Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
File:                     1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json)
Hash identifier:          Z5Rd+2RjwPCux8XGzskW+J7JnUhOuJX9N9Qim+1sfiI=
Subject key identifier:   2E:00:C6:07:26:EF:70:C2:90:D4:50:A4:63:22:AD:CA:AA:5A:21:C3
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Certificate issuer:       /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial:       018F87494641C09B42D495B94A77E8F3D554
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
Manifest number:          018D
Signing time:             Fri 17 May 2024 16:01:17 +0000
Manifest this update:     Fri 17 May 2024 16:01:17 +0000
Manifest next update:     Sat 18 May 2024 16:01:17 +0000
Files and hashes:         1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: FXWtmNCccITBAfvKkGJH9wn4A0Mi/by6o4K3f+Tv+g8=)
                          2: d96WQOtqZkSN1Gwmir9FCwW8-ZI.roa (hash: 89RyxClnjB0dNoVX+1W2pg++iXn/Wp93F/0wJQM1fv8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:46:41:c0:9b:42:d4:95:b9:4a:77:e8:f3:d5:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
        Validity
            Not Before: May 17 16:01:17 2024 GMT
            Not After : May 18 16:01:17 2024 GMT
        Subject: CN=2e00c60726ef70c290d450a46322adcaaa5a21c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a8:57:e9:b2:07:de:7d:8d:59:bb:18:40:d4:
                    3f:46:2f:77:5c:49:1f:a1:bc:6e:2a:fc:45:2f:76:
                    d0:29:dc:84:d1:af:82:c7:58:61:e6:ee:1d:5e:f9:
                    31:35:ff:65:2c:0d:35:e4:98:30:0d:25:f3:33:5d:
                    65:9e:45:f1:4e:a3:85:f3:a7:50:1a:e3:9e:9c:01:
                    6e:be:3d:49:c7:ee:19:48:92:da:f2:fb:e0:66:00:
                    fd:83:af:c9:6e:f8:5b:25:11:11:00:5d:65:fd:d2:
                    b3:33:3c:8a:44:fe:bb:b8:c6:89:8d:a8:c0:96:b1:
                    ae:c6:2f:0e:44:ad:2f:0e:54:98:52:21:a6:16:e5:
                    7d:5d:3d:32:4b:69:bf:62:57:0b:a3:eb:6a:db:e0:
                    b7:da:09:a5:f9:df:2c:97:e9:e0:ee:c9:ca:c6:36:
                    27:59:76:42:77:f1:e9:47:39:c1:6e:fe:f9:b5:29:
                    ad:93:8c:7c:e2:19:d6:84:bc:46:19:f0:22:71:5a:
                    b7:63:a1:f3:ff:d2:a8:87:c9:21:6e:61:9c:f0:63:
                    9b:c2:a0:df:59:53:88:3a:3f:57:2f:18:d1:94:b7:
                    4b:8b:cd:75:de:9e:de:1e:69:a0:d4:af:d6:bf:bd:
                    34:6f:30:2a:29:40:34:62:55:2c:22:bf:d2:3d:b1:
                    41:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:00:C6:07:26:EF:70:C2:90:D4:50:A4:63:22:AD:CA:AA:5A:21:C3
            X509v3 Authority Key Identifier:
                keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ef:3b:ba:25:5b:5f:72:0a:ee:03:7b:47:3e:dc:47:74:37:
         1b:18:65:83:5f:72:29:17:51:24:10:b7:41:36:ae:61:28:65:
         54:fa:c7:6a:76:b7:c1:de:51:32:93:93:56:08:f4:71:99:00:
         ec:83:90:df:0f:f4:af:a1:40:92:81:18:45:95:48:8a:5f:5a:
         36:7b:09:60:32:97:41:cf:76:2a:56:45:e3:6c:2d:91:24:36:
         93:01:84:78:f8:14:51:df:e0:e8:ad:a1:10:8f:49:06:5e:39:
         23:4d:cc:63:f4:18:d5:56:10:b0:bc:a4:fa:ac:64:b1:05:aa:
         45:95:8e:65:93:b4:18:4e:e8:d2:6b:fb:82:ae:28:02:be:f7:
         ac:59:8b:5b:71:ae:31:f7:cf:8c:f2:19:b4:a9:d0:84:d2:e8:
         33:7d:4e:23:bb:74:d2:79:4b:1c:c9:87:e0:bb:ca:08:b2:23:
         f5:88:dd:19:12:64:9c:5c:ac:8d:68:67:9e:ee:28:58:8f:77:
         98:4e:ff:ef:95:a4:a9:0d:ab:95:e0:0f:24:95:c7:7a:b2:d5:
         cc:9f:f6:e4:5c:f9:f6:16:98:b9:c2:b3:f3:50:59:32:ed:11:
         05:b1:1a:12:6a:37:f7:9e:f7:b8:97:7b:3d:8d:ed:30:c5:54:
         1e:61:9f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:23:41 2024 by rpki-client on console-fra.rpki-client.org