Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
File:                     a4us2V8fS9Z1Un0ybSmZVoYsMho.mft (raw, json)
Hash identifier:          YRWh20gwcse1WItW0vlp9RUQGW5rS3o1V38IajP/8Ek=
Subject key identifier:   AB:BC:E4:E4:BF:EB:6E:5A:4C:EB:FA:09:71:AF:5E:A4:F5:AA:25:8D
Authority key identifier: 6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A
Certificate issuer:       /CN=6b8bacd95f1f4bd675527d326d299956862c321a
Certificate serial:       018F874AF77D951669735E69F39A0C5C2369
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
Manifest number:          0C18
Signing time:             Fri 17 May 2024 16:03:08 +0000
Manifest this update:     Fri 17 May 2024 16:03:08 +0000
Manifest next update:     Sat 18 May 2024 16:03:08 +0000
Files and hashes:         1: a4us2V8fS9Z1Un0ybSmZVoYsMho.crl (hash: OoO7uUMrfNBr9tlzsl2S7sPqMmnW1fGJI1MMNVOrO+g=)
                          2: s29bQ7PRgYxDqhUGIYIDrIVy9_s.roa (hash: q3zHkU6zET7k+0xyPI7XYN78K+STfENEq1IeNExRXZE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:f7:7d:95:16:69:73:5e:69:f3:9a:0c:5c:23:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b8bacd95f1f4bd675527d326d299956862c321a
        Validity
            Not Before: May 17 16:03:08 2024 GMT
            Not After : May 18 16:03:08 2024 GMT
        Subject: CN=abbce4e4bfeb6e5a4cebfa0971af5ea4f5aa258d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:a0:f2:70:aa:e2:6b:d7:f7:c1:44:b5:d8:
                    1f:0a:38:3d:27:fc:75:ab:10:f9:79:0c:df:6a:57:
                    2c:2b:0e:1e:72:18:c6:d7:1e:1c:1a:f6:b7:4a:9a:
                    bf:4c:86:2a:0d:e8:05:d6:a4:eb:b3:15:25:c5:54:
                    8b:77:be:b5:4b:6e:98:2e:f6:0d:b4:50:02:ad:c1:
                    52:2a:30:5d:5f:de:f4:30:6b:a1:83:2e:70:75:6c:
                    0b:20:c8:95:fa:f6:d8:e9:f6:21:9a:ac:f0:68:bc:
                    1a:04:5a:47:53:49:96:68:d2:dd:b9:9a:ba:bb:e4:
                    c7:5e:57:f2:cd:f1:b1:ee:10:1e:70:a6:18:e2:66:
                    f2:5e:b8:d6:ef:85:e8:b2:bf:fd:e3:cb:4e:13:16:
                    f7:ef:2d:8d:92:87:3e:54:ce:af:5e:ae:2f:7f:69:
                    28:43:26:fa:5c:54:72:57:95:b6:72:3e:73:74:cc:
                    66:3c:4c:42:85:d8:f6:83:b4:1d:64:07:80:52:fd:
                    f9:01:f9:71:2e:21:6e:69:5f:70:f3:0e:7c:f7:c9:
                    5a:66:f2:d8:99:dc:78:eb:67:bd:b8:cb:b0:b3:21:
                    d4:56:70:c1:e0:0a:be:52:eb:d6:41:fa:a4:54:d1:
                    e4:57:bd:7c:4a:ce:db:92:d8:f1:22:43:e6:6f:c1:
                    c1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BC:E4:E4:BF:EB:6E:5A:4C:EB:FA:09:71:AF:5E:A4:F5:AA:25:8D
            X509v3 Authority Key Identifier:
                keyid:6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9b:06:6d:51:cd:fc:72:7f:60:7d:d4:83:d2:7b:e6:cf:45:
         65:2b:8d:15:e0:44:f7:1d:64:07:e2:bc:43:66:31:13:12:8c:
         1f:6d:a8:f5:aa:ce:fe:40:f5:48:c5:34:f5:ba:e8:57:6d:9b:
         5b:79:14:01:29:f4:69:c7:d6:8b:c2:6e:56:ac:a6:87:b5:3e:
         81:d2:a1:8a:59:2a:15:69:2d:dc:2c:f9:ec:13:5f:2b:0c:c5:
         66:0b:4f:d0:f7:80:a9:64:eb:0a:8b:81:1a:a7:de:4d:c3:f7:
         7a:11:7f:69:e4:a9:9c:49:4c:4f:ce:f1:22:88:1a:65:bf:f7:
         18:b5:6e:f8:49:7e:b3:c8:36:8f:04:40:17:78:78:67:36:d3:
         c6:1a:e0:bc:6a:10:a9:36:6e:90:a5:4b:5b:5e:4a:34:2a:d0:
         a3:cd:bd:25:2e:80:9a:1a:9c:7c:a4:59:e2:b4:04:b8:fa:22:
         f4:89:a4:46:8c:c7:ae:7a:f5:78:bd:6e:46:74:86:2e:0a:c6:
         fd:d5:84:f4:95:a7:e8:40:1d:c9:f9:78:ba:a4:8e:6d:58:80:
         5b:b0:20:50:23:b8:2d:97:08:11:98:24:91:ba:82:62:cd:b6:
         ad:3d:26:25:11:42:86:45:88:51:d2:0d:76:f3:c2:1d:91:fc:
         19:33:41:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:26:17 2024 by rpki-client on console-fra.rpki-client.org