Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
File:                     T2F9awPi_l-JEcvrX64tyjvWZ38.mft (raw, json)
Hash identifier:          B8bs+mT0mZWrZmG5/XJd5SJb7bHzn8xholdh3CL8N2Y=
Subject key identifier:   0E:CF:22:53:7E:4B:DD:05:F7:1A:E2:1C:C6:A1:A5:02:81:A6:8C:45
Authority key identifier: 4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
Certificate issuer:       /CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Certificate serial:       018F8824890E6F8A9E075358782BAB37EBD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
Manifest number:          0E58
Signing time:             Fri 17 May 2024 20:00:46 +0000
Manifest this update:     Fri 17 May 2024 20:00:46 +0000
Manifest next update:     Sat 18 May 2024 20:00:46 +0000
Files and hashes:         1: T2F9awPi_l-JEcvrX64tyjvWZ38.crl (hash: 5MHiAC/Pk4HSGdFv8W5vfq762ydzXVjof9egKmzNIlQ=)
                          2: aGCd3EvkWTnxt6ymvLZfGN9A6DE.roa (hash: kXzN+u0B6yUq25pd2XU+RMCdUIRV4kkzU07potyXTjo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:89:0e:6f:8a:9e:07:53:58:78:2b:ab:37:eb:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
        Validity
            Not Before: May 17 20:00:46 2024 GMT
            Not After : May 18 20:00:46 2024 GMT
        Subject: CN=0ecf22537e4bdd05f71ae21cc6a1a50281a68c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:95:05:c1:18:91:00:22:1c:75:d7:71:a8:2f:
                    72:75:ac:58:51:54:56:7f:92:41:23:a3:cb:a8:30:
                    96:71:cd:f3:b7:5e:d0:75:36:11:43:5b:75:20:c6:
                    6d:bc:b2:a1:95:21:e5:33:2f:dd:b1:67:31:b4:03:
                    f6:64:d1:27:8d:9e:7e:9e:d8:21:2b:97:db:fd:bc:
                    ba:09:8c:b7:71:56:e5:ea:63:9f:75:ae:fb:89:5b:
                    6f:cf:56:78:fc:a6:31:ef:d1:47:96:a6:f8:1f:71:
                    76:ad:2a:74:24:eb:4c:60:c1:da:9c:59:26:99:ac:
                    07:bf:f7:2c:85:30:b7:89:d9:df:ed:44:bc:8f:52:
                    1c:1b:2e:a0:26:34:91:c2:12:56:a8:5b:85:f2:ef:
                    e7:9d:3a:09:b1:69:b8:50:d7:68:ab:a5:95:69:8c:
                    b9:31:1b:fb:bb:b9:32:e9:e7:1b:62:8b:71:48:e3:
                    18:3d:85:48:19:0d:35:a4:06:4d:82:15:2c:97:5f:
                    31:5a:03:6b:a2:58:10:63:6a:24:4e:2d:75:88:88:
                    b4:2e:14:70:8a:0d:c1:9f:01:ed:81:95:b1:0e:94:
                    04:5e:a7:cb:55:d4:23:57:fa:fe:63:e8:50:f6:62:
                    2a:1c:a5:65:d2:8a:f2:2a:6f:d7:6b:1f:c3:c2:d8:
                    63:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CF:22:53:7E:4B:DD:05:F7:1A:E2:1C:C6:A1:A5:02:81:A6:8C:45
            X509v3 Authority Key Identifier:
                keyid:4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:cf:9f:98:97:2e:2c:4f:18:d7:6f:05:06:35:1f:2b:c4:93:
         c3:b1:95:0f:b1:54:65:b7:78:b1:a4:7c:bb:38:6a:2f:d1:73:
         f9:1c:dd:58:b3:26:66:a4:a1:32:43:8c:c0:8b:f3:32:9d:72:
         c7:a0:f9:da:44:96:ad:7b:ec:3a:04:e5:63:a1:6c:ef:5f:eb:
         ce:27:2c:b6:9a:60:a3:13:e7:09:4a:5a:d5:96:d4:9b:05:64:
         e8:76:a9:62:0c:6e:d3:7d:e2:59:48:89:4d:c2:e4:58:7a:9f:
         7c:04:69:a1:b6:f0:df:21:28:4d:66:e3:00:fc:56:ec:7f:a3:
         5d:3d:9f:81:53:b2:00:3c:6a:d4:9d:04:0e:34:b5:af:17:b6:
         e5:ad:d3:51:c5:28:7c:d6:a2:9c:5a:4e:1a:d4:b6:cb:81:6b:
         7e:17:24:46:28:b7:d1:88:e9:bc:b1:1b:7d:9b:91:9c:21:18:
         47:72:ce:a4:4f:15:0b:12:c1:79:af:c0:d9:67:fb:d1:d6:81:
         17:79:d8:eb:3b:89:9a:1a:ef:28:2c:79:ba:e9:6c:3e:13:da:
         c0:7f:15:c1:af:18:e5:08:79:ca:0e:18:8a:10:45:9f:61:7a:
         e4:03:ea:53:ee:6f:4b:01:8e:64:66:cf:6f:b5:5e:4a:45:31:
         66:2d:f6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:51:13 2024 by rpki-client on console-fra.rpki-client.org