Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File:                     0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier:          IHYdfPJ+acgG0NDJpbJE9KpGaIlws4rkXbaOU3gMjac=
Subject key identifier:   59:B8:A1:F9:1B:19:94:98:01:74:6C:0E:61:33:C7:BD:15:72:08:31
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer:       /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial:       018F381B84360928E94942E180608D92BECA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number:          0670
Signing time:             Thu 02 May 2024 07:01:18 +0000
Manifest this update:     Thu 02 May 2024 07:01:18 +0000
Manifest next update:     Fri 03 May 2024 07:01:18 +0000
Files and hashes:         1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: AgU+MYz858FdZvU4qXOLrOW9V1N2PtU3rMBNTCwFhvo=)
                          2: dyne9Sx2gtO_5CKucfL9pG0knkA.roa (hash: qUlp33TWV6qvVNboKZPBhYQrQYy3BM2MXLvanrwWGlc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1b:84:36:09:28:e9:49:42:e1:80:60:8d:92:be:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
        Validity
            Not Before: May  2 07:01:18 2024 GMT
            Not After : May  3 07:01:18 2024 GMT
        Subject: CN=59b8a1f91b19949801746c0e6133c7bd15720831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:a4:5e:29:d0:d9:45:56:af:76:4f:80:2e:
                    e3:e4:27:18:8c:07:f0:60:ea:87:c8:47:b2:de:64:
                    88:7d:f9:36:60:0d:1e:fa:d1:9a:ba:14:5e:d8:a0:
                    37:41:d4:c2:ea:59:db:c8:98:b9:cb:e3:64:17:02:
                    57:63:82:04:c6:0a:05:71:38:92:de:e7:18:1f:36:
                    97:68:fe:c3:50:72:39:32:c3:05:cb:e8:a5:a8:2b:
                    7e:9b:22:09:af:c8:8a:0f:7b:db:7a:21:21:51:e0:
                    56:e2:e0:01:48:a3:a0:02:f9:c2:50:63:de:b8:e2:
                    3d:b3:9e:81:b5:e3:91:2e:99:01:40:f3:6d:50:e2:
                    df:a5:12:51:92:77:b2:1b:fc:b7:bf:41:f9:63:2f:
                    6e:0f:d0:82:ac:29:ad:aa:45:c7:17:49:fa:9d:67:
                    52:de:49:d4:d4:94:d7:9e:60:c0:4b:0c:9b:a5:11:
                    3a:b7:af:89:e6:a1:83:b3:2d:d4:a7:18:77:90:59:
                    28:b4:45:92:a2:2c:25:20:16:4f:c7:5a:db:95:ac:
                    77:3e:56:03:21:a3:db:1c:0b:21:74:b7:39:f9:a0:
                    41:0f:e6:e2:d2:20:23:a5:0a:aa:ac:66:0e:83:28:
                    9e:3d:f2:7e:0d:48:d6:2c:6b:10:2b:e1:09:73:4a:
                    11:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B8:A1:F9:1B:19:94:98:01:74:6C:0E:61:33:C7:BD:15:72:08:31
            X509v3 Authority Key Identifier:
                keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:18:3e:a7:05:3c:36:e2:91:62:de:db:d8:27:1f:a9:20:41:
         55:62:1f:5a:98:26:87:91:3e:cb:01:6a:95:ff:58:5d:c2:be:
         c4:63:95:9b:96:e5:01:13:19:f7:b7:eb:80:d6:c7:d7:a6:50:
         64:bf:f9:66:78:79:53:a1:19:90:76:e1:f8:ed:93:f0:f9:dd:
         49:9e:dd:e9:4d:01:d6:15:bf:84:3b:03:65:af:87:47:af:46:
         3f:9d:ba:b6:ec:68:de:ff:17:b2:e1:7a:59:1d:5d:f6:08:45:
         68:2a:47:f2:9d:e7:5a:49:66:37:f6:09:d4:b3:a1:d8:c1:8f:
         fc:1c:4a:f8:0c:99:7f:3a:04:4d:29:60:0b:62:3c:df:b8:de:
         3e:e9:f1:25:0c:26:d5:f7:9a:29:c3:fb:e9:f1:a6:b7:b9:72:
         30:ac:f7:a9:e8:c2:85:e8:e5:97:e4:ac:08:0f:d7:f9:7c:c1:
         41:39:40:c3:a5:45:69:ef:c3:ff:7a:47:37:ea:b2:4b:fd:84:
         6f:e4:3f:15:a2:04:03:3f:4c:55:68:87:4c:6c:ee:c9:11:f6:
         e8:29:71:5b:f0:77:ae:c6:b6:66:a4:38:d6:f5:a7:80:21:cd:
         a9:87:2e:ba:d6:41:95:f0:f7:54:88:6b:c6:d0:c1:23:b6:b1:
         d7:5d:cf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:19:25 2024 by rpki-client on console-fra.rpki-client.org