Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
File:                     1olx6h0itezaGpdZ8FwmyMVqRow.mft (raw, json)
Hash identifier:          UpF1LxgIOYuarub3peMDptsCoOAeNqWmiU6NyHndqkc=
Subject key identifier:   E2:24:51:E6:45:BE:B5:BA:4A:96:38:9B:06:D3:AC:3E:8A:54:63:E1
Authority key identifier: D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
Certificate issuer:       /CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Certificate serial:       018F3709241BEC65DBD53EBB9A6AD5A13387
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
Manifest number:          093D
Signing time:             Thu 02 May 2024 02:01:36 +0000
Manifest this update:     Thu 02 May 2024 02:01:36 +0000
Manifest next update:     Fri 03 May 2024 02:01:36 +0000
Files and hashes:         1: 1olx6h0itezaGpdZ8FwmyMVqRow.crl (hash: V4w0873V2kxQ79vTrNl4cl+U1gStbJk1caTIYA2oN+s=)
                          2: Ve06aMGO_yCOFriRdzVySCk3bVU.roa (hash: izQ8FspoYxDeXWWnEFXck8zDU6UGNo1GLtBzbGxNTMw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:09:24:1b:ec:65:db:d5:3e:bb:9a:6a:d5:a1:33:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
        Validity
            Not Before: May  2 02:01:36 2024 GMT
            Not After : May  3 02:01:36 2024 GMT
        Subject: CN=e22451e645beb5ba4a96389b06d3ac3e8a5463e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:21:24:58:3c:10:00:7a:05:30:62:c5:86:
                    8c:d3:a5:0a:7f:87:19:d7:bd:85:29:c5:db:e0:d2:
                    1a:3e:3a:d9:3a:ce:cf:e2:ac:2b:20:30:83:2b:8b:
                    cf:f6:78:73:74:9a:81:6c:13:56:f5:a9:4c:b1:bb:
                    2c:49:34:3b:83:2d:e5:ab:9e:dd:ca:01:9e:ea:49:
                    a1:c5:ec:e9:03:bb:64:87:dd:85:46:91:29:60:d0:
                    27:37:7d:48:55:78:47:ff:7c:1a:80:af:56:3c:a2:
                    25:c8:93:fb:b7:52:54:b2:bb:f1:16:b3:55:45:ac:
                    38:fc:aa:3e:8d:33:9b:c6:5f:b8:50:df:b4:d5:af:
                    12:cf:6b:d1:c4:5f:b2:a2:56:07:33:c2:5f:ae:f6:
                    7b:b0:c5:f2:85:0b:9a:46:d1:a5:e5:cc:9e:7f:ff:
                    58:97:fe:43:12:ac:6e:8a:da:b2:01:c8:14:28:f4:
                    31:c9:d0:36:66:57:07:90:1f:0c:9c:5c:5d:a9:8f:
                    ea:2e:bc:3e:84:80:8c:56:df:cb:b0:93:19:b4:0e:
                    e7:0b:99:bf:95:93:9e:4b:44:37:7d:70:9e:fd:58:
                    a5:04:64:af:bf:3e:d7:85:0a:0d:7d:18:83:52:41:
                    f7:6f:89:ce:9c:f2:31:2b:ce:96:96:b6:e3:65:66:
                    87:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:24:51:E6:45:BE:B5:BA:4A:96:38:9B:06:D3:AC:3E:8A:54:63:E1
            X509v3 Authority Key Identifier:
                keyid:D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:bd:2b:e9:9a:9e:ca:d9:62:3c:39:b7:fa:01:99:c2:78:ed:
         5a:a9:9d:ff:1c:e8:e5:8c:56:8c:17:74:61:6b:05:f2:8e:3e:
         77:c1:17:e3:cd:e0:05:3c:1a:a2:fb:f5:d1:09:f0:b7:80:35:
         2c:76:1f:3f:cc:d8:a3:b6:b9:cc:41:8f:09:63:55:62:e7:3c:
         d0:b0:e1:01:26:7d:4b:3d:95:26:64:58:93:58:a2:30:29:94:
         72:0c:50:cf:7c:4a:51:17:98:00:f4:c1:93:3b:1f:cf:4a:2f:
         44:73:20:f2:5c:aa:1c:3d:29:a2:35:c2:0d:f5:16:71:32:59:
         d5:45:65:53:e0:64:aa:30:d5:18:88:45:e9:4c:e1:92:9b:d6:
         a6:10:c1:76:89:15:a6:57:0c:d4:7b:1f:67:fc:0c:a7:f5:ca:
         22:65:4a:55:81:34:5c:d9:56:a0:8b:32:ad:6e:35:2f:f5:b1:
         63:26:41:70:e7:54:6a:0f:a2:ec:1d:cf:49:bf:09:fb:80:d1:
         c9:79:a3:4b:20:69:dc:f4:7f:70:a5:5d:e8:9f:ed:5d:29:1b:
         2f:92:6d:7d:9c:c6:af:01:cb:03:87:38:9f:70:e2:98:cf:fa:
         93:30:c7:f6:79:01:52:06:bf:8b:99:e8:12:22:92:47:42:25:
         bd:21:1d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:37:57 2024 by rpki-client on console-fra.rpki-client.org