Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
File:                     le0bk9O85ravzekCC4AWe4XGj1s.mft (raw, json)
Hash identifier:          st1mRR7cysH1z+g4iqOJpTNq/+MEY/v/TttIzHyYb5w=
Subject key identifier:   E8:A8:87:07:11:62:08:5F:FC:5B:82:08:4E:0B:F7:A1:EE:30:FE:85
Authority key identifier: 95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B
Certificate issuer:       /CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
Certificate serial:       018F885B61DBF4D0F3E58F24A76F95E118F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
Manifest number:          0A63
Signing time:             Fri 17 May 2024 21:00:41 +0000
Manifest this update:     Fri 17 May 2024 21:00:41 +0000
Manifest next update:     Sat 18 May 2024 21:00:41 +0000
Files and hashes:         1: le0bk9O85ravzekCC4AWe4XGj1s.crl (hash: r60rRzu1oK4ltCvdfiyksc+2EprbjD4attl+YD+wzjk=)
                          2: naYRlZIiAOGM-DWJlM-pghAVVpg.roa (hash: qkgog4E6Sh9rIYNGP2fYFG2RtlTYhdHdUwoQ/0bF5qg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:61:db:f4:d0:f3:e5:8f:24:a7:6f:95:e1:18:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
        Validity
            Not Before: May 17 21:00:41 2024 GMT
            Not After : May 18 21:00:41 2024 GMT
        Subject: CN=e8a887071162085ffc5b82084e0bf7a1ee30fe85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fc:e5:93:8a:80:62:18:22:30:c8:3e:0c:6b:
                    46:40:82:ea:4e:c6:ce:f5:08:10:6d:07:db:03:bb:
                    67:75:26:dd:b8:88:d3:fa:48:3a:ef:84:58:d9:b8:
                    86:e2:03:a5:aa:c6:f1:e5:b7:dc:7c:b5:b9:18:ce:
                    d6:cc:cb:ed:e9:88:b9:7e:a9:f4:c8:db:93:06:49:
                    67:b0:07:89:67:ef:32:a0:92:84:90:90:0a:23:d9:
                    6a:d1:88:ea:aa:6f:0d:5f:2f:26:2e:9a:d6:18:1e:
                    7f:32:f0:43:b7:84:70:13:52:71:9d:7c:08:b3:55:
                    1c:cb:b9:f9:35:c2:cb:37:97:e5:5a:86:aa:e6:ed:
                    55:a8:95:a0:f1:db:af:a8:fd:24:ac:c6:10:d4:ce:
                    5c:a3:89:9a:e2:b6:ad:b7:96:74:5b:8e:90:4e:5a:
                    fe:dd:70:91:d1:df:d8:1c:7e:0a:fa:0c:3e:cb:46:
                    0b:2e:93:2b:e6:f1:70:ee:59:a2:49:c9:9f:4e:43:
                    b9:11:ad:c9:78:97:d9:3a:5e:da:60:af:c6:a2:0b:
                    8e:cb:ca:fb:1b:9f:b9:72:05:aa:de:ba:69:0a:32:
                    95:93:0b:83:1f:fa:02:01:e1:0f:3d:13:90:cd:12:
                    45:0c:e7:1f:45:be:4b:6e:d3:5a:5e:45:fc:de:39:
                    9e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A8:87:07:11:62:08:5F:FC:5B:82:08:4E:0B:F7:A1:EE:30:FE:85
            X509v3 Authority Key Identifier:
                keyid:95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a8:0e:50:f5:3e:31:3c:7a:6a:75:24:7a:4c:09:30:5f:c0:
         4c:d0:a0:94:27:ef:4a:69:70:a4:fd:f7:05:59:ef:a0:99:cb:
         6c:ce:91:dd:6d:5d:86:05:85:8c:c2:43:e5:b9:60:7a:c6:bf:
         2f:3d:40:61:28:54:3c:a6:cf:7b:5e:e3:39:42:bd:83:c2:ce:
         c9:0b:16:8b:a4:a6:08:70:b9:99:55:8a:71:42:c4:9c:31:c0:
         db:f9:5b:18:b8:f1:05:fa:cb:93:ae:84:a7:3d:db:69:a9:86:
         6e:de:30:76:f5:e9:39:94:e4:fc:28:72:95:7b:fb:3a:4b:ce:
         a6:b0:98:a4:6d:01:41:b1:1d:b5:c4:e3:d7:0c:8f:49:48:70:
         22:4d:b2:a7:77:0f:d6:8c:38:05:2c:af:de:b7:86:7d:8c:26:
         26:ee:dc:88:63:1c:c1:8e:73:e9:b7:60:24:12:e3:23:0d:cb:
         78:0f:83:8a:4c:bc:ac:67:32:ab:0a:5b:56:44:58:c0:ae:65:
         24:63:5b:b9:94:f8:23:d4:74:40:f4:18:22:b9:88:46:21:09:
         76:d4:10:30:2e:ad:0a:21:57:88:3d:a6:ff:d7:31:0f:fe:16:
         a6:b7:15:d8:f2:57:ff:33:a1:2c:75:ee:5d:3b:48:10:f8:aa:
         13:02:d1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:09:49 2024 by rpki-client on console-ams.rpki-client.org