Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
File:                     240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json)
Hash identifier:          CMVMsepEUffzIX7Mc+tgttgjGyMXSibvq/akQaCjwJE=
Subject key identifier:   04:FE:F9:F6:45:09:7A:59:BD:88:E9:C7:0E:58:6C:AE:DC:1E:0C:16
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Certificate issuer:       /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial:       018F4C7DD426E4F507CBDA8E717884E008C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
Manifest number:          0E31
Signing time:             Mon 06 May 2024 06:01:05 +0000
Manifest this update:     Mon 06 May 2024 06:01:05 +0000
Manifest next update:     Tue 07 May 2024 06:01:05 +0000
Files and hashes:         1: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: 1ss6b2DixpHMBLZB4WYgAMvgnPXLFWDfV8VxnkEYKZU=)
                          2: GhbIi3llRgY4nBiRafy_ayR32zY.roa (hash: 3huhqSsZbxnlmmGDus7aJfJjspO5AtdIN9UlggGV6zI=)
                          3: hEo9zbmVQrkrCNyARQdMAH5m9iE.roa (hash: vJ3YKyFMz2BZuQLNVyICL3CJ5n7CJCDSsWSMCQ6XYwo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:7d:d4:26:e4:f5:07:cb:da:8e:71:78:84:e0:08:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
        Validity
            Not Before: May  6 06:01:05 2024 GMT
            Not After : May  7 06:01:05 2024 GMT
        Subject: CN=04fef9f645097a59bd88e9c70e586caedc1e0c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:09:ff:fc:5a:1f:98:f8:b5:b1:eb:f0:62:
                    1f:76:a2:3a:40:ca:23:0b:ee:6b:31:44:73:c9:d4:
                    16:3b:05:60:d6:2c:49:a8:5b:7b:f5:d6:65:d2:e0:
                    47:a5:41:ed:20:e3:46:95:c4:d9:59:3f:6c:32:72:
                    7b:ce:74:91:07:6d:b7:df:b1:c3:39:36:db:ed:d8:
                    57:2b:a4:0c:b5:89:df:7d:8f:e5:c0:ba:b0:5c:01:
                    2e:2a:29:fb:16:42:87:8d:44:9a:0a:5b:e7:3e:41:
                    61:d5:52:98:95:93:01:14:5b:75:47:39:67:4f:98:
                    dd:40:23:a5:4d:d9:c8:c3:f1:1e:98:92:99:de:29:
                    f9:e8:96:c0:2b:c8:04:ca:55:cf:39:6b:b8:bb:e2:
                    16:52:4e:41:c8:18:41:bb:96:3e:eb:ab:44:39:32:
                    93:5a:0d:92:57:bf:8c:24:62:ca:25:d5:26:d4:6f:
                    a5:ab:b7:59:5f:09:72:28:23:2e:95:f4:6c:34:94:
                    72:71:cf:36:f6:27:ba:a2:b3:27:6d:a2:0b:37:b0:
                    91:88:bc:49:a0:69:02:50:97:60:ec:07:ba:13:d6:
                    9e:48:3d:0f:d1:4d:09:8d:23:ce:b1:28:a0:de:7e:
                    0a:bf:04:e8:65:6b:02:cf:09:dc:22:f9:ce:0e:dc:
                    a3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FE:F9:F6:45:09:7A:59:BD:88:E9:C7:0E:58:6C:AE:DC:1E:0C:16
            X509v3 Authority Key Identifier:
                keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ce:30:e7:22:b4:f5:10:77:b4:74:ea:6b:26:eb:5a:7c:b4:
         c0:9b:97:cd:01:11:91:a0:73:b8:f5:35:62:e6:8b:2a:5e:c4:
         27:40:c1:bb:0b:5c:f0:ce:c8:1a:47:d5:cd:ee:34:9f:8f:b3:
         60:be:32:f4:9d:f9:17:5b:a1:84:54:34:e8:36:db:63:08:88:
         f6:95:a8:a5:6e:b3:76:d2:6f:8b:60:cf:73:1b:0a:4a:30:75:
         b0:6a:16:c8:2d:eb:20:8f:e2:55:40:1b:f6:e0:72:99:3d:b8:
         0c:55:a3:97:89:11:dd:5e:81:c7:fa:5c:85:74:43:47:f1:a2:
         9c:07:2e:08:bd:57:36:ac:9d:75:18:50:b7:71:e3:02:e6:c3:
         27:43:d3:4d:bf:da:23:fd:4c:01:58:af:b1:09:6b:e7:6a:14:
         9a:fd:60:26:74:35:ef:d8:e5:0d:18:c6:e2:e5:f3:ec:4e:71:
         76:cf:9c:0f:c2:9e:14:a1:83:dc:41:84:8e:1b:5e:90:16:dc:
         1f:b7:99:ad:9b:e3:8f:17:9f:71:42:1f:90:de:65:a9:0f:63:
         1e:02:c7:a9:b5:74:69:8c:8b:74:55:cd:f9:81:9f:5a:24:be:
         77:99:13:4d:00:5c:c3:c6:18:6b:0f:60:49:95:fb:6f:bf:58:
         3b:3a:f2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:47:03 2024 by rpki-client on console-ams.rpki-client.org