Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
File:                     sejPc4YgDf2psGfbnHfTBmDXTNo.mft (raw, json)
Hash identifier:          A6+jfvsVQHUHtRpbAsJLHT1q+uii6sbl61Vc9wXRKyg=
Subject key identifier:   B4:26:49:CB:58:DB:A1:A2:C6:4E:A3:BD:C7:68:F5:F5:15:63:05:AB
Authority key identifier: B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
Certificate issuer:       /CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Certificate serial:       018F89393C55F9560FE97D0145EE9FB6CFE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
Manifest number:          0692
Signing time:             Sat 18 May 2024 01:03:00 +0000
Manifest this update:     Sat 18 May 2024 01:03:00 +0000
Manifest next update:     Sun 19 May 2024 01:03:00 +0000
Files and hashes:         1: sejPc4YgDf2psGfbnHfTBmDXTNo.crl (hash: NGH6dY0gZ2WmQtBC75Bbn1xyDXVSk8mYgW5y1WKOMwI=)
                          2: wcVl30ZLLoLnoOb0LVTaQxXR0Ts.roa (hash: dNRLkbkwXyOQzFJc7pZXooPQigK0mjK/xe2jbf1/WjA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:3c:55:f9:56:0f:e9:7d:01:45:ee:9f:b6:cf:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
        Validity
            Not Before: May 18 01:03:00 2024 GMT
            Not After : May 19 01:03:00 2024 GMT
        Subject: CN=b42649cb58dba1a2c64ea3bdc768f5f5156305ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a9:5c:c7:91:5b:f6:14:25:84:9e:40:0b:c9:
                    9d:ca:91:83:7e:6a:e7:23:6f:01:2d:96:2b:d1:5d:
                    55:ca:cb:16:28:9f:bf:08:ff:5c:c9:8d:31:2d:61:
                    7d:ae:06:db:1d:bf:d5:f4:63:6f:5f:0e:98:40:6d:
                    92:a6:f6:99:68:15:1a:44:b3:03:fd:b5:29:72:05:
                    0c:4b:74:fd:ab:80:00:c2:e5:7f:c2:62:55:4f:56:
                    98:a7:f8:99:62:48:4d:b8:57:c3:90:41:88:7b:4a:
                    40:45:9d:a5:ec:e6:bc:eb:f7:da:f4:68:6e:b8:25:
                    11:a2:5d:d1:2e:1b:23:88:f7:91:f1:91:65:bc:d2:
                    96:c0:49:27:a8:9d:a2:28:3b:22:ad:b5:2d:f7:e7:
                    56:ff:02:8b:28:4c:3b:4f:82:36:b1:f7:22:7b:b5:
                    97:89:35:7d:d1:8a:43:57:cb:89:28:b8:57:18:73:
                    65:fe:c7:bd:5b:9d:62:85:3a:7d:d4:99:17:9c:fe:
                    f0:16:0e:7a:d2:a5:f8:f5:5b:ec:83:70:70:6a:74:
                    84:a9:70:31:f9:19:a8:8e:d2:64:a2:96:52:ab:f4:
                    ef:b0:31:f9:96:83:60:6b:be:cf:7a:39:03:22:62:
                    5d:9a:7b:a4:87:fc:f2:f2:60:2c:74:7a:27:6b:9e:
                    74:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:26:49:CB:58:DB:A1:A2:C6:4E:A3:BD:C7:68:F5:F5:15:63:05:AB
            X509v3 Authority Key Identifier:
                keyid:B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:23:5f:a1:c1:06:33:76:fc:09:38:ff:ab:13:ef:84:b8:55:
         22:75:c3:69:5e:10:2f:72:47:dd:67:65:a7:aa:18:2f:70:da:
         ae:81:76:03:da:ee:74:09:eb:22:11:89:69:e9:97:63:a8:e1:
         0b:86:73:62:77:6a:c5:8e:ef:65:bc:3d:44:72:29:03:46:cd:
         25:1b:34:d8:d1:a5:5a:8f:38:ff:ae:3e:40:f0:92:2c:9d:80:
         58:38:2a:c9:f8:fa:93:68:85:65:c2:4f:5d:21:ad:2b:55:78:
         4a:84:61:e8:0c:6e:3f:ec:07:8b:8d:19:88:66:38:e4:20:8a:
         44:62:3e:ee:51:5f:2e:4b:0e:fd:99:6b:39:6e:e8:a2:a5:09:
         be:0f:54:07:e7:17:65:f3:b7:8c:42:1e:e2:52:65:b7:ae:76:
         4a:2b:03:7a:64:7b:3b:fe:52:83:a3:fc:0d:ba:36:c2:c6:1c:
         7e:ea:42:20:c0:d7:d6:e5:20:9d:ce:4e:76:29:d2:87:af:b2:
         55:75:5a:87:f9:32:2b:c5:91:4a:a7:94:2c:23:b4:37:b5:ef:
         29:d8:b0:a6:74:0e:71:10:d2:a2:fa:bd:90:1e:29:96:f9:e1:
         03:0f:e8:9a:05:3f:ad:92:ff:de:cf:d6:8a:c0:5f:e7:62:35:
         9f:aa:13:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:18:34 2024 by rpki-client on console-ams.rpki-client.org