Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
File:                     IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json)
Hash identifier:          54TiOlFxqQmMsqRLMD+oSl1NtV3YskpakHIMhqlu3AA=
Subject key identifier:   14:51:46:61:44:95:95:20:83:90:3C:EC:1E:7B:AA:0A:97:BE:6A:B6
Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
Certificate issuer:       /CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Certificate serial:       018F381C1FD507F5DD0EDBCB31F659EC3BC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
Manifest number:          080B
Signing time:             Thu 02 May 2024 07:01:58 +0000
Manifest this update:     Thu 02 May 2024 07:01:58 +0000
Manifest next update:     Fri 03 May 2024 07:01:58 +0000
Files and hashes:         1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: i76m/yymNh/c/g1wnTdqgR/XubPPNwgg92bR4giyXoA=)
                          2: JZGJAOnyD8DXgjZaV2Ez9nlgYN4.roa (hash: c7QWjoMl6keYpOGqyK0ikFsFHVKtJUoLvFH/iO3/Gf0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1c:1f:d5:07:f5:dd:0e:db:cb:31:f6:59:ec:3b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf
        Validity
            Not Before: May  2 07:01:58 2024 GMT
            Not After : May  3 07:01:58 2024 GMT
        Subject: CN=145146614495952083903cec1e7baa0a97be6ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:35:95:f3:3a:f6:2e:3e:24:39:85:9e:88:b1:
                    4b:74:2d:f8:98:1c:20:4b:10:19:4f:bd:0a:9d:e5:
                    57:ed:d3:71:62:36:3c:17:78:9a:7b:b8:40:85:60:
                    85:b8:37:cd:63:23:92:b9:b0:d4:f7:4f:91:fd:99:
                    08:3a:e9:42:2d:b6:64:e3:4d:ae:84:4c:09:ed:f2:
                    50:c7:5b:9b:2c:f8:90:89:95:67:1c:d3:ad:23:a8:
                    46:10:6f:b9:11:70:44:cd:38:55:cf:e5:d2:d6:c3:
                    eb:42:0a:01:ea:ac:dd:e4:27:63:72:97:6d:fe:b3:
                    a8:2e:a2:02:b3:f9:e4:b0:33:04:bd:8f:b5:6e:7d:
                    9c:c4:50:e9:99:50:9a:c2:5b:24:37:d2:f5:be:85:
                    d9:49:ac:81:8e:91:05:f7:b0:69:73:ff:97:97:dd:
                    a5:80:05:6d:0d:3a:ca:d0:c2:c2:b4:0b:43:0f:e3:
                    73:74:2c:9c:86:92:ad:74:0f:09:24:0c:b9:b5:06:
                    6d:47:f2:ae:c3:8d:99:50:a6:c2:21:1a:83:bc:94:
                    e3:d1:cd:14:8c:98:14:08:fd:08:c4:58:58:b8:4f:
                    62:9d:31:dd:06:3d:b3:2d:26:cf:4c:79:50:10:75:
                    08:db:b4:de:5e:cf:13:ea:52:21:e9:5c:af:cb:14:
                    07:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:51:46:61:44:95:95:20:83:90:3C:EC:1E:7B:AA:0A:97:BE:6A:B6
            X509v3 Authority Key Identifier:
                keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b9:0a:19:f1:45:26:91:f9:15:48:bd:2f:9b:74:f1:a5:bf:
         2a:2d:69:0b:a2:e8:75:bd:7e:ba:d9:e2:d9:4e:a1:cc:6c:c0:
         53:af:89:21:65:6e:a5:45:5c:a4:c6:0c:44:33:cd:8c:db:c4:
         59:82:7e:13:ef:1b:7e:ae:0d:d2:3e:35:a6:50:86:de:d9:3a:
         41:c9:74:ea:33:a6:00:bc:bd:87:a4:b4:09:8e:60:58:18:7d:
         93:a8:84:2d:66:59:ff:8b:d6:7a:00:b7:72:a6:c1:c4:af:d7:
         c8:c1:fb:c4:47:fe:20:57:a0:27:bb:c7:69:68:d3:ad:a3:af:
         2f:6a:55:69:6b:b0:6d:f0:29:92:af:c7:25:6b:f3:36:3a:52:
         72:53:86:06:e1:ff:8c:ae:93:ff:75:d5:07:82:f3:bf:38:96:
         a2:12:99:ad:df:49:97:b3:26:ac:04:67:36:a0:08:52:82:27:
         7f:83:bc:ad:26:9b:bc:06:80:b4:28:c2:03:58:6e:17:de:a3:
         f7:0c:87:78:69:66:ec:c4:ec:5a:15:6c:0c:9e:b6:9f:4a:df:
         ca:b3:ea:c4:40:1d:04:6f:0f:a2:69:79:e5:9e:2f:91:cc:2a:
         83:a1:a4:76:83:04:ba:7c:9d:a8:49:ca:89:bd:0d:8a:83:96:
         02:fb:90:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:47:28 2024 by rpki-client on console-ams.rpki-client.org