Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
File:                     1-2d6wpD-CR-iNunaZquveM0sjGE.mft (raw, json)
Hash identifier:          mM0+JihL/y/F6fTIfukbpXuX2U849puqGsON4aywWaw=
Subject key identifier:   3B:D1:C0:88:BC:D9:7D:DA:70:59:54:53:C8:04:AD:DF:3D:40:99:EC
Authority key identifier: FB:67:7A:C2:90:FE:09:1F:A2:36:E9:DA:66:AB:AF:78:CD:2C:8C:61
Certificate issuer:       /CN=fb677ac290fe091fa236e9da66abaf78cd2c8c61
Certificate serial:       018F20EE9B9B4252E85D20228BE58AE0C42B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
Manifest number:          0B3D
Signing time:             Sat 27 Apr 2024 19:00:59 +0000
Manifest this update:     Sat 27 Apr 2024 19:00:59 +0000
Manifest next update:     Sun 28 Apr 2024 19:00:59 +0000
Files and hashes:         1: 1-2d6wpD-CR-iNunaZquveM0sjGE.crl (hash: CPjCzd3UN7zi08lzBjPniKsU9oBzq6Rv3kwFJdfjeDE=)
                          2: 24IlOpcMZbBXEWuOYMQLm9eSz4U.roa (hash: 5mYbSNd7gLYGPJMTjildQ6jszxTobuo47S51teOZx8Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:ee:9b:9b:42:52:e8:5d:20:22:8b:e5:8a:e0:c4:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb677ac290fe091fa236e9da66abaf78cd2c8c61
        Validity
            Not Before: Apr 27 19:00:59 2024 GMT
            Not After : Apr 28 19:00:59 2024 GMT
        Subject: CN=3bd1c088bcd97dda70595453c804addf3d4099ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a1:9e:f5:d4:fd:42:d8:60:bf:d2:68:45:d9:
                    59:7c:66:7b:4b:db:94:97:05:17:0e:d2:a5:fe:17:
                    bf:a9:8b:3b:ca:f2:fb:e8:43:b2:df:0c:fc:5b:0d:
                    d9:e0:2a:ea:c8:24:71:01:fc:76:97:2d:b2:b2:17:
                    bc:b0:c4:f6:67:a6:63:ed:eb:41:eb:e4:c5:30:4d:
                    09:fe:43:f2:55:d1:a1:c6:b2:1b:26:01:0a:ed:db:
                    d2:86:4d:d9:b4:f1:e8:82:1a:70:a8:e9:8d:13:b7:
                    bf:c4:2b:3a:38:7e:f7:fc:e7:4f:31:ad:13:24:6c:
                    e8:67:17:43:6b:23:fd:f3:f3:f0:d4:ca:68:4c:f9:
                    aa:7b:20:49:a5:07:0c:d8:60:e2:01:0e:ce:c5:8d:
                    c9:62:22:2c:cc:de:31:07:35:a1:ac:c1:14:68:67:
                    08:1b:53:5f:dc:eb:f0:4a:17:a8:d4:ab:c1:1a:2c:
                    c5:32:90:ae:58:82:fe:ac:b5:e2:de:ae:93:b2:f0:
                    41:53:c0:8a:20:e8:a0:a2:fd:18:ad:6e:d6:3b:cf:
                    9d:43:2c:f5:b1:cf:aa:2c:cc:79:d5:84:61:8a:f6:
                    fc:cb:66:0e:38:56:3e:a4:1f:7a:3e:cb:14:5d:99:
                    7a:c3:5e:a0:fa:05:84:8e:62:e4:e5:ae:a5:30:b1:
                    18:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D1:C0:88:BC:D9:7D:DA:70:59:54:53:C8:04:AD:DF:3D:40:99:EC
            X509v3 Authority Key Identifier:
                keyid:FB:67:7A:C2:90:FE:09:1F:A2:36:E9:DA:66:AB:AF:78:CD:2C:8C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:60:ba:9b:ab:ea:b5:43:11:84:6c:2f:bc:70:18:c6:5a:e0:
         f0:ee:24:ea:51:3d:3b:93:21:0c:1d:5c:8b:71:e7:3b:c4:ef:
         4c:8f:70:68:8e:24:08:25:5f:d0:62:af:3c:af:30:1c:01:9c:
         ed:6e:30:fd:f7:52:bb:1d:63:a6:19:54:f5:d7:cd:e3:e7:26:
         b8:04:96:b9:5b:04:98:62:76:45:a2:f8:aa:c2:ee:e4:16:78:
         87:4e:c8:e8:22:5e:96:d9:82:98:07:21:50:9d:df:17:ff:80:
         96:b8:5d:52:74:06:09:81:35:a4:f5:25:e2:08:5d:77:e8:da:
         d8:f2:87:c3:32:fc:72:6f:14:8a:fb:70:fe:53:40:b1:c8:b6:
         ad:5f:1e:1d:ab:fe:31:9c:72:7d:9b:c9:13:0c:f2:cc:88:b3:
         18:c8:fc:a7:27:0e:96:a6:77:61:a7:11:d4:fd:11:63:28:72:
         dd:aa:97:12:fd:bd:23:93:ca:98:56:cf:01:16:4d:9e:da:a6:
         2e:1f:d8:bd:3a:01:63:2a:43:f9:61:a8:67:ec:b6:75:63:57:
         d2:f5:73:61:4d:32:3a:2e:83:c0:c5:a1:f5:04:b3:4d:19:b4:
         c0:e9:62:04:d7:03:2f:1b:1f:05:4c:bb:ca:e6:9f:0e:76:a4:
         38:39:88:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:29:17 2024 by rpki-client on console-ams.rpki-client.org