Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
File:                     INJjO_-xbaLXXtr0m8ghGHz7iO8.mft (raw, json)
Hash identifier:          oRsugKr6dDYIzm7IOT16+xjhrULasZVZumzV0FDchVE=
Subject key identifier:   DE:2E:3A:BF:1C:11:D3:C5:8B:89:47:BF:1A:80:02:3A:B1:9C:BC:90
Authority key identifier: 20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
Certificate issuer:       /CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Certificate serial:       018F5211EC6AF4335794B524902E94CDB960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
Manifest number:          05D4
Signing time:             Tue 07 May 2024 08:00:57 +0000
Manifest this update:     Tue 07 May 2024 08:00:57 +0000
Manifest next update:     Wed 08 May 2024 08:00:57 +0000
Files and hashes:         1: INJjO_-xbaLXXtr0m8ghGHz7iO8.crl (hash: D5sDCdVYUFZBehsvUmjO1H1ppIwjpVjxn+OAzVk6Rso=)
                          2: KJZRzDNaLiKvHDCB8MD5nOMsOwQ.roa (hash: M9y6v4QHaBwTFAHkA4LdCiNEMu4XSGm+hiR97uiiVj0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:52:11:ec:6a:f4:33:57:94:b5:24:90:2e:94:cd:b9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
        Validity
            Not Before: May  7 08:00:57 2024 GMT
            Not After : May  8 08:00:57 2024 GMT
        Subject: CN=de2e3abf1c11d3c58b8947bf1a80023ab19cbc90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a5:ca:d5:d6:b1:39:ac:f1:7c:c8:18:14:8b:
                    14:7f:b3:99:d3:5e:35:73:d7:63:81:7f:63:ef:80:
                    04:2f:a7:24:10:20:30:89:02:cc:ef:32:87:5c:3c:
                    51:3e:26:e3:9b:26:ea:ef:80:da:a1:ff:9b:bc:a7:
                    3d:e4:8b:6f:e4:0a:21:8f:e2:2f:c6:87:bb:8a:5b:
                    ff:7a:ba:96:d5:aa:34:03:15:35:6f:70:f0:53:f6:
                    93:54:eb:1b:ed:0c:06:0c:ed:1a:98:22:23:34:20:
                    4e:43:9d:63:da:71:d8:a2:4c:92:f7:14:5f:32:d0:
                    c8:94:91:1c:a2:98:7d:bf:cc:e9:aa:aa:af:bd:0a:
                    1f:a3:29:0e:b8:c8:38:6f:9a:4f:af:b0:6d:e2:82:
                    53:8a:70:16:67:a0:40:5b:20:16:cd:14:51:dd:1b:
                    25:ce:e4:a9:44:8f:61:14:5b:ab:90:e0:0f:23:8f:
                    3b:db:e2:57:e3:87:b3:70:49:8f:c5:2a:a3:35:fc:
                    ae:5a:fd:b4:7c:fc:a1:96:5a:10:2b:27:13:72:ea:
                    8e:b8:d0:d8:3d:a1:d9:f9:f2:77:48:58:00:02:a0:
                    7c:3d:92:c8:56:82:ce:7b:18:4c:8d:a0:2c:2f:7d:
                    e5:a9:b1:76:bf:8d:a1:97:af:4b:07:ef:b7:3f:ed:
                    56:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2E:3A:BF:1C:11:D3:C5:8B:89:47:BF:1A:80:02:3A:B1:9C:BC:90
            X509v3 Authority Key Identifier:
                keyid:20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0a:a2:87:d6:28:2e:43:a8:8b:f6:67:53:eb:8a:f7:ed:50:
         51:40:f7:6e:42:e3:14:66:08:4d:b5:67:b5:69:c7:d6:6f:fa:
         cb:5b:4f:73:c2:a4:4b:f8:c8:17:61:97:52:e7:36:ea:96:52:
         5d:31:df:ab:e1:1b:3f:f5:00:b3:d3:3a:11:1f:3f:69:37:1b:
         8f:6b:e7:97:24:2b:86:5f:9a:30:23:e8:71:ac:fb:10:ed:5a:
         ca:b8:c0:18:f8:f9:42:1c:8c:90:2e:34:be:c2:c8:42:91:1f:
         1c:91:c4:8c:72:9b:30:e8:bd:b9:2e:d4:30:69:82:7d:c6:44:
         63:a9:d4:ba:be:0b:06:03:8f:74:7d:94:15:12:b5:91:16:0a:
         76:5f:74:28:56:f4:35:90:b7:99:5e:48:fe:d7:31:f8:01:e2:
         dd:50:b7:1f:b9:bb:c9:9f:00:96:83:49:2a:08:75:dc:f9:27:
         61:b2:e6:f1:1f:b2:4d:70:e2:50:ae:38:8a:98:d0:3d:c2:0f:
         01:37:e8:e0:b8:04:c2:32:1a:f7:8f:b3:2f:2b:a5:b1:35:fb:
         7f:0e:05:4f:1b:df:f5:a9:c4:8b:37:dd:1c:d7:a1:11:25:02:
         9f:37:50:71:ad:48:8b:fa:a7:c6:ea:c6:a9:10:2c:93:1d:3c:
         2e:31:bb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 10:28:10 2024 by rpki-client on console-fra.rpki-client.org