Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
File:                     1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json)
Hash identifier:          RxuKy6F0ExKQZ6T5dcuqkoqKdf09YRGUYAmEpDCI9RU=
Subject key identifier:   9A:D8:88:65:29:1B:A8:8C:B0:87:0A:D1:3B:47:8D:F9:7E:01:01:84
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Certificate issuer:       /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial:       018F8749536E3D916E7F55B739F1190F6EA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
Manifest number:          0135
Signing time:             Fri 17 May 2024 16:01:20 +0000
Manifest this update:     Fri 17 May 2024 16:01:20 +0000
Manifest next update:     Sat 18 May 2024 16:01:20 +0000
Files and hashes:         1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: +/e81QOxuY2rmgF1FLj27PPgzL9uuuJh9VOy+w0yOt8=)
                          2: q7I8QprBnAaRxizx69SzqdJ3-wA.roa (hash: Tqfk1EwVXycEcdPzP6sw9B+UnCCwVu0qP9RpYtugm2A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:53:6e:3d:91:6e:7f:55:b7:39:f1:19:0f:6e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
        Validity
            Not Before: May 17 16:01:20 2024 GMT
            Not After : May 18 16:01:20 2024 GMT
        Subject: CN=9ad88865291ba88cb0870ad13b478df97e010184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:22:0e:ef:c4:29:19:ba:56:2c:85:f5:fe:18:
                    0d:59:55:ec:a5:b9:6f:c2:a1:70:3f:7f:31:ed:99:
                    6d:6f:f6:90:55:9b:1e:e9:c6:b1:80:d2:67:31:fb:
                    4f:ee:63:4a:aa:99:34:88:c2:5f:8a:90:87:e8:9e:
                    02:20:a6:61:13:e2:0e:0d:59:de:58:2f:67:bf:61:
                    2c:36:49:fa:d9:c3:6d:13:ef:ad:88:7a:79:f4:a7:
                    25:18:b4:36:a5:cc:5c:d2:3a:8e:fc:98:89:1e:87:
                    54:58:da:ca:e6:e4:78:fd:9b:fc:81:ee:c0:9d:cb:
                    cc:6c:f5:bc:58:37:06:ed:a1:a0:77:36:39:5f:a0:
                    54:e1:4e:d2:9f:e1:5f:cf:d8:7f:b2:f2:e8:d3:22:
                    bb:80:f6:d4:07:62:59:6b:a4:c2:46:30:a6:4d:37:
                    65:d5:68:58:db:f7:3f:21:01:77:2d:ce:df:98:8a:
                    43:89:ed:26:46:40:6a:eb:99:72:9a:2a:a8:0e:5d:
                    15:3f:47:cb:98:a2:1d:cf:cd:a4:61:f3:a0:36:43:
                    fd:53:1b:2b:55:66:79:d0:5d:a6:b0:b8:d9:64:ab:
                    75:81:04:cc:07:f8:90:75:15:b9:3b:5c:6e:48:66:
                    eb:8e:5f:12:32:21:68:90:f2:48:8e:ef:68:8d:06:
                    63:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D8:88:65:29:1B:A8:8C:B0:87:0A:D1:3B:47:8D:F9:7E:01:01:84
            X509v3 Authority Key Identifier:
                keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:6f:c8:27:a9:63:19:55:97:31:1b:10:7a:a7:b7:e8:2c:5b:
         1e:68:43:5d:e5:29:77:b2:d1:8b:c1:c4:fb:d2:cb:89:66:a1:
         d5:c0:66:5e:08:10:cf:45:e8:ac:83:8d:3b:bc:e8:62:d2:33:
         df:8c:6d:64:c6:85:5a:cb:bb:fe:9f:95:db:01:8d:45:08:3a:
         f2:0e:86:ec:89:0c:97:19:50:97:e1:6a:64:4b:c5:27:75:cf:
         43:be:45:9d:ed:84:49:73:f8:89:75:95:09:f2:45:aa:92:f7:
         23:e0:ec:96:6b:85:62:61:f2:44:c9:c3:bc:3f:43:de:16:49:
         6c:9b:04:9a:e7:4a:71:a7:96:bd:09:7b:ed:77:36:d0:a0:94:
         3a:6f:07:6d:b3:3f:04:03:d8:82:a7:cf:74:15:d5:21:13:8b:
         6b:8a:8b:6a:e1:aa:60:28:e7:fa:b8:d7:23:86:dc:cb:c9:08:
         20:48:ab:33:6f:8a:ff:7f:38:1d:8b:12:2c:bd:47:42:06:fa:
         8b:d4:47:fb:8c:4f:be:f1:b3:67:41:bf:e5:4c:75:ad:df:92:
         96:c7:f5:64:ac:b7:d6:6a:04:a2:c8:53:81:d7:c9:99:ab:0c:
         3d:61:69:7f:ad:3b:01:c0:27:f6:5b:ed:9d:2e:ab:0b:10:ed:
         c0:2e:fc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:06:17 2024 by rpki-client on console-ams.rpki-client.org