Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
File:                     00QDowsxN1mvliav2NPSOAX8yA4.mft (raw, json)
Hash identifier:          uiZaBH9A1OIrE77fjoumrsYjj7zeIGCSncRnsj6fGaU=
Subject key identifier:   A3:66:F4:42:7B:24:EB:13:94:05:5A:E3:92:B0:C8:E6:BA:2B:42:69
Authority key identifier: D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
Certificate issuer:       /CN=d34403a30b313759af9626afd8d3d23805fcc80e
Certificate serial:       018F540064B8C3A90675E4589B8174893D1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
Manifest number:          0FBC
Signing time:             Tue 07 May 2024 17:01:02 +0000
Manifest this update:     Tue 07 May 2024 17:01:02 +0000
Manifest next update:     Wed 08 May 2024 17:01:02 +0000
Files and hashes:         1: 00QDowsxN1mvliav2NPSOAX8yA4.crl (hash: 7kDFLnXXOTD6IeQEasUlM88E9zrQ/V8d3KTi339fgH4=)
                          2: cdAYaxUCWrRHjCiBNLvOK_r_XMU.roa (hash: o/XIOfeJ7L9kfMxB9gE91RYf12y8BKnMynIEj0lEhgE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:00:64:b8:c3:a9:06:75:e4:58:9b:81:74:89:3d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34403a30b313759af9626afd8d3d23805fcc80e
        Validity
            Not Before: May  7 17:01:02 2024 GMT
            Not After : May  8 17:01:02 2024 GMT
        Subject: CN=a366f4427b24eb1394055ae392b0c8e6ba2b4269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e7:54:b9:75:cf:14:99:96:28:a9:94:c9:4c:
                    40:2a:65:be:67:06:bb:9c:ae:e3:2f:2e:ec:20:7f:
                    6f:1a:f9:f7:19:7c:15:64:f7:cb:71:18:03:a6:c0:
                    e8:a4:9e:8b:5a:80:4b:86:f7:bb:93:bc:05:4f:9d:
                    4d:ec:66:e0:59:aa:e9:07:ef:08:a5:fe:06:8c:5c:
                    c5:46:a8:bc:7c:17:78:9b:e8:3f:8b:ee:5e:82:35:
                    b5:d5:d4:bf:8e:39:ef:da:01:41:cc:3c:b7:27:21:
                    c2:95:f3:61:60:28:6b:de:6f:50:bf:69:d7:1a:ab:
                    db:d7:c7:76:1b:aa:0c:be:e0:26:f3:bd:45:54:fe:
                    78:c9:43:53:e5:ff:7c:bb:12:0b:99:b4:c8:ad:52:
                    51:58:34:fc:4b:bf:d7:fb:73:a7:c5:e3:71:2c:df:
                    27:d9:90:72:79:bb:c5:5e:d9:bb:da:b1:b3:52:a0:
                    3d:d8:3f:09:79:5a:11:bc:36:c7:52:91:72:03:42:
                    45:91:58:49:c9:48:38:cc:f5:e7:dc:dd:c4:67:03:
                    b3:9e:5a:c1:3a:b0:0c:a3:98:00:53:24:50:17:29:
                    07:19:7f:32:9a:9c:1a:2e:35:b2:6f:b5:05:74:16:
                    ab:e9:1a:27:e4:13:f8:b7:c0:a9:d3:46:3d:11:3c:
                    2d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:66:F4:42:7B:24:EB:13:94:05:5A:E3:92:B0:C8:E6:BA:2B:42:69
            X509v3 Authority Key Identifier:
                keyid:D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:42:f4:db:c5:e4:bb:53:a7:6f:3d:c6:de:a0:0e:a1:40:4f:
         ec:f1:8d:93:85:70:e6:ff:c4:1e:16:5e:6c:63:55:b6:b7:b7:
         40:ce:7f:b4:b2:e8:30:bb:20:5f:ff:80:a4:3e:f7:13:85:f0:
         f2:20:27:b4:bc:19:8c:69:08:95:9c:ae:a3:5f:63:94:ad:9d:
         df:95:53:b2:a5:6b:7b:4a:f6:c3:ca:ff:0e:7d:aa:18:92:a6:
         a9:b0:c7:ce:17:39:a5:39:e3:f7:b0:48:13:9f:3e:41:bc:09:
         08:14:08:74:ef:69:73:ba:67:3b:8f:a7:c4:ba:6e:a4:a8:1c:
         50:4a:1d:71:ca:87:33:80:f0:c2:9e:2d:8d:b6:72:dd:4b:0f:
         45:65:b6:57:7d:65:41:07:ea:cd:20:ac:4f:af:d3:f0:0d:2a:
         25:fa:d7:39:8b:c2:59:2d:33:f0:2d:a8:58:9a:69:06:42:ba:
         e0:91:6e:c1:11:a9:7b:67:ca:66:eb:36:97:02:e2:1f:af:0b:
         29:b0:5d:01:6d:ac:b5:2e:75:94:f2:8e:91:ce:f9:ec:f9:71:
         14:94:53:e1:54:a4:9e:52:16:fb:dd:ce:aa:6b:3b:23:ef:b6:
         32:d4:14:99:81:c4:4c:cb:72:de:b6:50:68:a5:4e:26:55:ed:
         6f:3b:92:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:55:50 2024 by rpki-client on console-fra.rpki-client.org