Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
File:                     aIt13GcpXVhht31RoCEYtg3FWGg.mft (raw, json)
Hash identifier:          g7i8LxE7Xw6UYX0kMvJt7HMP95PgkJYwM7hBSyGZQqg=
Subject key identifier:   68:CE:DE:A3:F7:50:B5:A1:56:64:53:20:C9:DB:D1:FA:38:DD:AB:B5
Authority key identifier: 68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
Certificate issuer:       /CN=688b75dc67295d5861b77d51a02118b60dc55868
Certificate serial:       018F86A42F650A236FB03E48B7A8C0CF3E07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
Manifest number:          0881
Signing time:             Fri 17 May 2024 13:00:57 +0000
Manifest this update:     Fri 17 May 2024 13:00:57 +0000
Manifest next update:     Sat 18 May 2024 13:00:57 +0000
Files and hashes:         1: aIt13GcpXVhht31RoCEYtg3FWGg.crl (hash: S7KRKfp1jhtNM+qb3W++hocIN2Ls6WZQsPP8yVaeWVI=)
                          2: d9Ru3XL8pjK_a6_nk-0CRnFDRAs.roa (hash: pPGJ4AfeN3cFshyiew95Oyx4lbO8THipSnT99IyHlUU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a4:2f:65:0a:23:6f:b0:3e:48:b7:a8:c0:cf:3e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688b75dc67295d5861b77d51a02118b60dc55868
        Validity
            Not Before: May 17 13:00:57 2024 GMT
            Not After : May 18 13:00:57 2024 GMT
        Subject: CN=68cedea3f750b5a156645320c9dbd1fa38ddabb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:4c:b0:0e:49:d9:70:d3:92:92:2b:aa:42:
                    fa:56:bb:9d:91:ae:9e:e0:b9:1c:55:e4:11:69:b0:
                    3b:ce:0d:06:74:91:47:86:16:bf:51:6d:61:43:76:
                    7d:cf:ba:f8:0a:98:f3:29:51:b3:ab:07:db:ea:bd:
                    b4:35:ae:fd:9c:a0:a5:68:7e:0a:a2:b5:93:e9:c1:
                    be:ac:20:99:43:80:9c:e0:32:00:fb:ac:ff:41:d1:
                    e4:87:81:5b:6e:57:c3:ee:01:41:77:21:8a:82:be:
                    16:74:31:a3:87:ab:ed:26:80:b1:5f:e8:68:d9:77:
                    82:3b:c9:f7:0a:df:41:9f:9c:8c:54:c0:be:dd:3e:
                    39:c8:76:dc:44:5d:be:31:e0:9b:00:fb:4e:cc:ef:
                    d8:36:83:0c:ca:e3:93:75:cf:30:e3:fc:ed:a1:b7:
                    a0:1b:af:21:82:43:39:1f:80:32:8d:97:91:75:84:
                    f7:d3:53:35:64:80:81:f8:3d:16:0e:3b:22:c8:4d:
                    dc:52:1e:b0:e1:d7:0d:da:c8:32:00:31:91:ee:43:
                    a4:af:1c:12:d6:cc:95:fc:2b:86:c6:6f:d3:aa:35:
                    43:53:9b:45:fe:2d:6b:12:3f:25:cd:b8:f7:30:22:
                    b1:8d:27:34:d6:94:e2:89:e4:a6:27:3b:63:43:88:
                    f4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CE:DE:A3:F7:50:B5:A1:56:64:53:20:C9:DB:D1:FA:38:DD:AB:B5
            X509v3 Authority Key Identifier:
                keyid:68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:94:d7:58:3f:f0:47:c6:5c:5c:16:16:f5:6f:13:79:24:9e:
         8c:28:b9:b5:53:7b:0f:b1:01:83:ef:97:e3:ae:a5:c6:37:2e:
         cb:a3:4f:98:15:95:1e:df:8d:9d:4f:bd:72:54:3b:fb:0b:0d:
         fe:f2:17:13:ef:3d:e1:c5:12:f4:ec:be:1a:a7:cc:c5:bb:16:
         04:f0:15:94:72:43:4b:76:df:2d:3f:45:dc:03:3a:06:61:fa:
         c2:43:af:97:3d:14:51:47:df:49:b5:d2:3c:17:89:d6:63:b6:
         d9:dd:a3:98:42:35:1a:11:6d:4d:6e:6a:66:6e:b9:68:91:bb:
         d6:ec:b1:c2:ce:df:a7:65:ea:c4:ae:d0:de:2b:ce:65:75:a6:
         44:6d:e8:4d:d9:da:b8:8f:e0:6b:75:22:0f:af:08:3d:74:c1:
         33:c0:63:51:35:e7:40:8d:6c:0b:5d:99:5e:ed:4d:9e:95:0b:
         41:66:cd:2c:9f:a5:f5:ff:36:7d:a4:90:46:4e:e0:a5:e6:2c:
         48:34:09:55:46:48:2b:d4:30:ee:68:72:d3:6e:cc:41:14:8c:
         fb:5b:ec:c5:01:22:26:a4:26:a4:d2:00:97:8c:5e:30:89:3c:
         4f:88:da:2b:6f:67:50:ec:e5:92:f0:3a:a7:81:1b:40:79:3e:
         8a:4a:98:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:00:44 2024 by rpki-client on console-ams.rpki-client.org