Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
File:                     2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft (raw, json)
Hash identifier:          CuzT47ameIWTOI7LbEopD6mFRq5zsc2tOthEgUz3qHI=
Subject key identifier:   F8:57:14:DE:E7:DE:F3:B5:0F:28:12:CD:F4:94:20:6B:BF:9B:16:50
Authority key identifier: D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5
Certificate issuer:       /CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5
Certificate serial:       018F497F736AD3FD3EC69F1E5E18729E9F58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
Manifest number:          088F
Signing time:             Sun 05 May 2024 16:04:00 +0000
Manifest this update:     Sun 05 May 2024 16:04:00 +0000
Manifest next update:     Mon 06 May 2024 16:04:00 +0000
Files and hashes:         1: 2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl (hash: vLUkFhHtknUDvyhBEwFqxflbmFNZyx9fHksJ7wbdB0w=)
                          2: 5qaK5V00YRPAfy43tC1w9C3UYAU.roa (hash: DZgYGP7Ls9/15Ttr6E37029mFIH1k9hXrKZf/GRKwsk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 16:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7f:73:6a:d3:fd:3e:c6:9f:1e:5e:18:72:9e:9f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5
        Validity
            Not Before: May  5 16:04:00 2024 GMT
            Not After : May  6 16:04:00 2024 GMT
        Subject: CN=f85714dee7def3b50f2812cdf494206bbf9b1650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:35:3e:83:9a:29:f8:ff:26:6c:f0:6f:bc:a2:
                    ac:37:2b:91:73:ef:e8:59:a6:c0:d2:0a:b0:b0:ed:
                    dd:d8:ae:ab:b1:5c:5a:67:73:42:92:39:f9:0f:8a:
                    d1:d8:49:d5:cf:f6:45:ee:8c:58:56:e0:be:03:97:
                    e9:b0:a7:0a:2a:41:9b:d3:82:3a:2f:a1:a8:1e:64:
                    3d:2d:43:fa:06:e6:12:9e:e0:a4:81:c5:6d:a4:2b:
                    0f:1e:7f:4a:c6:ab:27:ab:64:e1:77:d7:d2:9b:30:
                    f1:15:5a:cd:88:8c:f1:26:5e:42:a7:97:34:c8:ee:
                    e0:4d:6c:af:b6:5b:16:67:16:5b:5d:ec:b7:13:82:
                    aa:b6:a9:ba:ee:32:39:5b:2e:1b:13:46:3b:8f:6f:
                    81:38:dc:85:5f:82:f5:97:40:b8:79:71:56:1b:4b:
                    62:e2:b5:ce:3c:66:2d:41:0f:d9:41:29:8d:b5:52:
                    f9:47:76:90:4e:b3:ef:fb:5a:a0:51:c5:51:2c:07:
                    36:ee:60:4c:3a:30:c3:81:af:82:09:3c:00:f2:50:
                    83:ed:fa:d4:6f:30:db:c2:61:f5:d2:a0:dc:61:03:
                    17:a6:e5:0f:58:05:a2:65:45:f5:80:bc:b1:8b:31:
                    4b:e5:a2:16:19:75:44:35:7e:b6:16:8a:5c:14:fa:
                    ec:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:57:14:DE:E7:DE:F3:B5:0F:28:12:CD:F4:94:20:6B:BF:9B:16:50
            X509v3 Authority Key Identifier:
                keyid:D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:bc:52:2e:42:65:e0:63:4f:ce:0d:35:87:11:30:3d:aa:76:
         97:9f:be:cb:e0:b5:94:2d:4a:85:1c:13:c1:47:33:75:4b:63:
         ea:16:a2:af:21:06:5e:28:d8:c2:b8:1f:00:c6:db:d8:ee:7a:
         68:19:ee:fd:6b:2e:cf:16:24:df:a4:8a:eb:1f:4d:67:6a:36:
         2c:b2:75:75:46:cb:3f:b8:80:23:3c:d3:ac:97:bb:24:88:7d:
         ce:33:84:81:31:02:66:a9:f0:21:83:4b:6c:6a:81:e5:74:92:
         a1:d9:e3:dd:a9:1d:ed:d9:8f:d4:e5:c9:fc:ef:17:c3:14:b5:
         5c:ae:4c:de:5d:a5:81:ea:e0:3d:b8:72:19:9f:4b:d7:f9:3f:
         15:9b:28:40:2c:cb:70:19:3a:4a:1a:0c:d4:33:d0:d7:75:d7:
         bc:47:22:e8:f6:f6:75:ac:a9:9d:c3:73:eb:69:61:b5:15:16:
         e1:12:9f:80:59:ef:f9:b8:57:79:3f:9e:ed:f9:dd:52:1d:65:
         f5:0d:08:60:85:76:61:dd:79:6c:f3:a5:11:94:ff:fe:be:b5:
         3e:34:3a:7d:30:20:8d:05:70:4a:0c:7d:f4:6a:cf:fd:22:90:
         43:59:78:33:31:96:e4:97:74:d9:20:ec:87:9a:a4:2a:07:cd:
         a1:d5:b7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 18:54:17 2024 by rpki-client on console-fra.rpki-client.org