Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File:                     G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier:          z8RPhRnedYY5dIfwW+QluJCnITxTvoOePxkMAI1CyDY=
Subject key identifier:   85:82:83:36:E8:64:0F:0C:C1:2E:DB:7C:43:DC:3F:36:A5:73:36:9C
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer:       /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial:       018F43B421E960106F0D483244DCC8A0BAA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number:          08D8
Signing time:             Sat 04 May 2024 13:03:49 +0000
Manifest this update:     Sat 04 May 2024 13:03:49 +0000
Manifest next update:     Sun 05 May 2024 13:03:49 +0000
Files and hashes:         1: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: NC26YabjWGKyX5blfhtRrtZdoonayuNRIzgMz673YIY=)
                          2: IMaJb3_DWtc999UgSBcVctVwm3c.roa (hash: WDChAXsYGkjhzH5azTg8uBwPYLMd3030OB1/+WKy3L8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b4:21:e9:60:10:6f:0d:48:32:44:dc:c8:a0:ba:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
        Validity
            Not Before: May  4 13:03:49 2024 GMT
            Not After : May  5 13:03:49 2024 GMT
        Subject: CN=85828336e8640f0cc12edb7c43dc3f36a573369c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7d:c9:7c:b3:f2:74:9b:b8:40:63:28:ff:6d:
                    8e:7a:9a:e2:c0:2f:fa:2a:3f:05:a5:3c:18:bd:26:
                    4a:7c:5d:c9:22:98:21:66:18:bd:44:fe:31:21:78:
                    a6:73:74:21:dc:3f:51:fb:fc:71:b1:a6:d8:86:69:
                    73:7b:d8:8c:29:61:ed:f5:31:7c:a1:b9:27:95:8d:
                    26:20:1e:af:76:59:a9:54:be:e4:5b:fe:29:c5:b3:
                    e6:e1:5d:5d:7e:1b:51:76:9a:29:13:2e:97:20:aa:
                    f7:b2:80:e5:9d:f5:04:ba:2a:e2:77:72:4a:3f:06:
                    f2:12:28:cc:74:83:de:05:3e:a6:49:2e:6c:d6:55:
                    0a:14:d9:d4:cf:28:83:b6:70:6e:27:2a:af:e3:6f:
                    2a:81:1e:f4:78:e4:5e:a7:8a:1d:df:e2:ce:90:c7:
                    de:a4:bb:c8:e8:c6:f9:3c:ff:72:a0:40:fc:1d:35:
                    d6:07:30:fc:5e:0d:68:09:37:3d:ee:4b:9a:bf:86:
                    d7:b0:7e:b1:4a:46:70:60:ba:b5:a1:d6:51:c2:25:
                    52:c7:c8:57:78:1a:d4:a0:ac:a2:66:1e:e9:67:ea:
                    fe:14:59:60:73:b2:fc:0d:34:74:77:f6:19:84:c3:
                    e7:a8:f8:7c:0d:0c:4a:d0:bc:24:30:03:78:73:c3:
                    c7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:82:83:36:E8:64:0F:0C:C1:2E:DB:7C:43:DC:3F:36:A5:73:36:9C
            X509v3 Authority Key Identifier:
                keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:52:be:5f:d5:de:44:96:5f:30:28:27:0c:6c:ab:74:ec:62:
         a4:9f:ca:3d:8c:e4:28:5d:4d:8f:61:43:3c:6e:c1:8f:3d:12:
         34:65:42:33:34:17:70:e9:87:12:4b:60:1b:9e:32:7d:34:62:
         ba:00:46:bb:30:b5:7e:c9:ce:5f:53:7e:f1:e6:2d:c7:32:1f:
         12:3c:e8:46:e7:12:b4:9d:91:ec:c0:06:c3:13:ea:75:b2:8b:
         10:71:0e:7e:d2:a9:6b:9f:1a:ad:50:4d:82:ae:cf:9a:19:7e:
         4a:2b:01:19:62:ea:ee:57:d4:0b:16:a4:b2:a6:28:0a:3e:c9:
         95:f2:30:cc:00:87:29:e7:1e:dd:24:c9:30:e7:fa:88:5d:af:
         c4:0e:a1:7c:93:b6:a8:96:a0:2c:16:cd:c2:04:d8:ed:dc:56:
         5f:33:eb:29:db:d4:51:f6:45:08:c4:b8:de:93:5b:84:d5:d4:
         d5:5f:a1:2d:97:92:fb:1a:cd:b0:63:8c:af:69:09:d5:2a:ac:
         3e:bf:c4:1d:b3:61:62:78:95:b8:22:e8:56:d4:47:c4:2f:d6:
         f8:0d:2f:df:37:4d:f5:a2:40:3d:3e:5d:b0:aa:07:96:d6:0e:
         0b:02:c2:3e:30:60:6e:ee:51:c0:7a:ed:11:8c:bf:53:f1:e4:
         56:1b:ac:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:05:30 2024 by rpki-client on console-fra.rpki-client.org