Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
File:                     1Cq3jtp78B2VtZd07TRry_lqJoQ.mft (raw, json)
Hash identifier:          OihcfCooAVkjJmzOHtKa7Je5wRL9YktRppVMRFU0CcE=
Subject key identifier:   ED:0D:B4:E2:FD:78:14:28:F6:60:83:E5:C3:F6:D8:B1:25:EC:94:77
Authority key identifier: D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
Certificate issuer:       /CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Certificate serial:       018F882448231EA7814F1447A0F0BE098DE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
Manifest number:          01C6
Signing time:             Fri 17 May 2024 20:00:30 +0000
Manifest this update:     Fri 17 May 2024 20:00:30 +0000
Manifest next update:     Sat 18 May 2024 20:00:30 +0000
Files and hashes:         1: 1Cq3jtp78B2VtZd07TRry_lqJoQ.crl (hash: br/WcC/nYj7zQlvp5zVQqV1NMbaVJJF/NoOx0/dfqoU=)
                          2: v1BDoTKRy-b_c3f2770SVEhd308.roa (hash: JREZ4gtIFCR80Wr9zbZ4jfV39j0bdBr8DmsvKT2KFyU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:48:23:1e:a7:81:4f:14:47:a0:f0:be:09:8d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
        Validity
            Not Before: May 17 20:00:30 2024 GMT
            Not After : May 18 20:00:30 2024 GMT
        Subject: CN=ed0db4e2fd781428f66083e5c3f6d8b125ec9477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:93:d2:ec:bb:4f:a9:4b:0a:fb:e1:0a:c4:af:
                    4d:1d:90:16:d8:51:3d:41:b5:e7:ca:69:e4:dc:bb:
                    47:27:4b:72:8f:7d:52:e7:1a:0e:e3:d5:90:93:08:
                    47:58:13:a0:89:2b:84:f5:20:20:7f:0c:92:8f:5c:
                    43:5b:23:9d:e0:7c:42:0a:d9:4c:9b:7a:9e:b7:9c:
                    19:ef:fb:a5:0d:fa:09:01:ed:66:72:0f:5c:80:d3:
                    48:97:35:be:92:d2:ff:f7:45:12:6e:a3:00:2d:9f:
                    61:75:4d:74:f3:15:c9:b3:9c:a7:cc:dc:65:ba:02:
                    d5:b2:9d:7b:e4:40:8e:bb:1a:a6:2f:7b:0c:71:0a:
                    b5:95:fc:75:64:4d:57:9c:ac:33:23:d4:23:86:5b:
                    0e:73:d7:8e:0f:15:ca:56:68:44:d4:a2:e4:a9:db:
                    b0:e5:3d:31:98:2d:52:84:9d:f7:60:71:f8:68:4a:
                    a7:49:5e:f9:c8:a5:15:62:6b:c1:72:f7:85:f5:e7:
                    97:7e:86:b2:1e:c1:75:88:7a:cc:aa:e4:da:36:e7:
                    86:b3:cd:5b:a6:e0:5c:ff:37:6b:e4:1c:1f:3e:eb:
                    39:4f:2f:28:22:73:88:42:e6:45:d4:f5:34:30:5c:
                    55:ab:79:c7:04:12:b2:38:a0:3a:d3:ce:7e:48:b2:
                    d9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0D:B4:E2:FD:78:14:28:F6:60:83:E5:C3:F6:D8:B1:25:EC:94:77
            X509v3 Authority Key Identifier:
                keyid:D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:2e:7f:8f:8c:d8:18:52:62:1e:95:67:7c:c7:fe:73:ef:06:
         3d:da:99:96:e0:c2:72:36:33:aa:bb:42:a2:2c:25:2d:81:76:
         cf:d8:82:45:f0:0d:63:11:f8:07:1b:32:26:5a:9a:a8:29:97:
         a0:db:49:8d:3f:5b:18:c3:c9:b0:67:a8:9d:81:9a:29:db:6b:
         dd:91:1e:a6:d3:f8:d5:c0:94:d7:3b:ac:bc:2d:3d:ba:68:a9:
         cc:c5:4c:5c:71:ed:af:bd:1c:4c:d2:d1:66:a6:2e:2f:ae:60:
         85:b3:3e:fd:6c:34:89:83:aa:1f:e4:d2:19:bd:8a:5f:4c:e5:
         4c:d8:11:e2:5a:b1:9c:55:d1:8c:77:88:5f:e6:db:ef:19:1a:
         b7:3b:47:af:40:d6:70:ad:86:5d:3c:fb:98:7f:5d:f8:67:60:
         c5:51:26:b9:ee:2f:14:e1:e6:f6:33:e3:a5:dc:36:ea:ca:c5:
         b1:aa:1f:f5:08:12:0f:51:4b:3c:9d:a5:34:82:4f:02:bc:34:
         cb:f0:c8:79:45:a7:98:5d:50:fa:51:13:fe:a3:5b:72:c7:cc:
         b7:64:1d:e8:d4:7d:f7:e0:e4:d7:77:43:93:41:5f:82:57:59:
         d2:28:dd:90:2c:b3:eb:8b:fb:c5:c5:a8:32:11:cf:e0:4d:a4:
         78:4a:fc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:02 2024 by rpki-client on console-ams.rpki-client.org