Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
File:                     A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft (raw, json)
Hash identifier:          r8BiYNQhIua+BkRn9URr8v2CF4oXu62WwtmH2asFrcA=
Subject key identifier:   53:65:26:5D:47:10:C0:DD:5F:36:F5:65:59:A5:A0:69:17:9F:90:27
Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
Certificate issuer:       /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Certificate serial:       018F4F4923DE564A14BB63850A61305F9C94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
Manifest number:          0D67
Signing time:             Mon 06 May 2024 19:02:24 +0000
Manifest this update:     Mon 06 May 2024 19:02:24 +0000
Manifest next update:     Tue 07 May 2024 19:02:24 +0000
Files and hashes:         1: A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl (hash: 3eFgk8ZiodBFSpdIB6lqDy/S6nUIWCX1WBVhYxfp7Io=)
                          2: c71Dts5WhSG_wf8zyc402QYiWX0.roa (hash: fhxNELE227f6HXbzdhTgzVB6ecVSWyFgeOrdgt5YKXQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:49:23:de:56:4a:14:bb:63:85:0a:61:30:5f:9c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
        Validity
            Not Before: May  6 19:02:24 2024 GMT
            Not After : May  7 19:02:24 2024 GMT
        Subject: CN=5365265d4710c0dd5f36f56559a5a069179f9027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:53:17:4c:a3:1f:d3:68:0c:f5:96:6b:be:89:
                    07:b8:ac:44:47:cb:0a:33:94:f0:4b:58:5a:d3:0b:
                    07:06:25:34:5d:fd:2e:66:14:e9:4b:5e:f4:e1:3f:
                    50:94:00:04:27:49:17:8a:69:d6:2c:6d:54:de:25:
                    75:0d:ac:ce:e9:5d:2a:81:8b:5f:34:1f:f0:13:d0:
                    20:89:f8:32:2c:69:f5:ea:88:1c:fc:7d:7f:30:52:
                    21:a1:88:4c:00:9c:2a:e1:c1:76:7c:d9:90:53:68:
                    f3:82:7e:2e:72:f1:81:a3:9c:ad:9a:42:04:f7:da:
                    49:5d:0c:d2:90:fa:b3:9e:a4:05:cb:59:3e:9d:18:
                    e5:4c:67:5e:ae:fb:b3:4a:5a:ff:c2:97:c5:ce:d2:
                    f9:7d:3a:b6:bf:74:50:82:9f:8d:74:cb:00:97:a8:
                    c4:35:2f:ac:9c:4b:df:c2:56:52:29:6f:c6:47:d5:
                    26:58:db:e3:1a:19:5b:d6:ab:d4:45:0a:d6:18:95:
                    f6:2e:49:ec:24:fc:d3:7c:74:16:95:1f:36:eb:a5:
                    a0:d2:03:3f:b3:7f:b3:3a:8b:2e:a0:45:8e:0d:db:
                    08:1c:25:e3:c3:30:d8:6b:48:ea:9c:a8:af:65:b1:
                    c2:be:29:98:64:7c:13:58:9f:51:97:ef:fd:5a:fc:
                    b2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:65:26:5D:47:10:C0:DD:5F:36:F5:65:59:A5:A0:69:17:9F:90:27
            X509v3 Authority Key Identifier:
                keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:02:a8:08:a3:13:a1:c6:5f:c3:52:64:c1:16:06:11:3d:0a:
         6e:6b:9b:85:5e:59:d6:83:36:33:3b:a6:68:13:6e:bf:cd:4a:
         d7:fe:7b:bb:b1:cd:2d:da:a7:45:42:33:36:28:87:44:74:aa:
         5c:74:60:17:d6:13:a9:4f:07:c6:f7:d0:65:c0:97:14:92:fa:
         4b:67:c1:b5:c1:87:96:c1:18:6e:d7:67:2e:2e:89:6f:f6:e9:
         04:aa:aa:eb:e1:4f:3c:d9:7f:f9:67:f5:82:97:2a:46:6b:1c:
         44:51:ce:2f:d3:2b:55:2f:c0:fe:ee:2b:73:7a:1a:6f:7f:2c:
         53:a2:15:f7:5e:31:71:45:fb:e0:74:71:1d:50:2a:13:dd:70:
         2d:b9:a9:16:cd:27:a7:c2:27:9d:39:dc:0f:89:e1:45:da:c6:
         ae:62:03:f2:05:59:01:8f:65:4a:4e:fb:a2:e3:f8:86:50:49:
         6b:16:a7:95:84:aa:9d:57:89:42:fb:85:b5:0d:b2:df:0e:65:
         56:60:b6:5d:95:3f:cf:7c:1c:e7:93:f0:07:16:56:40:73:3b:
         04:2d:1b:6b:7a:d7:aa:4a:1b:f6:8f:29:d5:54:23:7a:2b:d8:
         bf:c1:99:2c:72:7b:20:28:96:7b:e1:b6:d4:9a:42:07:5d:a4:
         e9:61:ae:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:49:35 2024 by rpki-client on console-ams.rpki-client.org