Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
File:                     HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft (raw, json)
Hash identifier:          oTohWalBlxUd8wzl60lscxsIBwdzo0pd7VINopa+Em0=
Subject key identifier:   CB:2B:72:7C:8C:74:41:A1:F7:3F:B4:80:0F:57:0B:69:DA:3B:9B:8F
Authority key identifier: 1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
Certificate issuer:       /CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Certificate serial:       018F513721E527142DC522605CCBCC8F965F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
Manifest number:          10B5
Signing time:             Tue 07 May 2024 04:01:58 +0000
Manifest this update:     Tue 07 May 2024 04:01:58 +0000
Manifest next update:     Wed 08 May 2024 04:01:58 +0000
Files and hashes:         1: HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl (hash: 6LxukprkgONtuBDFaIeAkK+QVaQU9DhzEoiUOtsmaU4=)
                          2: tjZDIne6Lh06R4o5e-okODsmQgw.roa (hash: SpruQ9gTaT5Np0Jbcr249Zlgr0yF1KQPIhU/7j1iDQY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:37:21:e5:27:14:2d:c5:22:60:5c:cb:cc:8f:96:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
        Validity
            Not Before: May  7 04:01:58 2024 GMT
            Not After : May  8 04:01:58 2024 GMT
        Subject: CN=cb2b727c8c7441a1f73fb4800f570b69da3b9b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3a:ec:e2:a8:aa:dd:92:a4:16:97:5c:87:61:
                    7f:ae:80:cf:d6:2d:5d:f3:0f:e8:a7:6b:43:78:7b:
                    5d:33:43:83:ce:26:95:48:67:a3:e1:59:5a:a1:bb:
                    e1:54:04:7c:37:6a:b3:78:d5:21:f8:e3:6d:1f:7c:
                    cc:d9:fc:98:66:3d:7a:81:52:ed:e7:c1:e4:74:16:
                    d3:ea:54:71:47:62:24:90:20:9b:71:6d:86:01:4d:
                    fc:d6:5b:c1:7e:4e:82:eb:59:ed:48:d0:53:01:df:
                    6a:33:1e:bc:11:d2:ea:a8:6b:65:c6:c1:84:73:62:
                    ba:b2:ff:0e:39:bc:26:ef:09:a0:6a:5b:0f:80:e0:
                    52:81:39:d0:17:44:6b:b6:8c:61:8a:72:91:10:91:
                    3d:8d:12:10:6c:b3:52:21:69:20:b2:e2:1d:68:16:
                    19:61:c4:6d:97:ce:31:bf:4e:d5:9d:42:f8:14:e9:
                    37:fc:25:56:da:c1:71:18:27:73:7b:63:8d:82:c8:
                    4c:1c:f2:74:29:50:a2:32:07:e4:fe:68:8a:e6:76:
                    f8:f4:21:fc:67:88:d2:cd:86:16:9b:74:d0:e1:74:
                    6f:3d:30:5f:e6:99:e3:16:a6:9a:34:96:b6:2c:6f:
                    ef:c4:57:2c:cd:84:24:b5:a8:72:e2:2e:7b:46:02:
                    95:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2B:72:7C:8C:74:41:A1:F7:3F:B4:80:0F:57:0B:69:DA:3B:9B:8F
            X509v3 Authority Key Identifier:
                keyid:1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:4d:ba:d4:3b:b2:2c:83:2f:c4:2a:08:6c:92:1c:3a:61:4e:
         02:34:21:af:e9:09:9e:e7:ad:e0:68:d4:63:7f:96:24:38:67:
         05:a7:a9:47:63:da:53:fc:fb:88:4a:02:55:62:5b:31:4a:ea:
         4a:ee:f4:ea:a3:2e:7b:f7:91:62:bb:cc:6b:75:c5:69:89:20:
         ae:94:22:3f:23:46:63:ba:89:ed:27:9f:61:b6:9d:0f:73:88:
         f3:3b:4d:ea:01:0f:70:11:35:7d:d9:35:cb:b4:9c:10:5d:85:
         d5:59:49:71:6a:64:cc:c5:c4:39:fa:b6:a2:6f:fc:9a:76:75:
         9b:f5:e8:37:c5:7f:1c:7c:54:86:36:12:d7:86:3f:a6:4c:27:
         cc:24:7a:77:2f:d5:0b:5d:00:92:c0:3e:d8:4c:e9:b5:39:72:
         6d:d6:27:c6:91:9c:ab:ec:bd:f7:ed:c0:d4:a5:3b:d8:11:1d:
         d1:13:89:2a:e8:e2:c0:69:23:56:37:f3:02:07:41:1f:b3:36:
         5c:a0:a1:81:65:59:ee:1d:18:ec:61:74:32:9d:52:67:a7:46:
         9e:5d:11:15:05:40:7a:5a:f6:aa:19:09:90:a6:6f:a2:02:ef:
         3f:fe:29:bd:17:26:7a:66:9c:bf:c8:fe:3c:00:e2:56:bd:be:
         dd:28:3a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:27:24 2024 by rpki-client on console-ams.rpki-client.org