Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
File:                     435f8SPqfS6DzidSDJh9A35knQM.mft (raw, json)
Hash identifier:          BsUHqMSvZIc2Rd60TFdUZG8sYcAwhtJhlFhc8QANlPs=
Subject key identifier:   51:EA:CC:0E:59:60:DB:5D:AB:36:B3:44:65:FC:E5:BD:82:74:15:74
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Certificate issuer:       /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial:       018F532756B6F26AF3AD2C9ED4FD59E86ADC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
Manifest number:          0BFF
Signing time:             Tue 07 May 2024 13:03:57 +0000
Manifest this update:     Tue 07 May 2024 13:03:57 +0000
Manifest next update:     Wed 08 May 2024 13:03:57 +0000
Files and hashes:         1: 435f8SPqfS6DzidSDJh9A35knQM.crl (hash: rkbN0zeR1IKYQLd0BSURtfwyxRJR8C7AV8AYiXIoRAc=)
                          2: njUk32SaSB_lGi-_435uw3ajpM8.roa (hash: 4O6GyYbMR4FcMUKFR7bvCyUxNPvp/aXyl1fQUmeWRQU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:27:56:b6:f2:6a:f3:ad:2c:9e:d4:fd:59:e8:6a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
        Validity
            Not Before: May  7 13:03:57 2024 GMT
            Not After : May  8 13:03:57 2024 GMT
        Subject: CN=51eacc0e5960db5dab36b34465fce5bd82741574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ec:72:85:19:18:e0:40:32:74:f9:c5:c7:ec:
                    6e:5e:7e:cb:19:b0:b0:a6:36:66:aa:62:f8:a1:1f:
                    e4:d5:7e:0d:f5:66:98:6b:f4:8c:00:08:8f:80:e7:
                    f6:86:13:31:4a:ed:6d:a6:bf:e6:cf:d0:00:f5:3f:
                    45:60:d9:c8:d8:37:52:b1:b6:56:d9:4d:26:1c:82:
                    1c:f6:d7:f0:d0:70:1d:9b:2a:6b:29:02:fc:5d:51:
                    75:8e:a1:c3:b5:2a:03:f3:7f:eb:85:1d:ff:4d:2c:
                    8e:c0:26:18:f1:7f:82:84:5e:6f:cd:13:2a:89:c4:
                    1f:7e:cd:7e:6a:6a:e4:91:87:94:4d:c7:b8:ee:bc:
                    7f:35:e8:65:74:d2:ce:c4:2c:e9:ce:e2:30:38:0c:
                    12:ac:b9:79:69:31:f6:c8:b1:dd:ca:44:51:49:8b:
                    29:ea:4a:1f:01:5d:08:e8:88:8f:1b:ee:51:01:d1:
                    8a:05:38:60:1c:bb:fa:a5:85:0e:5b:57:bf:e3:66:
                    0c:50:1e:e3:3f:57:f1:7c:52:89:08:04:1a:b8:4c:
                    18:02:6b:e0:04:7b:ab:a0:2a:87:93:86:5e:c3:da:
                    04:c2:e2:5b:cf:6d:fa:77:e8:a6:c4:4e:48:73:13:
                    a3:98:55:b6:b3:1a:b2:dd:ab:8b:3f:a5:db:1f:b3:
                    5b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EA:CC:0E:59:60:DB:5D:AB:36:B3:44:65:FC:E5:BD:82:74:15:74
            X509v3 Authority Key Identifier:
                keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:01:28:69:71:6a:d5:e9:e5:e1:08:8c:5d:1b:d5:69:f2:dc:
         24:94:71:be:77:e7:47:79:33:8a:27:97:0c:4b:a7:16:ca:61:
         5e:7e:75:3b:6c:d2:01:bf:b5:b2:52:15:94:0e:f9:f9:25:69:
         44:43:66:14:e6:05:24:70:ed:8e:20:7c:56:5d:71:ca:19:6e:
         a6:e6:75:09:ea:d1:71:69:32:4c:e5:d4:01:f8:50:ff:7d:56:
         06:cb:84:0f:29:f0:cd:b3:86:78:fa:08:29:e7:d4:ee:99:11:
         a7:9c:8d:8b:e4:9c:97:13:c0:d7:d2:d2:93:22:82:34:77:b0:
         39:db:d6:2b:c7:3c:a9:67:6e:c5:8f:a7:99:dc:5d:93:a9:21:
         73:9b:d5:6e:cf:10:4c:ce:c2:27:55:3a:b8:3b:f3:85:68:cd:
         1f:86:45:ce:26:5c:e1:fb:24:ca:d4:5c:6b:cb:72:6b:82:19:
         a2:68:f5:ea:a4:56:62:ad:f8:29:4b:9a:2b:9a:83:5b:03:13:
         60:09:62:e5:0b:20:18:2d:83:4f:90:55:1d:be:f3:b4:21:a4:
         74:98:1b:bc:80:b1:f7:26:0a:22:68:b8:d4:87:96:3c:b9:08:
         43:f7:c1:7f:6b:b6:07:31:c9:b6:a7:2e:63:e6:7d:f3:5f:16:
         b3:d1:34:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:48:34 2024 by rpki-client on console-fra.rpki-client.org