Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
File:                     C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft (raw, json)
Hash identifier:          KywNJo5Mi8Tr+diei2GP7DxtyrFiVE4LQE1off8xo4E=
Subject key identifier:   B4:4A:38:58:5E:1F:A9:26:F6:FB:0E:8F:62:18:D3:04:CE:2E:14:70
Authority key identifier: 0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
Certificate issuer:       /CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Certificate serial:       018F87B69F464A308BD9ACCDE7E6FD98DD17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
Manifest number:          01A5
Signing time:             Fri 17 May 2024 18:00:43 +0000
Manifest this update:     Fri 17 May 2024 18:00:43 +0000
Manifest next update:     Sat 18 May 2024 18:00:43 +0000
Files and hashes:         1: C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl (hash: YYLccdqEodjRJjth2x+WpaxJJKuNKr3BsUMEsuwmngw=)
                          2: IuD1AHrVEBdTBrw8BWbRVyAxFU0.roa (hash: gU2XArbTRfv8jWfbdk1t+W+BVwskH1xGIjz2yg2t83E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:9f:46:4a:30:8b:d9:ac:cd:e7:e6:fd:98:dd:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
        Validity
            Not Before: May 17 18:00:43 2024 GMT
            Not After : May 18 18:00:43 2024 GMT
        Subject: CN=b44a38585e1fa926f6fb0e8f6218d304ce2e1470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:06:38:c7:91:64:5d:8c:09:59:88:d4:31:a2:
                    3f:65:fe:ca:53:31:3a:12:b6:30:15:65:28:35:56:
                    e9:e4:8b:85:bd:33:39:69:8b:a7:bb:4d:a0:63:9e:
                    65:db:21:a3:0c:98:dd:c6:22:84:aa:5b:8a:8b:93:
                    84:c4:62:a5:98:46:9a:f2:02:af:2c:04:cc:cf:56:
                    ed:9c:fe:07:5f:80:48:e8:bf:ad:e4:c4:c4:3b:22:
                    5c:aa:e7:9b:c4:e8:c3:a7:5c:1e:44:ba:1d:95:fd:
                    3f:26:5e:1f:fa:43:be:8c:44:f0:44:ad:0a:2c:08:
                    54:c1:c0:cf:bb:14:c2:99:ce:ea:ba:1f:cd:ac:c1:
                    09:f0:4f:8b:50:f8:aa:3c:fc:2f:70:d2:15:55:21:
                    c9:70:e2:e5:a1:f2:ff:a2:ef:de:83:29:22:71:d9:
                    2d:63:77:24:7e:a1:96:ab:65:63:9b:08:59:c7:2c:
                    3c:95:ac:c4:74:0a:77:28:fb:ad:a8:95:aa:c3:55:
                    f3:f1:ca:b1:a6:53:8d:68:75:b8:67:5c:12:ad:db:
                    0d:72:9d:dc:47:98:ed:30:9d:95:6d:a8:08:23:37:
                    8f:82:12:4c:d5:0f:0e:88:85:f8:91:9c:ee:02:df:
                    d7:6c:04:5c:dd:f6:23:f1:97:b0:55:f6:8d:7a:a4:
                    16:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4A:38:58:5E:1F:A9:26:F6:FB:0E:8F:62:18:D3:04:CE:2E:14:70
            X509v3 Authority Key Identifier:
                keyid:0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:5e:71:34:13:f2:b5:97:5b:94:20:a7:a4:91:04:3a:09:95:
         f0:fd:a8:31:e0:dc:04:b3:35:19:b1:b4:d2:39:d8:94:e2:59:
         23:b2:41:3b:b7:e5:61:d2:73:9a:c4:39:af:48:4d:dc:8e:83:
         e3:84:79:a9:de:9d:da:ee:77:bc:46:2f:67:ff:f9:77:fc:dc:
         4e:65:e5:78:50:96:29:91:74:70:5f:eb:42:5f:46:52:1d:b7:
         ff:be:fc:84:fd:51:7a:5e:b0:41:7d:b7:1b:cf:ef:53:05:40:
         31:56:11:79:af:4f:8c:c6:a5:37:7e:b4:22:d2:cd:03:93:79:
         43:bb:09:4c:0d:02:4a:ef:6e:e5:31:ca:f8:a8:13:ff:7d:59:
         c4:76:5b:6d:25:37:d5:df:84:58:cb:b2:ac:ac:cd:f1:a1:17:
         8a:15:13:16:d4:6d:0b:16:e0:74:1d:39:51:5b:c5:bf:05:96:
         45:c7:bc:a4:c5:b4:ad:6d:4b:50:4d:f0:e5:9b:23:24:ed:d3:
         37:47:ff:91:e3:17:13:7b:b7:2a:2f:42:aa:d5:c0:05:bd:16:
         8d:2b:98:d1:03:bd:f0:84:0b:bd:25:d5:a7:93:04:74:b8:eb:
         57:be:8d:1e:6d:f7:59:12:51:b7:87:d8:05:6d:63:ee:e1:3f:
         09:f1:0c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:10:45 2024 by rpki-client on console-ams.rpki-client.org