Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
File:                     G3573I4VumsubQlVJHa7G1WxWcM.mft (raw, json)
Hash identifier:          vtJBiEDdwlurvNjIyAda3f2Y1jRtF5aS41wOfh/mLUo=
Subject key identifier:   42:FB:CE:EA:FF:0B:7B:A6:11:D6:15:80:D8:93:C2:0B:A0:86:27:4A
Authority key identifier: 1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
Certificate issuer:       /CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Certificate serial:       018FD4F63F9E2B4A8D36283CCF48979772E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
Manifest number:          0B1A
Signing time:             Sat 01 Jun 2024 18:00:58 +0000
Manifest this update:     Sat 01 Jun 2024 18:00:58 +0000
Manifest next update:     Sun 02 Jun 2024 18:00:58 +0000
Files and hashes:         1: G3573I4VumsubQlVJHa7G1WxWcM.crl (hash: Zo0HIn5Pvcl5qIX+iLI7tftpNQ10qWhsRHfmPt6rL0U=)
                          2: IJceaMVA9DeypT82zYAHcTPcaKY.roa (hash: fKsEW3AeOcfRLhduOXtE+cPvnM4G9kg8N7vHIbOWxrk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d4:f6:3f:9e:2b:4a:8d:36:28:3c:cf:48:97:97:72:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
        Validity
            Not Before: Jun  1 18:00:58 2024 GMT
            Not After : Jun  2 18:00:58 2024 GMT
        Subject: CN=42fbceeaff0b7ba611d61580d893c20ba086274a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:97:7a:bc:5a:59:95:fc:e8:e7:3f:55:1f:03:
                    8c:62:a9:18:75:a7:c3:f1:98:64:e0:18:85:95:5e:
                    17:db:aa:5e:0c:13:ac:e0:b2:5a:2b:46:6a:2d:dc:
                    12:f8:b5:43:80:29:66:8e:8c:fb:f1:95:b5:91:00:
                    eb:ca:95:40:fa:a2:71:ba:96:0a:b9:02:a4:e5:2c:
                    84:6b:7b:c1:bb:f2:74:bf:79:2a:c5:d6:28:90:ee:
                    b6:0a:e7:5b:31:61:40:63:41:61:e0:9d:93:00:6c:
                    8d:e9:38:1a:58:ba:66:22:f4:be:1c:4d:45:03:b7:
                    7f:88:d9:51:5b:f6:59:53:d2:65:e7:08:ce:8b:9e:
                    c7:f6:3f:d7:dc:0f:fd:e6:a1:2d:d0:bf:f0:29:93:
                    3b:da:ec:0f:56:26:03:e6:e4:a9:cd:b8:7b:0f:fd:
                    79:44:32:d4:6d:0d:49:88:ff:59:6f:9f:3f:9e:2e:
                    90:57:c2:62:cb:e0:d6:7b:b1:45:0f:61:58:e9:5e:
                    b0:6b:83:e0:b2:f5:97:b5:08:78:50:79:4f:1e:8f:
                    5a:92:3e:92:88:7f:fc:1b:26:75:e0:fc:df:26:d1:
                    1b:90:42:72:5b:04:ba:37:10:94:0f:7b:ef:22:c7:
                    54:0c:6b:53:9a:0f:52:0e:cc:04:db:aa:30:6f:34:
                    57:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FB:CE:EA:FF:0B:7B:A6:11:D6:15:80:D8:93:C2:0B:A0:86:27:4A
            X509v3 Authority Key Identifier:
                keyid:1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:2d:55:d9:80:3a:34:bf:f1:83:81:60:c8:53:bf:11:b2:01:
         33:ea:99:f5:06:f3:f1:7b:37:df:d5:7f:98:5c:c0:e1:87:3d:
         72:03:8a:02:47:b3:a4:5c:de:a1:26:23:b0:28:94:a2:f1:4a:
         93:e8:44:bd:ce:b0:27:97:cd:13:1d:bd:1e:44:a7:a6:45:83:
         9e:50:cf:6e:6c:67:48:68:6c:7d:10:ce:69:0b:a2:e6:1e:2d:
         85:67:94:39:ee:e8:0d:8f:97:fc:20:ef:5c:27:b1:bc:5a:29:
         a2:49:b7:53:b8:cf:a6:59:4d:10:ec:f7:b9:ac:e8:34:26:a3:
         00:eb:3c:b8:91:76:1e:66:2a:a3:74:95:a6:da:e8:23:e9:54:
         d7:9e:e9:16:86:a5:76:89:39:f0:83:d1:96:bb:17:4c:42:37:
         25:21:a4:89:e2:05:37:a5:a1:0e:c8:fc:28:fe:c3:77:a0:5e:
         c8:af:96:ad:26:ca:a3:a4:3e:e1:0b:7f:db:7e:01:23:b8:86:
         81:e4:e8:d7:0d:f8:cc:45:4c:ee:89:78:8f:64:14:17:a4:bc:
         12:d8:8e:12:cc:7e:bb:5b:41:6c:a4:69:75:ad:ae:d7:e6:88:
         f1:eb:1d:fd:4d:aa:f1:ad:5c:c9:81:0e:d6:0d:08:14:14:6d:
         86:9b:11:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:45:55 2024 by rpki-client on console-fra.rpki-client.org