Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
File:                     xCl41TJpj7IIQPlCsCR8Acj1eLI.mft (raw, json)
Hash identifier:          l+NFIcvQLKzAMm7Z1KZ4PlfNAaZscVB/nhQIZ8irAng=
Subject key identifier:   27:49:51:1A:97:35:73:88:54:38:39:77:B4:6F:15:A8:B8:B2:14:03
Authority key identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
Certificate issuer:       /CN=c42978d532698fb20840f942b0247c01c8f578b2
Certificate serial:       018F87ED35D3D5C3FEE90F2F8D45ACE98003
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
Manifest number:          0E65
Signing time:             Fri 17 May 2024 19:00:20 +0000
Manifest this update:     Fri 17 May 2024 19:00:20 +0000
Manifest next update:     Sat 18 May 2024 19:00:20 +0000
Files and hashes:         1: xCl41TJpj7IIQPlCsCR8Acj1eLI.crl (hash: JcFs8UFZS8OoK9pt8QsELJXGWqn2s7bdFjTpWG3lPdQ=)
                          2: z7fCvXjYlBIokDAp8O1U0QjdEy8.roa (hash: kXozwJviyQ9oiQ2WIJ/HWailJ58KUXdKdJsUXZ1TLfU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:35:d3:d5:c3:fe:e9:0f:2f:8d:45:ac:e9:80:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42978d532698fb20840f942b0247c01c8f578b2
        Validity
            Not Before: May 17 19:00:20 2024 GMT
            Not After : May 18 19:00:20 2024 GMT
        Subject: CN=2749511a9735738854383977b46f15a8b8b21403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a9:8f:10:40:a3:1a:c5:41:ec:6a:44:4c:ce:
                    af:d8:87:4b:15:b2:5c:42:f5:44:af:57:f5:46:48:
                    2d:03:45:4e:f5:bb:a2:ba:22:07:a8:b7:bc:b6:dd:
                    9f:74:96:b3:f0:df:ef:17:37:1d:48:a3:7e:86:67:
                    b6:e5:6f:1d:c2:83:dc:56:a3:66:ec:e3:6e:52:d3:
                    21:e4:e6:57:f2:3b:87:b4:8f:db:36:07:58:13:83:
                    0f:a0:c2:b7:db:c6:65:81:97:37:9d:10:c5:72:cd:
                    26:66:95:0e:5d:c6:2b:2a:f9:d7:fd:85:3d:08:01:
                    69:ac:cd:da:5e:4f:25:e6:5e:ff:42:ca:45:b5:b7:
                    6b:91:f1:a2:ec:42:34:a4:23:9e:46:25:11:13:d9:
                    d2:58:83:f4:3a:d0:d0:dc:6f:ed:c1:3b:d7:6d:c8:
                    75:23:c4:e7:f0:02:ea:6c:7e:30:46:ba:26:13:b7:
                    d5:63:3e:32:82:5c:a4:b3:2e:ff:1a:84:4f:cb:23:
                    b4:56:4d:be:ea:10:59:1b:22:31:fa:36:c0:26:22:
                    50:e2:89:54:81:e9:47:d8:2d:93:a7:4f:42:27:a3:
                    05:9d:0a:ba:49:31:03:78:5e:ba:32:d7:1e:42:96:
                    e6:f7:64:02:21:6a:32:95:ff:d9:6e:36:22:4f:df:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:49:51:1A:97:35:73:88:54:38:39:77:B4:6F:15:A8:B8:B2:14:03
            X509v3 Authority Key Identifier:
                keyid:C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:9a:70:70:2f:ed:1f:f4:25:89:bc:ab:6d:0a:90:da:50:ef:
         e3:de:85:f5:8f:53:41:ea:ba:66:c0:fd:da:a7:cb:d4:f8:96:
         af:38:51:57:e9:72:9b:a4:e2:8e:30:8b:1f:5d:b3:7a:06:b5:
         98:e9:6f:ab:c3:00:0a:70:12:f3:ba:ea:1b:2a:3a:8e:18:98:
         65:b3:49:35:57:20:29:5e:19:6c:46:c0:2f:4a:f7:9e:f2:64:
         a4:ae:1e:97:93:6e:af:9f:dc:45:26:bf:08:60:c7:81:d5:92:
         85:46:d1:91:6b:7c:06:73:e7:c3:61:b1:66:cf:a3:00:a6:94:
         29:5f:6e:98:e4:fc:81:00:17:f2:a6:68:fa:bf:09:7e:dc:bc:
         ef:71:63:52:d0:27:6e:5f:76:b1:49:d5:44:23:78:53:99:1d:
         1f:41:5c:29:c4:cc:fe:80:41:c1:9a:1b:c1:e1:cd:f7:1f:e4:
         05:7b:11:f5:c4:9e:c9:8d:17:2d:34:26:b2:cc:ac:93:b2:49:
         4a:82:43:6a:ff:3e:e3:56:03:b6:c2:8b:37:44:ca:e8:4d:48:
         14:85:5b:93:83:e5:64:48:5f:1f:ec:cd:6c:05:1d:82:1a:64:
         66:cc:3a:d5:2f:fd:04:a9:a0:4f:b3:60:5b:26:45:47:d5:a8:
         3d:e3:9b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:08:29 2024 by rpki-client on console-ams.rpki-client.org