Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft
File:                     1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft (raw, json)
Hash identifier:          58/iTYM2mElCJkSBqUVUtuqyQN1kbe8GnIOC+yHZ5iQ=
Subject key identifier:   1C:F7:31:B5:9D:DD:BF:80:CA:03:29:34:D0:8D:DB:55:5E:12:7C:D8
Authority key identifier: FA:DB:E6:5B:28:FF:25:66:74:09:CC:E6:35:BE:09:6E:3E:6D:EF:CA
Certificate issuer:       /CN=fadbe65b28ff25667409cce635be096e3e6defca
Certificate serial:       018F874B4D69E310775E69327FFA17AA3EA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft
Manifest number:          0203
Signing time:             Fri 17 May 2024 16:03:30 +0000
Manifest this update:     Fri 17 May 2024 16:03:30 +0000
Manifest next update:     Sat 18 May 2024 16:03:30 +0000
Files and hashes:         1: 1-tvmWyj_JWZ0CczmNb4Jbj5t78o.crl (hash: Y/sXuz7aC77dZoCAVuEvUH1LEfiHX6Fwh1rcPHVCKaY=)
                          2: V9PW0vh9iZJvLb7aWmakaRKOgtE.roa (hash: nIxnVqrV5cnezsDu8CVxbl3+jI7yYUo4P/Oy1z8MovM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:4d:69:e3:10:77:5e:69:32:7f:fa:17:aa:3e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fadbe65b28ff25667409cce635be096e3e6defca
        Validity
            Not Before: May 17 16:03:30 2024 GMT
            Not After : May 18 16:03:30 2024 GMT
        Subject: CN=1cf731b59dddbf80ca032934d08ddb555e127cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:78:6e:71:9d:09:1c:bc:f4:e5:cc:c9:ba:b4:
                    2d:2f:57:e2:ff:9f:cd:b6:29:83:8d:46:90:e8:b2:
                    89:8d:2e:97:49:d6:7f:0e:06:19:1e:00:03:b7:85:
                    2d:f6:a6:42:a3:8a:1a:49:c7:86:5f:01:07:fd:4c:
                    a5:1a:8c:a9:90:11:1f:dc:55:24:d1:2e:36:f6:45:
                    1a:6a:7d:1f:ca:b7:67:c1:e1:2f:0e:e2:84:72:dc:
                    2c:9e:27:ea:c1:8a:8f:90:40:f6:43:a8:a9:0c:4d:
                    0f:37:a8:31:11:1e:39:80:84:05:e8:d1:d0:ac:ed:
                    b2:d1:9f:12:2f:ce:5c:ac:90:1f:b6:15:bf:7e:98:
                    ad:25:cb:af:41:1d:44:cc:f7:84:b3:ed:cd:dd:87:
                    96:83:c2:c1:24:24:13:ab:46:0a:40:18:5c:d8:16:
                    a5:7f:1c:0f:10:52:5a:e7:06:0a:23:e8:fe:ff:9c:
                    a6:a7:63:0f:9e:90:27:6d:1c:d7:83:53:4b:64:4d:
                    22:89:91:0c:c9:3d:a2:4d:a1:35:da:0d:5e:40:ea:
                    50:76:9e:a0:1b:3d:a6:a5:3c:93:96:15:9e:5e:99:
                    ff:92:9d:08:64:c6:b2:ad:3c:c0:5a:33:b9:56:cb:
                    85:77:61:fc:d4:aa:56:a6:f5:bd:02:18:48:3f:d3:
                    57:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F7:31:B5:9D:DD:BF:80:CA:03:29:34:D0:8D:DB:55:5E:12:7C:D8
            X509v3 Authority Key Identifier:
                keyid:FA:DB:E6:5B:28:FF:25:66:74:09:CC:E6:35:BE:09:6E:3E:6D:EF:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e3:f0:69:75:62:be:6d:3e:b4:2b:3d:43:d9:7f:ae:8c:84:
         59:cb:79:10:01:d9:7c:13:86:98:83:87:d7:8c:18:87:e9:ee:
         ef:38:8a:fc:f6:fe:44:90:83:78:21:75:55:c9:5b:30:71:c5:
         0c:cf:d1:5a:ac:2d:86:b9:c0:3f:10:a5:19:96:42:5b:12:d8:
         5a:5a:6f:f6:55:fd:c3:15:a1:c5:0e:7d:06:f3:a5:36:68:8f:
         67:5e:fd:1c:41:77:70:6b:18:9e:27:44:12:cf:51:f5:20:c3:
         ca:71:0c:1f:b5:e0:fd:bb:e8:c8:c7:ed:0c:53:7f:0a:ec:4b:
         be:69:14:6f:64:44:de:dc:fd:f9:1b:bb:b9:06:61:96:16:8c:
         91:d6:17:07:3e:67:aa:d9:5c:0c:81:c8:3a:f6:58:5a:80:54:
         ea:fc:69:1f:68:01:90:95:b7:9f:de:81:eb:83:9a:ef:cb:f6:
         03:24:91:73:ec:fb:de:e6:71:3d:9a:98:06:70:2c:6f:6d:05:
         12:37:6b:03:95:95:a3:a2:4d:7f:37:51:4f:45:a7:28:b7:da:
         cf:f3:1e:c7:ce:77:36:02:90:91:d5:7f:7f:76:63:88:f9:60:
         72:b4:d5:3e:6d:f4:7d:ce:9a:77:8d:6d:3e:a4:fe:98:28:44:
         21:f4:27:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:51 2024 by rpki-client on console-ams.rpki-client.org