Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
File:                     1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json)
Hash identifier:          3eHaCf/ggjZKKEsvkTecJSC6KSIT/ErQGwWoC7zOv2E=
Subject key identifier:   6F:30:9F:25:1B:2F:3A:54:F8:B3:F1:8A:C1:38:7E:A3:72:13:FA:0D
Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
Certificate issuer:       /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Certificate serial:       018F3BF976A2BB8AC4F167A01A083FAC6817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
Manifest number:          041D
Signing time:             Fri 03 May 2024 01:02:35 +0000
Manifest this update:     Fri 03 May 2024 01:02:35 +0000
Manifest next update:     Sat 04 May 2024 01:02:35 +0000
Files and hashes:         1: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: mSwZW39XpK9fVFTc80tkdKZROAmCPJ7mffWmjBLm/v0=)
                          2: STRbmVQLKlH94npqOphCpzQ7dtc.roa (hash: Vn+exrYDHQ49DPiOUqHa+V+MY7V0GjfWeaQeBLIyIps=)
                          3: UZpbHbYOhys6N3r03cXSsvIy45s.roa (hash: bT2yhIfV4C7e/7q77CyGgJtzzFl1IB09bqsQ4WdIkOY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 00:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f9:76:a2:bb:8a:c4:f1:67:a0:1a:08:3f:ac:68:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
        Validity
            Not Before: May  3 01:02:35 2024 GMT
            Not After : May  4 01:02:35 2024 GMT
        Subject: CN=6f309f251b2f3a54f8b3f18ac1387ea37213fa0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:09:34:00:1b:c1:ab:de:d0:64:06:eb:6b:d3:
                    ec:c5:9f:39:5e:80:3f:0e:aa:11:f0:18:66:30:6c:
                    03:ec:af:f3:c4:d1:fb:57:c7:22:f5:97:48:37:0d:
                    1b:69:b6:9e:ce:40:db:8e:0a:8f:b8:9f:b0:22:3a:
                    6e:b9:ba:49:5a:ec:c2:2a:e3:82:cb:56:56:af:80:
                    45:61:8c:f1:60:f6:9a:40:e1:2b:10:af:f6:ab:62:
                    39:19:29:7a:5e:ba:6e:74:f1:34:79:0b:e9:55:db:
                    cf:ec:14:12:c6:1b:48:16:b5:0c:aa:53:12:1d:51:
                    c0:c0:08:06:22:85:91:6a:29:fa:6d:25:ac:ad:c5:
                    68:8c:c1:ac:ee:72:6e:bb:bb:68:4b:88:8b:f0:53:
                    d0:a7:2f:99:8a:78:93:0a:c8:6f:b2:ad:97:8b:66:
                    76:2c:eb:63:39:19:84:51:66:79:4e:99:71:e3:75:
                    0a:89:8e:09:7a:86:ce:51:0e:65:25:d6:91:b1:51:
                    57:a5:cd:7e:ff:59:83:5d:00:56:0c:80:d9:3a:9b:
                    94:46:c6:bd:6d:7f:45:a3:bf:3d:e3:de:98:1c:c2:
                    e1:23:66:fd:be:1d:ab:8c:34:f7:22:dc:b6:e5:e3:
                    e1:38:cf:96:c9:cb:bf:10:c6:57:9b:9b:92:38:93:
                    1b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:30:9F:25:1B:2F:3A:54:F8:B3:F1:8A:C1:38:7E:A3:72:13:FA:0D
            X509v3 Authority Key Identifier:
                keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:25:cc:90:3c:b1:1c:7a:3d:0d:a3:e5:09:e0:c0:4f:ef:39:
         3f:76:e7:03:22:d0:1a:cb:1d:86:7f:1d:45:04:d3:65:99:d3:
         11:e7:54:ce:5a:a4:73:c7:c2:76:ef:8a:c0:9b:cb:eb:42:17:
         5d:ce:62:a8:c0:18:44:c4:c2:96:df:43:81:6e:9d:80:a1:7d:
         1a:82:39:24:b1:d5:10:21:e5:c2:28:e9:c2:dd:19:92:a1:ac:
         ca:dc:5e:38:5a:8a:dc:3f:71:e3:e8:f9:57:29:da:65:a5:cb:
         be:bb:b7:b7:02:3b:cd:f9:3f:d3:3f:7a:34:69:15:a7:35:b2:
         46:c1:21:69:fe:71:ec:3a:e3:ee:9b:93:d9:8f:64:8d:23:e1:
         cb:36:80:91:16:c9:07:e1:d1:01:2a:87:9c:0b:df:ef:42:06:
         39:2c:1d:24:5a:72:a3:77:b4:da:e2:69:f0:21:40:22:8e:b4:
         b8:a8:15:ce:ef:5a:7b:cd:5a:01:4d:31:a6:2b:9d:f1:1a:7b:
         ea:89:e0:68:09:2b:fa:58:98:c0:7f:e9:91:39:6b:e2:29:e5:
         cf:4c:72:86:ff:cb:9f:3f:7d:d8:c1:ed:00:d1:eb:4a:7b:b4:
         80:4e:20:42:18:77:b9:f0:d1:32:34:ac:ca:31:5c:e4:4f:7e:
         6c:9b:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:33:01 2024 by rpki-client on console-ams.rpki-client.org