Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
File:                     02mL6QLAb-q19ar3KeC7w3u8NBw.mft (raw, json)
Hash identifier:          Nkg66jRs9xBbxEHxhB+w9zEeBHfb8yaLWgsCaWo5J7Q=
Subject key identifier:   88:05:3B:E7:39:7F:66:1A:85:F2:7F:36:9F:06:BC:46:FE:E1:8A:6F
Authority key identifier: D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
Certificate issuer:       /CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Certificate serial:       018F1FA517A0C84DD4E5C7CFDE240DAD10D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
Manifest number:          1141
Signing time:             Sat 27 Apr 2024 13:01:04 +0000
Manifest this update:     Sat 27 Apr 2024 13:01:04 +0000
Manifest next update:     Sun 28 Apr 2024 13:01:04 +0000
Files and hashes:         1: 02mL6QLAb-q19ar3KeC7w3u8NBw.crl (hash: d+SkD3I8toTP/rcUFdIddtN4+JmyiwRvWIXOfhKQPPo=)
                          2: hzxdgNStWLUojQXWp0W2RGtLr-Q.roa (hash: L/2X8q6B/L/Ibh/PzVTZOeoPlqfRKsGuWDE6PfkIlv8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:a5:17:a0:c8:4d:d4:e5:c7:cf:de:24:0d:ad:10:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
        Validity
            Not Before: Apr 27 13:01:04 2024 GMT
            Not After : Apr 28 13:01:04 2024 GMT
        Subject: CN=88053be7397f661a85f27f369f06bc46fee18a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:da:7a:b2:47:01:99:56:fb:d0:02:8b:16:
                    b5:f4:23:45:9f:a2:e8:0f:26:5f:0f:60:a0:8a:32:
                    dc:49:03:fb:92:a7:1d:ae:b9:b5:6b:f0:09:c8:17:
                    51:1e:1a:ab:2a:9e:3a:8f:79:91:3b:2c:70:8a:9a:
                    2e:b2:65:2e:57:6c:7d:ed:fc:c4:a9:9c:5b:8c:35:
                    25:9c:19:30:b3:c3:3b:b7:26:f9:b2:09:dd:e6:ba:
                    9c:4b:2c:24:2e:44:ac:b4:43:ae:cb:f7:7c:38:e4:
                    8a:bc:52:1d:24:3b:ee:54:9e:9a:01:91:fb:2a:d4:
                    58:aa:c5:5c:95:f3:ac:22:94:1c:4a:c2:a2:d8:8e:
                    c3:4e:dc:ca:ca:6f:25:22:f3:da:f2:87:af:ef:cf:
                    18:9a:31:bd:76:18:e6:0d:9f:7c:bd:a5:9d:32:33:
                    fe:0b:b6:28:7f:08:59:0a:4b:5e:fb:fd:ed:99:6a:
                    25:1c:8f:e7:c1:d5:bf:b5:d1:1b:9c:4a:10:bd:24:
                    f3:32:dc:dd:7a:b0:1e:82:e3:be:50:a4:9e:97:fc:
                    d0:98:f4:66:27:91:7f:99:03:48:8f:cb:9e:38:9c:
                    82:ad:1c:59:1c:34:3a:14:6e:5e:ec:a9:43:25:4d:
                    19:48:30:82:5a:58:75:41:10:40:15:02:f6:f2:16:
                    f3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:05:3B:E7:39:7F:66:1A:85:F2:7F:36:9F:06:BC:46:FE:E1:8A:6F
            X509v3 Authority Key Identifier:
                keyid:D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:88:0e:bf:c8:a4:bb:03:e5:95:d9:13:09:e9:e2:42:ce:f7:
         34:9b:64:ae:5b:8f:af:91:d1:fe:5f:bb:5e:bf:d6:5c:da:4d:
         c8:b8:fd:3b:37:cc:e1:24:c6:24:43:59:46:b6:b1:b5:e0:e2:
         2f:ae:37:c9:28:10:7b:98:d8:de:91:bb:14:eb:96:1c:a5:2d:
         4c:1a:13:b5:55:89:9e:52:12:bb:a8:39:48:26:29:91:b0:ea:
         8f:2f:dc:63:29:e5:48:a5:46:1f:ab:7c:c8:c6:57:a5:db:bf:
         f0:04:84:55:83:a8:d4:b9:f9:c2:12:b0:bb:d2:7f:9d:5f:9e:
         36:47:a8:1e:09:31:de:0a:40:30:d5:e4:f9:cc:b0:12:56:21:
         a0:bd:a4:eb:8f:1f:35:b2:50:40:6c:60:ed:4a:f6:0b:83:db:
         00:44:a9:ad:9e:e6:2c:2a:8d:09:51:62:a6:07:4d:fa:57:7f:
         bf:2a:f3:ab:6d:a2:92:14:5d:f9:bb:29:18:ec:7f:da:6e:9a:
         fe:2e:58:98:c1:f9:fb:42:7c:fb:77:29:cc:45:90:a7:eb:54:
         d3:a3:b7:9c:84:6e:2e:ab:91:5f:95:af:62:b9:0f:d1:cf:23:
         54:dc:83:3c:6b:7f:0d:fd:42:fe:3f:b1:cd:65:28:df:30:e1:
         9e:a0:25:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:08:57 2024 by rpki-client on console-ams.rpki-client.org