Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File:                     1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier:          pw7a+RBCWjHvzX8584VKMj0MWScv2gBvP5gZwsIs5dg=
Subject key identifier:   7F:50:68:C3:0A:99:A9:71:9F:8D:E7:8E:D6:85:A9:32:76:65:23:CA
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer:       /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial:       018F497D0F7EAD13EE043285DF9A7EB05802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number:          07F9
Signing time:             Sun 05 May 2024 16:01:23 +0000
Manifest this update:     Sun 05 May 2024 16:01:23 +0000
Manifest next update:     Mon 06 May 2024 16:01:23 +0000
Files and hashes:         1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: Jk725VsZN46wGAXAsNusJrfeAzQG35zYxmomfmfALcc=)
                          2: n-_jD0oUpUK3BHwMTqgxhDCfTxc.roa (hash: t9TMr6gWmf8cnu4qqBMbjQzmZHYN0dgrfAKbTJi+OR4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 16:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7d:0f:7e:ad:13:ee:04:32:85:df:9a:7e:b0:58:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
        Validity
            Not Before: May  5 16:01:23 2024 GMT
            Not After : May  6 16:01:23 2024 GMT
        Subject: CN=7f5068c30a99a9719f8de78ed685a932766523ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:12:45:e2:e4:38:c8:85:0d:ca:93:bb:d4:77:
                    c5:6f:d7:35:d1:bd:47:5d:22:7a:fe:41:0b:05:c2:
                    b0:da:a3:8b:d9:70:ff:58:36:87:a7:7d:34:c0:31:
                    63:94:cf:9e:10:b7:7e:1c:45:1d:d8:ab:4e:26:69:
                    54:ed:52:b5:b2:63:f8:25:65:7f:39:52:a8:76:97:
                    02:f2:4b:1f:49:8e:1b:ac:a2:fb:68:63:fc:19:47:
                    44:02:3a:8a:ec:56:f7:56:8d:64:c4:e5:31:5a:66:
                    08:2c:62:42:97:01:30:f1:45:0f:3b:c5:9f:32:f0:
                    58:21:a0:8b:62:47:69:31:cc:60:00:61:4e:46:e8:
                    e8:f0:f1:ab:5c:e6:c7:28:0c:62:2f:e9:89:08:12:
                    cf:74:62:a3:ed:f8:e1:ce:d9:d9:f3:c6:3d:d0:bf:
                    62:eb:8e:eb:b2:98:4c:13:03:94:c2:a0:37:78:91:
                    5b:0d:2c:30:18:7b:84:59:e3:6f:c5:2f:af:d0:e5:
                    b7:20:20:d5:06:ac:18:aa:66:07:7b:01:c5:48:6d:
                    ac:14:f6:8d:a1:7c:72:48:22:cb:93:75:cd:45:a6:
                    39:65:ce:6a:8d:fc:a1:f9:ae:97:11:00:0c:1f:7e:
                    75:3a:10:c5:65:90:db:81:65:d1:61:a1:e3:99:24:
                    a7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:50:68:C3:0A:99:A9:71:9F:8D:E7:8E:D6:85:A9:32:76:65:23:CA
            X509v3 Authority Key Identifier:
                keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f2:57:d8:e3:4b:e6:d1:ed:21:82:42:ae:02:bc:c0:bf:79:
         95:4b:bf:53:0d:23:0d:ed:2b:29:e6:ae:a1:3e:73:87:84:94:
         47:aa:60:09:db:f6:61:89:32:b2:00:4b:ec:b0:e9:9e:29:53:
         18:69:73:91:07:86:7a:aa:94:c9:0e:e4:49:ea:c7:92:ec:21:
         5f:94:b4:c4:1f:b2:46:49:18:25:17:af:7b:d8:fa:fa:69:70:
         5a:f9:2a:2a:cf:6f:5e:c8:1e:bc:83:fb:2a:9b:e0:98:41:3e:
         8b:41:ca:ad:0d:bd:9b:d6:4f:26:df:ca:63:b2:b3:30:d7:6d:
         5b:e9:8a:57:50:fd:90:ff:eb:48:89:12:ac:fd:16:d8:b1:b2:
         54:1e:db:d4:2f:24:52:20:05:c1:cb:6e:c8:b4:d1:e8:79:7c:
         61:30:d0:62:93:f4:b8:71:42:b8:0c:21:e8:88:41:48:88:de:
         bd:c7:bb:b4:e8:be:85:51:99:c9:28:b3:d3:b5:8f:a4:8f:3b:
         99:8e:52:16:3f:18:2c:60:df:55:a9:45:f6:bd:e6:8c:f8:8a:
         c5:fe:46:74:ac:de:d0:00:68:a7:89:e3:e8:cc:45:09:4c:0c:
         a2:68:69:33:87:e0:1a:4c:7f:8f:aa:52:ad:70:68:c4:ed:2c:
         f5:06:d0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 18:53:57 2024 by rpki-client on console-fra.rpki-client.org