Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
File:                     H_Umh1LLtSS8_ktaSXb_D4XTia8.mft (raw, json)
Hash identifier:          9wzruZgxzNggTSTWE2DtWjmZuVepNG9k+yTv8syYPww=
Subject key identifier:   90:EB:F4:62:A3:6E:E8:E3:F5:47:E5:15:45:70:13:1D:CF:E9:41:A7
Authority key identifier: 1F:F5:26:87:52:CB:B5:24:BC:FE:4B:5A:49:76:FF:0F:85:D3:89:AF
Certificate issuer:       /CN=1ff5268752cbb524bcfe4b5a4976ff0f85d389af
Certificate serial:       018F497EB42F4A94CB017099964277FA71B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
Manifest number:          0545
Signing time:             Sun 05 May 2024 16:03:11 +0000
Manifest this update:     Sun 05 May 2024 16:03:11 +0000
Manifest next update:     Mon 06 May 2024 16:03:11 +0000
Files and hashes:         1: H_Umh1LLtSS8_ktaSXb_D4XTia8.crl (hash: b8TrqWSB62Ii5j8GjpIZP109YIWUcphqJ3Ub1yhv6l0=)
                          2: p6EiL6tuy0bstxyT0v-ieLT25EI.roa (hash: MxCsnwT6iNlDzjA56vqzOit12WoaWQ2fvp4Mlh/PwGk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 16:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7e:b4:2f:4a:94:cb:01:70:99:96:42:77:fa:71:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff5268752cbb524bcfe4b5a4976ff0f85d389af
        Validity
            Not Before: May  5 16:03:11 2024 GMT
            Not After : May  6 16:03:11 2024 GMT
        Subject: CN=90ebf462a36ee8e3f547e5154570131dcfe941a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:db:21:80:73:8b:5d:22:86:ad:8c:28:51:8a:
                    29:5e:54:be:e2:27:9d:a1:0a:c0:8d:71:31:f0:b5:
                    1d:61:91:90:5d:a7:8f:5e:9a:21:a9:e3:22:5b:a5:
                    b0:20:75:04:c8:f5:8a:f2:3a:3b:79:3a:66:4a:ad:
                    26:27:be:0e:13:b6:36:f9:6f:c6:74:db:2b:19:db:
                    ee:ad:a9:91:6a:24:17:e9:a5:03:7e:cb:34:33:22:
                    ba:e7:24:03:24:f1:37:c5:51:f2:57:cb:f6:66:e5:
                    d1:53:c5:d8:ee:39:6b:3c:25:86:80:05:1d:2e:9d:
                    b5:31:23:44:7d:f0:4b:fb:0a:52:ad:d3:9e:74:4d:
                    e5:62:ec:73:ae:3e:40:6d:17:41:13:2c:c1:a2:86:
                    47:a3:88:8a:7f:10:8c:d3:7b:10:f9:82:e9:af:6a:
                    87:09:79:5f:bd:c7:cf:fe:8c:6d:f9:b9:70:72:74:
                    a0:d9:01:27:b7:78:1d:40:31:b4:1a:83:63:4b:69:
                    2c:ab:da:bc:56:78:60:81:7f:14:2a:42:03:de:75:
                    a4:c2:f1:e1:51:b1:ca:99:70:4a:61:ad:9d:c4:25:
                    d0:aa:63:c2:78:eb:f3:d1:0b:b3:4c:67:4d:8f:c1:
                    1f:b9:5c:b6:8f:f1:22:39:47:c6:72:88:23:12:ef:
                    73:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EB:F4:62:A3:6E:E8:E3:F5:47:E5:15:45:70:13:1D:CF:E9:41:A7
            X509v3 Authority Key Identifier:
                keyid:1F:F5:26:87:52:CB:B5:24:BC:FE:4B:5A:49:76:FF:0F:85:D3:89:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a0:09:31:bc:c3:04:e1:36:c1:a6:79:4c:93:43:f3:0a:3e:
         ed:eb:b0:05:e0:e1:19:c5:30:5e:e6:9a:76:30:2b:52:68:7a:
         22:a5:25:c0:d7:0d:eb:46:60:a7:2b:ba:94:72:58:9c:c4:f1:
         71:5a:42:ba:d2:fc:4f:13:5c:39:6b:1e:3f:3f:48:37:d0:1c:
         34:fc:95:db:01:fd:a1:57:60:64:68:fd:54:a0:5d:2c:8c:4f:
         4e:05:04:cf:a6:30:8d:af:20:66:fd:de:12:c8:da:09:a0:47:
         48:b3:f6:8b:e5:14:67:ff:bc:a5:a1:83:c6:83:b7:28:71:23:
         f4:60:c6:9f:c1:d5:89:ad:11:1d:8b:c7:f9:b4:41:cb:f9:fa:
         0e:d1:a6:4d:5f:60:d8:43:b7:84:05:06:8c:62:fe:20:0e:ff:
         d8:b2:f1:e5:bd:c8:10:e2:24:ff:2e:53:3e:e5:7d:f2:bc:8a:
         ca:60:2c:d5:95:0a:2a:a2:85:33:bd:b1:fd:a0:cc:c3:53:01:
         9f:a3:16:b4:ba:bc:a9:16:82:cb:48:b7:11:92:c4:2e:05:c3:
         7c:a8:62:26:01:7a:a9:00:70:c5:82:ea:17:0c:10:d1:5a:54:
         fb:82:c3:94:81:a6:75:a0:fa:ba:ff:3c:c0:73:67:9e:aa:ef:
         c1:35:c7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:20:43 2024 by rpki-client on console-ams.rpki-client.org