Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
File:                     k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft (raw, json)
Hash identifier:          ZJTzOte9XloY8fr3stt7g9SjTBxonDkjNk2J1mc0YkE=
Subject key identifier:   BC:E6:5E:D5:02:4B:C4:BF:34:B1:5A:DC:16:03:EE:31:90:BF:B0:AB
Authority key identifier: 93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C
Certificate issuer:       /CN=93c64c668eff34740816eda85a459d0c422e063c
Certificate serial:       018F8749AF4AD9C9C0F3C1055CC2CF90610C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
Manifest number:          1108
Signing time:             Fri 17 May 2024 16:01:44 +0000
Manifest this update:     Fri 17 May 2024 16:01:44 +0000
Manifest next update:     Sat 18 May 2024 16:01:44 +0000
Files and hashes:         1: k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl (hash: 3qS5v2+3UJz49qqHpCjSWdQZCezt7JZTIhFK4H1U7FE=)
                          2: n3XMckmiT5Q8JLpKX5NGulBFLuk.roa (hash: Zv4BkPAZZekI+NlDwqCdGfzYlxolQHiX1d7LzjAndXM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:af:4a:d9:c9:c0:f3:c1:05:5c:c2:cf:90:61:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c64c668eff34740816eda85a459d0c422e063c
        Validity
            Not Before: May 17 16:01:44 2024 GMT
            Not After : May 18 16:01:44 2024 GMT
        Subject: CN=bce65ed5024bc4bf34b15adc1603ee3190bfb0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:42:20:16:10:f2:c5:ce:4f:1a:01:7d:0d:c9:
                    a4:29:15:fe:e6:f8:f9:97:6f:a4:b6:66:93:62:fe:
                    94:ae:26:7f:ca:ed:f4:69:b5:d8:6b:f2:c6:aa:5c:
                    f8:9d:87:5c:92:81:44:02:b5:13:7e:81:e4:53:97:
                    b4:bc:1a:9f:a3:c2:4c:de:ad:e3:71:9f:56:95:6e:
                    96:6f:48:88:fa:e4:c1:5e:51:cd:cf:01:a9:38:a5:
                    c8:5a:92:c4:8f:f3:a9:9b:9b:48:1b:0a:6c:1b:e4:
                    a2:03:e8:35:28:d7:ea:88:a9:78:0b:bf:aa:7c:52:
                    b2:4c:5e:5e:fa:b8:ec:fc:4c:ed:e5:31:91:75:13:
                    34:37:55:7b:be:43:ef:21:05:ac:f5:20:f4:76:ee:
                    72:3a:16:5f:f1:44:10:4d:9e:16:ce:b8:b6:f8:9d:
                    e2:1f:8f:b5:d2:51:c0:88:d3:cc:1f:35:2a:08:08:
                    16:08:7a:88:44:f6:ef:58:b9:0d:de:ea:c9:8d:9d:
                    90:a3:29:5c:cd:26:1d:be:21:bb:51:90:98:88:eb:
                    89:fe:17:c3:04:46:00:d9:ee:b8:fb:6e:8f:d4:76:
                    30:fa:d4:77:6c:84:b4:02:a9:fd:4c:a7:10:d4:7a:
                    2b:18:a0:b3:ec:fe:bf:dd:12:b5:ba:ea:95:55:e9:
                    a1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E6:5E:D5:02:4B:C4:BF:34:B1:5A:DC:16:03:EE:31:90:BF:B0:AB
            X509v3 Authority Key Identifier:
                keyid:93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:68:5b:f5:18:46:ce:3d:8e:cd:ca:83:7b:8c:06:9f:6d:f3:
         1d:2a:8e:90:4d:2d:2d:28:8c:0e:b1:ff:8e:04:41:3f:5f:7b:
         32:41:9c:86:fe:34:82:e3:1d:db:2d:f4:e7:d7:9b:90:b3:f7:
         c9:54:62:a7:71:78:a7:d7:9e:b1:c3:5c:1c:ab:b2:02:33:c3:
         8f:d6:97:13:63:e0:45:85:3a:6f:c9:07:31:b1:1c:70:76:76:
         8c:9d:21:f8:01:53:c2:5d:67:64:0f:d4:94:10:95:5c:cd:c5:
         60:43:c5:aa:70:f1:c7:1c:23:f9:69:1b:24:16:76:31:a6:ab:
         e3:31:99:62:f9:fe:94:3c:1d:fe:63:f3:3f:29:b7:94:e1:dd:
         c0:c0:ba:ff:e6:a4:09:09:04:82:4c:9e:7b:a6:db:a7:a8:79:
         a1:58:86:e4:02:8f:b4:b0:3c:6a:a2:dd:02:09:82:8a:30:e0:
         76:dc:c4:0d:4e:d9:e9:a4:80:8d:68:dc:aa:ba:3b:63:9f:6a:
         32:2e:af:d5:7c:8c:79:ef:0d:14:83:44:37:73:a4:ff:88:81:
         9c:3b:23:98:bc:f4:9a:53:fe:29:b6:91:d6:94:55:9c:70:00:
         f1:32:31:6e:ab:2e:13:de:28:d9:9c:cb:a6:d2:e7:9d:b9:6f:
         e7:17:73:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:23:40 2024 by rpki-client on console-fra.rpki-client.org