Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
File:                     E-8y2L8VPATGOTviTwYyQ_fop-I.mft (raw, json)
Hash identifier:          rjzxmdLBk7q90hl1Q4haHOqIfYxAxptMEM2OrnAEIio=
Subject key identifier:   55:A0:03:BB:33:D8:73:D9:FF:FC:13:E3:4F:8A:8E:45:A4:67:B1:65
Authority key identifier: 13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
Certificate issuer:       /CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Certificate serial:       018F44FB4684F45CC38D67B96E5FD20039C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
Manifest number:          03B9
Signing time:             Sat 04 May 2024 19:01:09 +0000
Manifest this update:     Sat 04 May 2024 19:01:09 +0000
Manifest next update:     Sun 05 May 2024 19:01:09 +0000
Files and hashes:         1: E-8y2L8VPATGOTviTwYyQ_fop-I.crl (hash: i+1bfScvRNOSrK8vFY89fINh1wSswB24FBsAOEIMEE8=)
                          2: dVRCa-IaMp1OpD0MM7uhF_IbJJc.roa (hash: B3n7NtabcUQUkcIso1jCRLpgbYjJM/F+3cpSnwTee3Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:fb:46:84:f4:5c:c3:8d:67:b9:6e:5f:d2:00:39:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
        Validity
            Not Before: May  4 19:01:09 2024 GMT
            Not After : May  5 19:01:09 2024 GMT
        Subject: CN=55a003bb33d873d9fffc13e34f8a8e45a467b165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ce:e0:d8:c8:f5:12:36:a9:55:72:1d:ad:84:
                    b0:31:8e:15:37:73:40:90:2f:ea:1c:81:19:f7:fe:
                    d2:e0:7b:24:5c:26:d2:cb:77:d0:a3:fb:ac:f9:b8:
                    ad:54:a4:d5:c0:1c:05:08:b9:fd:10:6d:00:4c:97:
                    12:9d:14:4b:70:f4:bf:ef:ad:0c:b9:eb:5f:cf:0f:
                    9c:41:1c:48:aa:f3:02:84:c2:bc:91:fb:dd:45:20:
                    b1:65:6f:76:e9:e0:59:93:f4:ee:f1:a7:0b:2c:8c:
                    6b:c2:90:4f:7a:8c:d7:ba:14:e9:47:3a:ed:93:c8:
                    7e:dd:fa:e1:ca:1e:84:20:eb:fa:fb:69:dd:02:0d:
                    af:8f:c4:1c:e7:82:db:70:26:ed:e6:64:99:c5:15:
                    75:91:34:30:12:7f:1d:9c:76:3f:3d:b2:c5:de:3d:
                    04:d4:e3:79:40:19:cc:1e:4f:82:69:3f:a6:2a:5d:
                    c4:82:aa:cd:82:11:d3:1b:a8:7c:63:b8:4f:a5:e8:
                    cd:e3:16:48:21:12:1d:de:47:a3:a7:b6:3e:c9:f9:
                    21:62:de:9e:5a:3f:47:ae:53:de:91:b3:98:96:de:
                    b9:fe:f2:54:d2:0b:76:21:3d:36:63:f1:cc:fd:fb:
                    16:77:ec:71:55:4e:ca:c2:f0:9e:58:48:6f:c2:28:
                    66:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A0:03:BB:33:D8:73:D9:FF:FC:13:E3:4F:8A:8E:45:A4:67:B1:65
            X509v3 Authority Key Identifier:
                keyid:13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:be:25:bd:bb:8d:5b:42:9f:37:51:af:4a:c7:f8:5b:9f:0b:
         d5:2d:76:e4:01:f0:41:7c:ef:cb:cb:5d:bd:27:d3:11:29:11:
         17:eb:c0:e1:0f:3f:b0:d8:66:40:3d:e2:08:0c:94:4f:2b:43:
         a4:17:70:6b:04:3e:03:e1:fe:b5:1d:f2:10:6b:2e:2b:5e:64:
         0f:96:2f:aa:f5:16:90:f1:f1:46:91:11:d6:8f:81:0d:27:4c:
         42:5d:af:ef:77:f4:89:1a:86:23:88:43:50:dd:bd:ee:f6:d1:
         2e:0f:7b:33:49:10:c5:13:3e:1e:08:e5:da:51:03:2e:f0:8f:
         b7:4b:18:67:f6:2c:11:40:20:9b:b0:85:d6:c2:04:30:0b:cd:
         fd:68:01:f7:dd:ea:6c:29:b7:89:2e:85:99:66:ab:f9:b6:1c:
         ed:17:77:a8:18:4d:6b:fd:52:c6:6b:05:66:6c:5c:6f:f7:f5:
         c8:2e:06:b8:82:9c:dd:e4:c6:b4:4b:0e:6f:a9:10:74:07:c9:
         b4:5c:ca:6a:21:32:50:60:ef:ba:f4:0b:1f:f7:a4:7d:bc:a5:
         fa:3e:3a:ae:85:17:ce:24:78:3a:f0:8d:ae:15:b7:a8:81:e7:
         9e:bf:ea:34:91:3f:71:89:0a:2e:62:c6:59:6f:65:c2:62:e3:
         65:94:b8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:03:19 2024 by rpki-client on console-ams.rpki-client.org