Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
File:                     1-G_kJ8_22FppXshlKKSDDLQIqBg.mft (raw, json)
Hash identifier:          lAP8xMYfb6lDxyNTQmu57RxK+eg0t6G7d9rba98izXc=
Subject key identifier:   3B:69:E3:80:66:D8:22:BB:B3:9B:67:53:C4:64:7F:38:DF:5B:30:D3
Authority key identifier: F8:6F:E4:27:CF:F6:D8:5A:69:5E:C8:65:28:A4:83:0C:B4:08:A8:18
Certificate issuer:       /CN=f86fe427cff6d85a695ec86528a4830cb408a818
Certificate serial:       018F4B6BC26EEEF3C1D85CBE350790681216
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
Manifest number:          0CC3
Signing time:             Mon 06 May 2024 01:01:44 +0000
Manifest this update:     Mon 06 May 2024 01:01:44 +0000
Manifest next update:     Tue 07 May 2024 01:01:44 +0000
Files and hashes:         1: 1-G_kJ8_22FppXshlKKSDDLQIqBg.crl (hash: CbkrfK3f8O1oRYvkHOVeNN/6XRukxuTeC6jBAfhkA9I=)
                          2: UIyCL4LahqGkeGobLCNvnB6ZnEE.roa (hash: OvcGsmsnISgooyzWCU129Bboqg6dtkrFRlMPZLn2WwU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6b:c2:6e:ee:f3:c1:d8:5c:be:35:07:90:68:12:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f86fe427cff6d85a695ec86528a4830cb408a818
        Validity
            Not Before: May  6 01:01:44 2024 GMT
            Not After : May  7 01:01:44 2024 GMT
        Subject: CN=3b69e38066d822bbb39b6753c4647f38df5b30d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:20:ac:00:20:9a:61:a7:d6:56:f3:5f:dd:
                    6b:34:55:7e:29:74:f1:50:71:dc:c2:45:25:6b:53:
                    70:14:84:21:37:fc:ed:a7:5b:dd:07:bc:4f:e7:e6:
                    d3:c4:22:62:77:a9:d7:85:8b:ae:5c:9f:5f:af:53:
                    ca:7a:07:0a:62:7d:a7:4e:d5:9d:eb:bc:d6:5d:7f:
                    5c:84:10:cc:8c:fc:d1:b8:5c:dd:2f:dd:0d:f4:26:
                    93:7e:45:f2:07:1c:83:14:ef:24:bd:1d:c0:f6:bc:
                    c9:b2:b6:a0:8b:4c:84:ab:6e:ba:5a:19:2c:68:04:
                    75:2d:2b:34:0f:91:64:c9:8a:a0:84:5b:ab:56:f8:
                    53:93:f6:ff:dd:70:4c:d0:d1:45:e4:87:b8:a6:5b:
                    95:e7:c9:d7:2c:1b:f5:2c:e8:ee:fb:d9:04:a2:e0:
                    35:63:fb:f3:cb:8c:2a:de:3c:6c:dc:42:8b:aa:e8:
                    5b:fd:4c:ed:e9:4c:24:43:64:b2:a4:a9:cf:40:00:
                    fa:e8:d0:b7:18:2f:33:5c:66:cd:3b:c1:3e:34:e2:
                    02:76:0f:3c:00:f6:0a:b9:55:c6:8d:5f:9b:de:93:
                    c7:e2:fc:19:43:b1:fe:73:bf:44:64:7c:f7:6b:96:
                    f3:73:ca:80:0b:3d:db:4a:cf:b8:49:8e:7f:3d:78:
                    fa:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:69:E3:80:66:D8:22:BB:B3:9B:67:53:C4:64:7F:38:DF:5B:30:D3
            X509v3 Authority Key Identifier:
                keyid:F8:6F:E4:27:CF:F6:D8:5A:69:5E:C8:65:28:A4:83:0C:B4:08:A8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c6:22:a9:6c:af:2b:12:bb:e5:d9:5f:aa:c2:d5:b8:70:89:
         57:a5:fb:28:30:bc:fc:eb:6a:a5:30:dd:5a:c3:b1:e7:b5:6a:
         eb:e2:fe:28:80:3c:d1:00:ad:35:e8:0b:60:0e:93:81:c8:13:
         bd:50:70:3e:84:ec:93:59:b9:fb:7a:5a:c0:82:c5:4c:7f:33:
         c3:41:54:18:79:0f:ed:19:9f:ec:ff:db:06:d9:06:d9:4a:56:
         bf:2b:a8:e7:e8:3c:ff:2f:f2:91:d9:38:ea:3d:89:c6:81:60:
         26:21:a1:64:8d:37:aa:52:d8:ec:63:3f:87:43:9b:ee:6e:6a:
         83:89:98:af:03:bf:cc:52:bc:7e:87:47:bc:e3:f1:34:55:0f:
         88:58:11:4f:c4:e7:22:6f:72:a8:da:6c:e4:e4:5c:c2:e3:b5:
         a5:47:71:bd:5b:bf:02:dc:8e:81:b7:ff:03:df:c1:49:fc:01:
         0d:84:c1:9e:63:93:5e:bf:38:07:8d:ed:9a:76:48:09:f9:d7:
         35:f2:40:de:82:14:11:57:8d:7e:a5:d0:95:54:7b:89:b4:a2:
         74:7f:f4:0f:63:02:7c:0e:2a:18:cd:d2:38:8d:a4:57:cb:70:
         1f:ee:65:fe:b4:27:a0:e6:1e:48:00:6d:33:bb:69:6f:66:b3:
         ed:94:3d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:11:08 2024 by rpki-client on console-ams.rpki-client.org