Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
File:                     _4C3cQsTmEQnXJ3pyOdk62QuGMM.mft (raw, json)
Hash identifier:          LSrhQpRsz1DxlZMWi9SyY/RTWcMs2proZSgXLgPI6js=
Subject key identifier:   7D:E4:A9:F6:BB:FF:B5:1C:42:82:94:CF:40:14:49:B7:DC:06:68:70
Authority key identifier: FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
Certificate issuer:       /CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Certificate serial:       018F885AF6CEE4A5CD6794B5FA258FD33023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
Manifest number:          0D5F
Signing time:             Fri 17 May 2024 21:00:13 +0000
Manifest this update:     Fri 17 May 2024 21:00:13 +0000
Manifest next update:     Sat 18 May 2024 21:00:13 +0000
Files and hashes:         1: _4C3cQsTmEQnXJ3pyOdk62QuGMM.crl (hash: nRx1NGuc9fWXFA0qo5XtPuTSkCwEy8PeqOnHvkcQJGs=)
                          2: tA6clkO-5zftLY3X2Xw7ACOkhl0.roa (hash: GOu9otq6nIx/nTZFJDhO1K9FdqwSXcae9M9YzjhNx+s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:f6:ce:e4:a5:cd:67:94:b5:fa:25:8f:d3:30:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff80b7710b139844275c9de9c8e764eb642e18c3
        Validity
            Not Before: May 17 21:00:13 2024 GMT
            Not After : May 18 21:00:13 2024 GMT
        Subject: CN=7de4a9f6bbffb51c428294cf401449b7dc066870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:97:f9:16:69:8f:83:55:b7:a1:a8:e7:5e:
                    87:75:5c:f6:c6:ca:8a:dc:b6:b5:b7:82:1b:54:ec:
                    c1:5d:84:38:49:3d:45:a0:6d:4b:c5:1c:63:35:64:
                    e6:37:e9:9f:1d:83:4c:fd:f2:5d:12:ee:e5:03:89:
                    cc:f1:12:ce:1a:2d:53:60:bf:32:4a:fe:ab:c3:ce:
                    b9:90:43:27:80:06:a6:c0:35:f6:cb:80:b7:0a:83:
                    a0:50:a0:a4:cd:7d:3f:ab:20:9d:d4:99:06:ed:29:
                    c2:a6:09:4c:e0:11:c2:e2:08:06:1e:2c:0d:28:9f:
                    24:e9:cc:4a:f6:61:08:92:90:3a:6c:57:fc:22:51:
                    cf:e8:f1:8e:5d:21:30:b1:e0:7e:bc:b2:38:23:b2:
                    2f:32:3a:b9:ad:68:18:5e:6d:8c:d6:92:7a:37:22:
                    51:42:1d:67:14:73:99:71:db:a6:d4:8a:86:74:b4:
                    ab:11:1c:c9:da:e7:aa:cb:13:94:36:28:9d:03:b1:
                    d6:59:e9:55:5b:91:d4:d4:52:cb:fb:a6:d0:ee:19:
                    c1:95:13:f9:71:52:5f:4c:9b:8b:6d:b9:c1:69:54:
                    10:cf:1d:24:33:13:6d:6a:5c:fc:1f:09:84:bd:8c:
                    7d:7e:a6:2a:9b:25:6a:81:e4:d9:6d:f7:fa:16:25:
                    02:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E4:A9:F6:BB:FF:B5:1C:42:82:94:CF:40:14:49:B7:DC:06:68:70
            X509v3 Authority Key Identifier:
                keyid:FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9f:bf:37:f8:21:5f:09:b4:75:4b:dc:c4:c7:c6:61:8b:5a:
         e4:8d:9e:7f:67:86:e2:a5:3f:47:d1:47:52:d1:23:68:17:96:
         a0:8c:55:ee:4b:fa:d8:b4:f4:a7:0a:a9:d7:14:a3:79:7a:0f:
         14:3e:19:44:e5:20:2e:03:1e:e4:f9:05:c7:a8:7d:98:26:51:
         d3:e7:6f:57:76:28:18:6b:d2:9d:11:62:3c:7c:ec:b6:ce:19:
         27:0d:cc:de:e9:43:14:81:39:a1:f1:fe:5f:05:16:ad:4b:3f:
         f7:09:13:dd:b7:a3:cc:a9:5d:ba:5e:bf:3c:73:8b:d7:ce:68:
         4c:2c:d9:9c:7d:73:41:29:47:1f:95:49:2b:d3:62:5e:d2:74:
         5d:b8:6f:c4:40:b4:90:25:f8:ac:58:b2:1f:70:df:11:09:86:
         6a:42:35:12:05:94:fa:80:b6:e7:d8:b4:2e:22:87:7d:1b:89:
         af:7e:3f:8e:2e:77:4a:56:76:6e:e5:69:a1:5a:af:b5:85:37:
         b4:d8:54:78:02:e6:a9:29:4e:61:35:09:fd:9e:17:3c:ac:7e:
         f1:07:8f:3d:b8:b8:7c:5c:45:58:ec:c1:30:51:8a:0f:86:e3:
         b8:66:ce:30:ca:b9:5d:09:7b:8e:6d:26:57:e6:97:cd:86:eb:
         06:48:39:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:58:46 2024 by rpki-client on console-ams.rpki-client.org