:b8:59:33:e3:0e:06:bd:c6:81:ae:ad:ac:59:
                    82:40:75:f3:c0:52:39:34:a2:95:a8:45:de:48:69:
                    e8:27:a5:40:f9:1c:bd:0f:42:d6:e3:df:40:70:19:
                    21:7d:5e:07:8f:25:0c:69:59:65:0e:74:46:7a:fd:
                    e1:eb:63:13:3e:ab:4d:f3:2f:eb:64:0d:4a:64:81:
                    ba:2f:70:52:14:03:cf:78:75:2b:93:61:a0:2d:7c:
                    6c:97:bb:98:35:60:d3:fd:72:38:19:a0:8c:6c:b0:
                    59:4e:38:6c:b5:55:5c:f6:70:2d:00:ee:71:6d:8e:
                    f8:02:37:40:58:8d:2e:7a:e4:b8:38:4a:66:54:31:
                    cc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:24:F3:42:2C:86:29:0D:46:B6:54:1A:BD:54:6E:1F:51:DB:C0:83
            X509v3 Authority Key Identifier:
                keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d6:b8:dd:df:20:3d:22:00:5a:91:99:e7:99:35:8b:13:88:
         83:07:d7:d2:4a:ac:55:ca:7a:67:3a:71:aa:f0:3d:6e:0a:67:
         53:ee:db:97:7f:cd:80:ba:77:0a:cf:a5:3d:06:f7:63:c8:04:
         2b:db:46:ba:88:53:78:c9:1b:b7:65:5c:79:4a:ef:83:1f:b1:
         38:15:8a:70:be:e9:b3:6e:0d:0f:21:a0:cf:b5:39:f6:24:35:
         cc:7b:6c:7a:80:4c:07:de:42:5f:0f:85:11:98:68:ce:a8:53:
         71:43:22:eb:3d:2d:71:9d:96:a1:e6:73:ea:01:f5:a2:62:aa:
         1e:6b:63:f1:bd:fd:f1:a1:ad:0b:da:63:c7:5f:90:f7:41:b2:
         4e:e7:dd:27:45:d4:d4:1a:a0:cf:7c:11:1e:4c:77:db:c4:64:
         22:8e:49:4c:77:03:89:af:a1:c7:d3:17:74:14:75:f8:b4:ef:
         cd:4c:df:b5:83:ce:e3:90:c8:52:ee:8f:73:29:cd:a8:98:8f:
         eb:9c:20:90:2c:77:f6:1c:06:30:d9:df:29:8b:53:12:af:50:
         0c:43:e5:0e:cb:2d:06:e9:6e:c0:f1:8a:ee:da:2f:e6:56:0c:
         29:da:09:42:73:15:ef:a2:39:e4:89:3b:42:0a:69:f2:97:d9:
         6d:9d:68:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:20:44 2024 by rpki-client on console-ams.rpki-client.org