Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
File:                     8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft (raw, json)
Hash identifier:          NuKtoKu3XlpY1NHZyX+w/FQNfye3LDoYXiJVNrcErXc=
Subject key identifier:   AA:41:12:DC:0A:33:6E:B5:08:62:F0:8D:CE:4C:A5:03:F9:DD:5D:67
Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
Certificate issuer:       /CN=f22bed3f37cd72826511c574560deb55542550e4
Certificate serial:       018F1F019CF4D226E391023A264AE7A820ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
Manifest number:          1140
Signing time:             Sat 27 Apr 2024 10:02:30 +0000
Manifest this update:     Sat 27 Apr 2024 10:02:30 +0000
Manifest next update:     Sun 28 Apr 2024 10:02:30 +0000
Files and hashes:         1: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl (hash: kxGl8MQiqE1eLE72Sngqmb6wn7H12dgvZr33GMi0lX8=)
                          2: MCGuu7vmwd0gm4URl4snj6R8G14.roa (hash: YF86go7zLpq/psgZYpEX3vjeWK7haIiIp4uW/0CA5zA=)
                          3: nPUW_emH6dmFGwKk1Uc_wm81zJ0.roa (hash: /UjbSEQ9O4o/V2fMtBuQOkwrKZqQyjuuZZ9Cuibi+ec=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 10:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:01:9c:f4:d2:26:e3:91:02:3a:26:4a:e7:a8:20:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4
        Validity
            Not Before: Apr 27 10:02:30 2024 GMT
            Not After : Apr 28 10:02:30 2024 GMT
        Subject: CN=aa4112dc0a336eb50862f08dce4ca503f9dd5d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0a:44:6b:be:b4:6a:09:3f:00:a1:b3:e8:37:
                    3b:1e:1f:81:ce:b5:29:4a:08:9b:c6:af:9e:e4:d5:
                    7b:2f:42:e7:f6:8d:42:4c:21:21:13:30:7e:ac:13:
                    fd:ae:99:c1:7b:70:4c:9e:2f:52:da:58:0c:a5:41:
                    73:ad:36:85:ef:ec:5d:59:ae:d9:7f:2a:28:a9:a9:
                    74:15:59:a8:87:ea:2d:f1:20:c4:4c:ea:54:54:3e:
                    ef:2f:c7:0c:e9:07:49:ba:1f:8e:e6:57:22:03:ab:
                    21:83:ab:1d:dc:3f:22:1e:e7:d9:4c:c9:fa:cc:53:
                    46:52:e5:a8:5e:8b:56:b7:03:4e:04:c6:3c:b4:3e:
                    3e:21:87:71:5a:f1:3d:3f:ee:59:42:0f:db:a4:bb:
                    f0:b5:8b:c1:c8:6b:6a:99:87:19:52:bf:65:12:b9:
                    e6:26:83:b5:25:cf:80:f1:1f:4d:40:8f:4f:f9:ca:
                    8e:9f:9c:e5:1a:d0:e8:7d:27:0b:7d:bf:63:fe:80:
                    ac:a6:17:c6:e8:0c:20:fb:8b:84:94:dd:18:4c:7a:
                    c0:70:22:84:52:f3:4b:3c:af:c7:a3:0c:e5:13:92:
                    74:43:d7:e5:d1:e8:7d:e2:c2:88:04:66:53:d2:1f:
                    00:50:25:d5:1b:0f:3f:ec:4c:7c:f3:29:40:35:c1:
                    b9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:41:12:DC:0A:33:6E:B5:08:62:F0:8D:CE:4C:A5:03:F9:DD:5D:67
            X509v3 Authority Key Identifier:
                keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:60:d5:81:60:00:30:bd:36:85:90:93:69:1e:a0:fb:e7:4f:
         d2:c7:1e:ca:da:5c:85:ae:ee:4e:a1:3c:45:a2:7c:35:8d:7d:
         0d:93:fb:e6:7d:dd:6e:5b:24:2b:d5:5d:58:da:b5:6f:18:81:
         5d:44:38:60:dc:58:7d:23:23:84:6f:98:50:b3:e5:70:db:a3:
         95:f2:8b:f4:4b:50:bb:b2:fa:96:44:13:3d:3b:a6:a9:cd:6f:
         09:12:8e:d3:6f:bc:ad:a6:ef:1d:dc:3b:dd:b0:bd:fb:71:04:
         ba:19:c2:35:73:ac:ef:2a:59:9e:c2:5e:ad:db:23:1e:52:bb:
         a3:10:50:62:78:be:0d:de:5e:fd:bc:42:fd:cd:8c:b3:19:91:
         ac:c5:02:08:e6:2c:6f:71:1b:a6:e2:c0:b1:b5:b0:f3:da:d6:
         2f:0e:79:26:0f:f7:08:7f:6c:e8:b3:1b:0b:4e:c3:7a:1e:72:
         01:17:74:8b:e5:da:27:86:05:e5:b5:ff:91:fc:9d:0f:ec:1e:
         8b:12:ed:65:40:9f:47:55:bb:95:d5:66:2d:26:dd:5f:7f:e3:
         12:04:c3:d5:ff:d0:77:30:e2:57:04:03:22:38:91:46:52:77:
         1b:70:e8:ac:ec:7a:b0:cb:3c:47:75:12:0e:5c:32:3f:2d:ce:
         79:ca:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 16:03:12 2024 by rpki-client on console-ams.rpki-client.org