Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
File:                     1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft (raw, json)
Hash identifier:          FoClYh7VOKpZQwYwJEWWrMc9WNKNsiJTf3UbiiH89sM=
Subject key identifier:   07:64:DC:76:FF:69:8B:8C:F0:9F:06:30:97:0C:8E:E6:FF:DD:3E:B1
Authority key identifier: FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
Certificate issuer:       /CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Certificate serial:       018F38F715DD6CD22FCC7CA229C095889534
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
Manifest number:          0434
Signing time:             Thu 02 May 2024 11:01:08 +0000
Manifest this update:     Thu 02 May 2024 11:01:08 +0000
Manifest next update:     Fri 03 May 2024 11:01:08 +0000
Files and hashes:         1: 1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl (hash: sQCRTYmYM6ITuYPYdi3yIuozxhl6HUnLfbc0/xcm/Zc=)
                          2: _dU8vdU8qNMC1-U0a-jJX414aBs.roa (hash: r1KngkpNtWSiqyOF7RhncxpcTxsehiRJsoE0S4d/mYE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 11:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:f7:15:dd:6c:d2:2f:cc:7c:a2:29:c0:95:88:95:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
        Validity
            Not Before: May  2 11:01:08 2024 GMT
            Not After : May  3 11:01:08 2024 GMT
        Subject: CN=0764dc76ff698b8cf09f0630970c8ee6ffdd3eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:30:49:ab:32:e7:86:be:30:be:41:6a:d3:26:
                    6c:76:e6:52:7d:d2:d9:e6:ad:2c:05:43:33:4b:25:
                    46:96:7c:ac:89:2c:3b:b0:67:23:1d:7a:d4:dc:52:
                    61:91:ac:d7:f5:95:e6:31:2f:91:cd:d3:f3:aa:79:
                    b5:be:5a:3f:f9:a8:e7:ae:be:3d:b0:f4:bb:3b:a4:
                    0b:41:42:a0:b8:41:be:b1:a2:9a:ec:ec:45:f7:8a:
                    35:f4:49:d4:f8:90:f2:f7:b7:b5:4e:f0:9e:9f:28:
                    6a:de:10:61:bc:d6:03:ca:a0:11:99:bb:de:e9:85:
                    df:1e:c9:ef:1e:c0:77:9e:43:92:dc:9e:93:da:1b:
                    32:18:ef:27:cd:fc:c1:23:ac:6a:3d:82:37:ad:f5:
                    27:0b:02:c7:08:1a:90:59:43:74:a4:61:f4:84:0d:
                    32:29:4e:07:94:79:f3:27:30:e9:c7:69:7f:34:ef:
                    91:b9:b1:b1:21:64:17:5f:f9:7f:8a:71:61:a4:76:
                    28:a8:7d:e3:eb:a4:fa:14:9f:4c:2c:51:81:bc:6f:
                    e8:4d:48:3f:14:17:03:98:55:40:30:78:c9:6c:bc:
                    77:34:88:33:dc:07:38:23:e6:1b:ba:72:7d:ec:5d:
                    17:18:d4:71:51:ea:44:c3:36:19:d6:55:aa:97:0a:
                    a2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:64:DC:76:FF:69:8B:8C:F0:9F:06:30:97:0C:8E:E6:FF:DD:3E:B1
            X509v3 Authority Key Identifier:
                keyid:FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6b:ef:b4:34:22:47:66:63:5c:47:57:f3:8d:4c:77:3f:2a:
         ee:ed:74:90:73:e4:39:6a:07:46:89:94:ed:73:fb:17:ca:59:
         69:53:eb:56:0a:5f:84:36:0c:96:fe:b0:31:86:20:03:14:1f:
         22:27:9f:55:89:4f:01:fe:e6:df:1e:b9:43:4e:75:09:c0:e1:
         f2:01:e7:72:a4:5f:1e:db:12:59:b3:ff:9a:dc:27:52:b4:7a:
         e5:79:45:1a:cd:f5:b4:08:9b:d5:fd:28:d2:c1:ab:27:a0:ef:
         99:7f:ac:66:e1:f3:0c:91:c7:83:fd:44:56:57:6e:37:22:d2:
         c1:54:df:5a:fa:b1:b2:61:9c:dc:8f:84:65:ea:a1:98:b0:63:
         fc:7f:8f:70:57:9f:48:0a:36:2d:09:2b:19:3e:69:4d:d5:9b:
         07:f3:41:1c:af:7f:82:b1:f0:4b:44:11:89:9f:05:a1:ce:d0:
         cd:13:03:f4:4c:c2:1d:83:13:bd:f7:12:3d:c9:74:aa:fa:00:
         db:ce:2b:92:c5:38:32:c0:95:bf:e9:85:a2:8b:ce:94:9c:4f:
         fe:8f:f3:9a:90:16:52:3b:9c:88:78:6b:c3:a5:67:43:dd:fc:
         ad:0f:74:f7:6b:1d:f4:1d:70:cb:76:85:d1:e8:2d:4d:50:62:
         a8:f5:57:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:19:46 2024 by rpki-client on console-fra.rpki-client.org