Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8f0e23-6994-4595-8b1c-7e0a4b3299be/1/CPHyEx8Fo8cYaXDTAXI6qgCTIJY.mft
File:                     CPHyEx8Fo8cYaXDTAXI6qgCTIJY.mft (raw, json)
Hash identifier:          EVQkuwFUQ4URuUq4PfkH1Ibu316M732pX4b7MbkoFP8=
Subject key identifier:   E8:03:07:A7:8A:BF:5D:90:78:FF:B6:FD:5F:FE:AE:F3:29:C8:22:1C
Authority key identifier: 08:F1:F2:13:1F:05:A3:C7:18:69:70:D3:01:72:3A:AA:00:93:20:96
Certificate issuer:       /CN=08f1f2131f05a3c7186970d301723aaa00932096
Certificate serial:       018F44570FDF77EB9C05C2409D31770D6176
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPHyEx8Fo8cYaXDTAXI6qgCTIJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/8f0e23-6994-4595-8b1c-7e0a4b3299be/1/CPHyEx8Fo8cYaXDTAXI6qgCTIJY.mft
Manifest number:          078E
Signing time:             Sat 04 May 2024 16:01:47 +0000
Manifest this update:     Sat 04 May 2024 16:01:47 +0000
Manifest next update:     Sun 05 May 2024 16:01:47 +0000
Files and hashes:         1: CPHyEx8Fo8cYaXDTAXI6qgCTIJY.crl (hash: O/+iZCEKWTowvVLj10EQi392MSVPuFUcq82oJhmMChQ=)
                          2: dnApwUk79B5h78I0iHmUaFPF8VQ.roa (hash: 9GIfG/mgrLu4dBN4ZSLpzcosTySai5mJEn8+5g9QmIE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/8f0e23-6994-4595-8b1c-7e0a4b3299be/1/CPHyEx8Fo8cYaXDTAXI6qgCTIJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/8f0e23-6994-4595-8b1c-7e0a4b3299be/1/CPHyEx8Fo8cYaXDTAXI6qgCTIJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CPHyEx8Fo8cYaXDTAXI6qgCTIJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:57:0f:df:77:eb:9c:05:c2:40:9d:31:77:0d:61:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08f1f2131f05a3c7186970d301723aaa00932096
        Validity
            Not Before: May  4 16:01:47 2024 GMT
            Not After : May  5 16:01:47 2024 GMT
        Subject: CN=e80307a78abf5d9078ffb6fd5ffeaef329c8221c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:74:d0:f8:d4:c5:5a:3b:9c:c1:82:d3:c7:
                    2d:9e:61:63:19:cd:68:a2:22:ae:6d:d2:94:34:58:
                    5d:6b:c8:24:b6:67:85:c0:37:40:dc:ce:63:73:fe:
                    f9:33:d7:72:1d:34:7d:7c:7b:7d:62:64:fb:b3:86:
                    be:f2:61:9d:81:b6:00:16:46:db:2e:d6:b0:bf:88:
                    c2:c3:c2:cc:b5:68:cf:2e:cf:08:5f:47:9e:8a:d4:
                    a6:bf:56:81:e7:fc:b4:7d:e0:fe:8a:20:7d:fe:91:
                    0f:22:33:ae:c9:df:bc:6b:28:95:46:fc:77:6c:9a:
                    d4:b7:77:a0:be:cb:3e:eb:b9:7c:05:29:d4:d4:15:
                    23:e8:af:ee:44:58:1f:5b:57:45:7a:7b:d1:cc:ee:
                    a5:56:f4:ac:ef:27:0f:83:29:d2:f4:aa:7e:e5:9b:
                    20:d0:03:bb:3c:58:98:84:9e:be:8f:d5:e5:d9:ef:
                    78:6e:a7:14:52:5f:fd:0e:36:36:5e:9b:b2:67:67:
                    5d:80:4f:b4:d3:87:de:62:1a:4c:83:2f:d2:4a:d0:
                    57:37:84:35:37:a8:36:8e:48:33:12:13:10:8a:6f:
                    65:36:57:1e:86:2c:0b:a1:b5:91:e1:cd:4f:fc:57:
                    56:97:3c:8f:44:83:79:da:1e:89:75:c0:bf:1a:02:
                    93:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:03:07:A7:8A:BF:5D:90:78:FF:B6:FD:5F:FE:AE:F3:29:C8:22:1C
            X509v3 Authority Key Identifier:
                keyid:08:F1:F2:13:1F:05:A3:C7:18:69:70:D3:01:72:3A:AA:00:93:20:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPHyEx8Fo8cYaXDTAXI6qgCTIJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8f0e23-6994-4595-8b1c-7e0a4b3299be/1/CPHyEx8Fo8cYaXDTAXI6qgCTIJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8f0e23-6994-4595-8b1c-7e0a4b3299be/1/CPHyEx8Fo8cYaXDTAXI6qgCTIJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:ca:62:cd:f2:10:fe:8a:8d:57:01:53:d2:ac:10:57:0e:74:
         a6:c0:15:bf:4c:60:5a:f1:65:15:8d:95:a4:34:fc:a4:fd:e2:
         4e:58:3d:91:7f:c4:ed:65:af:13:e8:dc:bb:43:3a:86:db:74:
         1c:bd:51:a6:25:c2:1f:ed:9f:9e:a8:10:72:4d:aa:df:5b:e9:
         41:12:c8:9f:0e:fd:17:e1:c7:fc:2f:ac:13:aa:b3:08:8d:c5:
         92:df:5f:0e:c1:8b:e2:5f:de:c6:50:22:79:0e:b7:ab:dd:14:
         54:3a:3f:24:14:fe:e1:a1:51:7a:30:35:48:49:50:80:8f:64:
         26:a8:a5:b6:df:94:0a:fd:74:99:d1:eb:23:0a:44:3e:59:3b:
         61:d5:a6:84:52:78:f7:9c:f4:99:ae:ca:2b:88:6c:a9:b3:cd:
         08:47:51:09:bf:a5:9e:69:6e:66:46:be:5d:91:83:c8:de:62:
         63:dd:92:60:5c:67:c0:e8:76:3b:d3:98:a0:c4:ee:4d:01:8a:
         e8:79:af:a9:0a:d0:fb:cc:5e:7b:5f:32:99:c9:d1:60:87:d1:
         60:dd:f7:80:9c:6f:9c:d1:f6:2d:25:00:ef:3d:dd:7d:9c:9d:
         37:cd:e2:59:78:09:34:75:9f:21:b1:d3:5d:71:0e:70:94:43:
         fa:42:89:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:30:42 2024 by rpki-client on console-fra.rpki-client.org