Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
File:                     hRwoH1drQ6HKuVPJIEHOlZknDHg.mft (raw, json)
Hash identifier:          vuTyTuKwGSamqN4tCiMshko45by9EmI+GC0KbcNMk9A=
Subject key identifier:   B4:A3:DF:78:7E:9F:6D:3B:76:82:0D:39:F3:2B:F6:DF:62:49:97:1E
Authority key identifier: 85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
Certificate issuer:       /CN=851c281f576b43a1cab953c92041ce9599270c78
Certificate serial:       018F87ED4104442E0632E6C60C0FC6EEBD52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
Manifest number:          0FFD
Signing time:             Fri 17 May 2024 19:00:23 +0000
Manifest this update:     Fri 17 May 2024 19:00:23 +0000
Manifest next update:     Sat 18 May 2024 19:00:23 +0000
Files and hashes:         1: NAamPDal-rVrjA1r9N5wbsERf_g.roa (hash: HG5fuPvi1F4hgTZKEOUt3IthR4taUqyfwJw7AujO8A8=)
                          2: hRwoH1drQ6HKuVPJIEHOlZknDHg.crl (hash: WOUrACxxd7n5Iw3kO5/RnCD8jZL47csEMDnqtNoUuG8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:41:04:44:2e:06:32:e6:c6:0c:0f:c6:ee:bd:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851c281f576b43a1cab953c92041ce9599270c78
        Validity
            Not Before: May 17 19:00:23 2024 GMT
            Not After : May 18 19:00:23 2024 GMT
        Subject: CN=b4a3df787e9f6d3b76820d39f32bf6df6249971e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:b9:af:53:70:f5:58:26:1a:9a:cd:a6:32:
                    3d:c2:10:e3:60:1b:83:dd:a8:49:1a:a1:e3:d8:d5:
                    27:16:d0:08:66:33:8b:3f:71:9c:a6:e9:16:0a:d4:
                    6c:4c:2e:db:32:23:61:c7:96:64:c1:06:3c:91:a2:
                    f1:a6:9d:4b:1b:d3:6a:f0:0d:19:af:66:b4:95:b8:
                    52:8f:cc:27:87:a1:b8:8a:b5:e0:5d:ac:44:27:70:
                    08:db:1c:42:33:a0:13:bd:d6:3f:4e:19:18:74:1c:
                    82:0e:b4:a4:44:c5:83:f7:ca:1d:fa:92:65:2a:a3:
                    90:d7:69:2b:b3:f4:c8:66:1e:0c:5a:f1:00:9d:0d:
                    f9:b7:4c:e4:43:07:48:66:13:3a:f1:50:77:89:eb:
                    52:df:6d:3e:81:3e:e9:4d:45:6d:fc:e7:55:21:06:
                    c2:b8:bc:39:12:5d:b2:bf:e4:86:14:fa:75:69:9b:
                    3e:3e:ee:56:35:23:1d:e4:bf:a2:42:d0:1c:46:3d:
                    9d:61:7e:d2:fd:60:70:08:0b:ba:de:da:cb:59:c5:
                    fa:57:e3:dd:e3:59:b0:cc:8c:a4:79:32:f5:7d:37:
                    2e:6e:ab:75:2e:bf:2e:3e:47:82:10:b1:ed:3b:26:
                    28:7a:f5:05:a1:50:0a:85:80:fe:2d:8c:fc:14:85:
                    50:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A3:DF:78:7E:9F:6D:3B:76:82:0D:39:F3:2B:F6:DF:62:49:97:1E
            X509v3 Authority Key Identifier:
                keyid:85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:4f:d3:7d:cd:24:cf:06:bc:d2:34:fc:b7:ea:13:8e:13:2a:
         49:b2:c5:ca:35:fc:86:ac:ae:f7:29:b5:e8:05:31:5a:31:03:
         9d:e3:d0:94:cf:3a:c1:ca:37:0d:2c:62:f2:3e:bf:cb:86:3d:
         91:de:4d:13:47:14:bc:45:83:ea:de:e1:7b:50:ee:f1:bf:c4:
         b7:8d:bd:af:6a:f8:51:3d:89:c3:8c:90:92:78:b1:2b:94:5a:
         4b:c7:28:d6:cb:b9:3f:7f:9f:de:7b:c2:70:79:28:e4:d5:4c:
         61:75:f6:96:67:18:19:16:56:7d:20:ff:e5:d4:a3:6b:93:0e:
         ca:10:ff:f2:17:05:b1:65:2b:e5:71:da:67:14:ff:c4:b8:68:
         07:a2:28:b3:62:62:c6:5f:bd:55:af:46:b5:b1:3b:93:89:5a:
         09:54:be:6c:dd:90:95:c7:5a:72:1a:0a:5e:04:ea:ad:49:28:
         37:91:69:e6:fc:f6:59:4d:f0:6d:a2:c4:d1:c7:e9:5e:d7:df:
         54:62:ba:5b:f1:23:31:f6:67:05:80:a2:ac:bf:32:c8:d5:bf:
         ab:a4:b7:5f:a7:0c:76:2a:ad:89:a5:a5:08:35:8f:4c:57:8b:
         55:2f:69:29:8b:9c:8a:5f:5d:b0:e8:55:27:ba:29:25:f4:34:
         99:e8:45:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:16:48 2024 by rpki-client on console-fra.rpki-client.org