Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
File:                     AVz-48K26knSnhA-I6Uixi44UxE.mft (raw, json)
Hash identifier:          cTkbEdcXMP/AXd+Wy/z0E3r9TL16TExX1EjjP+a5uEA=
Subject key identifier:   83:69:DB:12:B4:8F:19:1A:66:39:B7:12:D0:AF:C3:E8:65:C4:1E:04
Authority key identifier: 01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
Certificate issuer:       /CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Certificate serial:       018F3BF879892553FCFB5F98192DE5B5BF12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
Manifest number:          0E66
Signing time:             Fri 03 May 2024 01:01:30 +0000
Manifest this update:     Fri 03 May 2024 01:01:30 +0000
Manifest next update:     Sat 04 May 2024 01:01:30 +0000
Files and hashes:         1: AVz-48K26knSnhA-I6Uixi44UxE.crl (hash: uWF5lRU2OfQfRd3bX3R3PldYw24IiMn0fbp0XtSqSjM=)
                          2: gYY3AblnWkUbuIk8pznlpkTsXXY.roa (hash: q4jseNCx/J5dhNfoG1a2Mr6rZokrxQlMZOiVU/9l4X8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f8:79:89:25:53:fc:fb:5f:98:19:2d:e5:b5:bf:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015cfee3c2b6ea49d29e103e23a522c62e385311
        Validity
            Not Before: May  3 01:01:30 2024 GMT
            Not After : May  4 01:01:30 2024 GMT
        Subject: CN=8369db12b48f191a6639b712d0afc3e865c41e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1a:2a:8b:f7:0d:f0:e3:82:54:90:6c:60:6b:
                    70:e8:9d:c9:d8:04:ab:d1:25:fe:aa:ac:7f:a8:55:
                    be:4c:3e:cd:3a:ae:2e:c5:52:d2:59:94:d7:43:c7:
                    fb:90:4e:9e:19:97:95:59:12:a2:4f:5c:56:0d:88:
                    ca:36:13:06:ef:a3:8f:66:c1:ce:9a:ba:5f:1c:65:
                    43:66:36:f4:a6:56:8e:19:9e:52:3d:87:d8:26:c7:
                    ed:4f:36:f2:a5:ae:c1:38:e2:73:de:ed:84:85:7b:
                    6d:64:5c:a6:6f:bc:d2:74:ec:6a:ec:09:5b:2c:1f:
                    27:7e:14:40:54:40:d7:b6:7d:82:8a:da:4c:3a:6f:
                    db:5e:e7:58:c3:3e:da:48:6e:a1:92:db:84:47:5c:
                    d9:ea:a1:ca:5b:e2:f7:19:c8:8f:70:e8:bb:70:b0:
                    69:14:93:09:2a:d5:32:a2:8b:45:94:72:a2:c0:df:
                    a0:61:3b:df:67:e2:5d:61:70:81:7e:7f:1c:e4:e2:
                    1c:62:30:02:59:2d:41:52:c5:59:03:c4:a8:10:23:
                    12:fc:6b:14:3b:4c:13:d9:6f:37:1a:25:3d:c1:10:
                    ac:cb:ed:ff:19:c1:5a:64:cf:15:ef:5f:a3:32:5a:
                    f0:20:55:e9:f3:1f:2f:a6:6c:b3:0e:86:b3:5b:73:
                    24:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:69:DB:12:B4:8F:19:1A:66:39:B7:12:D0:AF:C3:E8:65:C4:1E:04
            X509v3 Authority Key Identifier:
                keyid:01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:71:d2:5e:4e:61:c8:f8:44:06:ec:c8:0c:22:64:6d:ba:68:
         9b:cc:a1:36:b8:f2:07:1b:79:09:a8:74:82:1c:5d:52:61:e9:
         0d:53:af:51:b8:56:ce:1d:30:6d:f9:8d:51:21:98:b5:16:d1:
         28:6e:6c:17:46:b7:49:07:54:c2:64:c0:3b:51:0b:ef:38:11:
         86:9e:55:b9:3b:a1:25:50:c6:0b:b0:a1:09:79:aa:a3:33:f2:
         4d:41:d1:7e:b1:fc:73:c3:6a:26:8e:82:8b:7e:d6:4c:78:7e:
         cd:02:11:46:79:2e:c5:bc:fc:7a:2f:11:55:ae:a0:0a:1a:36:
         e2:2f:4d:3a:65:93:aa:a1:8d:d4:2d:5c:a3:08:91:ce:e1:b3:
         58:f1:7f:61:26:6e:88:6d:60:d6:be:ec:08:8b:c7:5f:5f:06:
         56:52:70:f2:fe:90:0c:62:d2:56:a3:6b:88:e7:ea:e6:d3:99:
         53:8f:c4:39:5d:78:14:78:23:ed:dd:e3:71:49:19:4a:b5:2b:
         0c:1e:7f:f3:d0:e5:a9:71:58:db:31:d3:eb:42:41:0d:99:c0:
         3a:cf:d5:2c:79:fa:f8:47:65:dd:37:e8:ef:a2:ff:39:7e:7a:
         0f:29:1c:4b:54:19:e8:4c:36:07:e9:25:96:b6:44:de:d4:00:
         30:2f:cc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:16:27 2024 by rpki-client on console-fra.rpki-client.org