Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
File:                     HtVdI1ecZBJxVa72UGlueVMdUI0.mft (raw, json)
Hash identifier:          kYsSaAwPDXVcXdxfGDy8M3dAiKRjlN9Y3QgBaoiJWUw=
Subject key identifier:   F0:5F:04:18:85:97:79:9F:4D:FA:F7:CB:BC:C8:73:AE:EE:B9:11:FF
Authority key identifier: 1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
Certificate issuer:       /CN=1ed55d23579c64127155aef650696e79531d508d
Certificate serial:       018F4DFE5D450C04657220948133875A5EF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
Manifest number:          0DA8
Signing time:             Mon 06 May 2024 13:01:06 +0000
Manifest this update:     Mon 06 May 2024 13:01:06 +0000
Manifest next update:     Tue 07 May 2024 13:01:06 +0000
Files and hashes:         1: HtVdI1ecZBJxVa72UGlueVMdUI0.crl (hash: m3tSMvCvMUYOJ337gxenDwCT6tsH0zcfLda9SVnccRU=)
                          2: _p1REnvTwxPVgwkfSseWI_paejg.roa (hash: LcCpfdwyxrmyDtkePKtd55r7JQkFyxhTXkoetAE6qos=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:fe:5d:45:0c:04:65:72:20:94:81:33:87:5a:5e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ed55d23579c64127155aef650696e79531d508d
        Validity
            Not Before: May  6 13:01:06 2024 GMT
            Not After : May  7 13:01:06 2024 GMT
        Subject: CN=f05f04188597799f4dfaf7cbbcc873aeeeb911ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5a:85:e3:32:7a:8a:a0:94:20:d4:2b:89:a0:
                    75:e2:be:7b:53:5e:ee:1d:65:82:07:35:d0:79:a5:
                    ee:34:df:e6:3b:88:db:6a:8b:d9:ce:c6:ac:34:3a:
                    c6:68:8f:c0:0b:3c:a4:c9:c6:8e:f1:ca:0b:0f:71:
                    a9:06:ca:8f:e3:d9:41:fd:a1:c1:d1:8f:43:d8:fe:
                    1a:a8:12:f3:04:2e:79:1d:e4:bd:c0:ad:e3:d5:11:
                    1c:4e:0f:2c:60:6d:a1:45:ba:b9:fc:1d:eb:d3:23:
                    c5:1e:8f:f0:6b:d5:2c:53:00:3e:6a:58:8e:49:5d:
                    bd:35:fd:b9:58:0b:4b:bc:ec:84:62:2c:28:e7:87:
                    47:2c:d5:6e:eb:b8:c2:0f:38:15:07:b7:97:04:81:
                    78:ed:8e:46:fc:4c:f6:b3:c4:68:4f:53:ff:2b:61:
                    c5:66:9b:34:5b:1a:00:e9:e4:48:c6:91:80:c9:34:
                    0b:70:ce:e5:d0:31:9d:43:1a:47:c5:31:5f:99:70:
                    a0:2b:5d:d8:f1:3a:25:3c:b0:26:ab:c5:43:96:63:
                    85:a5:08:e6:37:b2:dc:e6:57:47:2f:d2:ed:8f:9e:
                    b4:44:65:da:a8:57:90:8e:19:6a:21:00:1d:4b:81:
                    cd:54:61:81:52:37:a2:44:22:7f:14:76:9c:43:78:
                    f8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5F:04:18:85:97:79:9F:4D:FA:F7:CB:BC:C8:73:AE:EE:B9:11:FF
            X509v3 Authority Key Identifier:
                keyid:1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:a3:06:cc:28:ea:b9:61:cd:c1:2a:46:0f:67:01:81:74:fd:
         30:43:6b:09:15:41:64:21:2a:76:70:22:a2:21:b6:cc:cd:13:
         4c:64:fb:63:45:ba:72:3e:87:8c:91:4d:a4:e2:9d:b6:f8:79:
         81:15:aa:91:31:72:6b:76:7b:f4:3e:c3:02:22:50:d5:a1:97:
         dd:42:95:ef:7a:92:50:ff:14:a7:ce:49:c9:2d:21:9e:ff:52:
         ba:3d:a7:6e:1f:ca:a5:e7:db:49:9e:35:8e:a5:a3:f6:02:e4:
         b7:70:f9:a1:69:f9:66:16:df:2d:ed:39:19:54:ec:cb:26:7a:
         e7:bc:64:51:58:c9:79:01:0d:19:1e:ee:9a:14:86:be:66:49:
         f6:0e:f6:bf:16:83:3e:4b:f2:e3:c2:ab:6a:8b:b6:f0:27:e7:
         de:06:27:ba:e3:12:0f:29:d3:90:29:af:6c:5c:24:e4:77:09:
         ed:cd:cb:65:04:6e:60:6f:fc:48:b3:ce:9d:cb:37:32:a3:41:
         86:09:ff:da:f9:86:9c:65:39:04:49:01:4a:0a:7b:01:40:17:
         75:6f:b6:8a:cc:0f:d9:5e:b5:ef:a2:8b:ad:dc:1e:a0:42:3a:
         ff:e4:08:1e:ec:cc:0c:cc:fc:0a:e5:4d:3f:b9:c5:9b:46:4d:
         c8:1d:2c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:40:53 2024 by rpki-client on console-fra.rpki-client.org