Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
File:                     1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft (raw, json)
Hash identifier:          hXP63bDWlW8eSOZYmZ7dCzSl7/KjVBuo+IzL3XtzD9g=
Subject key identifier:   29:67:3A:2D:06:10:57:F3:50:C3:61:A1:5D:F2:95:60:8A:88:C4:37
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Certificate issuer:       /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial:       018F9270A18392B1D71B1629427E0502A652
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
Manifest number:          0FA3
Signing time:             Sun 19 May 2024 20:00:05 +0000
Manifest this update:     Sun 19 May 2024 20:00:05 +0000
Manifest next update:     Mon 20 May 2024 20:00:05 +0000
Files and hashes:         1: 1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl (hash: LF/aIVJ8M6iIUqLBjuso28rT+hEchcCBDeD/9pDcAR8=)
                          2: 8RtuG7VFA4mAnUQtklfkGCezo58.roa (hash: 5wYjfckG3eAYs0usSVjtEduQx8rR1QiApfk4LUXAzEg=)
                          3: p9ssHKqOI3A0vOt3M1sefkk8VvM.roa (hash: 5cwy4RfzVz046mhyLZCfDmbjFAwdtA+EoYSw397HWLg=)
                          4: yx-2jgNyCjruYbffC8cNj-yJmIQ.roa (hash: ZAF5MiXYXOjUlfqYHVHXr8f5CLu1mi+ALvS+JdlXiPI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:92:70:a1:83:92:b1:d7:1b:16:29:42:7e:05:02:a6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
        Validity
            Not Before: May 19 20:00:05 2024 GMT
            Not After : May 20 20:00:05 2024 GMT
        Subject: CN=29673a2d061057f350c361a15df295608a88c437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0c:d5:10:1b:2e:19:60:2f:e9:c0:1f:c3:5c:
                    aa:fd:f7:6c:1a:ba:f9:63:0f:ce:90:c8:3a:0d:0e:
                    43:a4:73:ec:c7:5f:cd:18:d2:80:c3:b5:a6:7a:a4:
                    28:e8:54:7a:be:b0:13:a6:a8:be:2a:fe:8e:48:f6:
                    52:44:5a:7d:d4:15:79:0d:f0:7c:ab:9f:ce:0f:ae:
                    43:46:ec:71:dd:6c:5b:cb:88:8e:7b:38:6d:e0:57:
                    ba:00:b1:f5:ec:c9:8b:16:d9:69:de:88:e2:9e:39:
                    f9:24:3a:ec:23:85:44:ee:9b:76:ce:39:e1:d0:6d:
                    75:7d:17:40:69:6e:ea:eb:03:84:f0:91:1a:a7:ec:
                    ca:66:56:d6:62:9c:75:70:39:54:ec:92:46:9e:61:
                    26:68:15:bb:b3:4c:c9:7d:67:ae:95:d8:64:a9:db:
                    20:81:54:b1:87:0a:3a:8a:28:45:d1:13:bb:f8:80:
                    b9:b5:95:07:aa:06:c2:0f:e9:4f:c6:3d:b5:f2:b0:
                    e0:ab:f4:12:c6:25:b6:38:55:99:00:fa:9f:d9:2e:
                    d0:93:c5:8c:82:8e:78:b7:8d:8f:02:aa:4f:aa:a8:
                    4e:6c:7f:90:f4:96:2f:f6:e7:7e:c7:9e:0b:1a:6e:
                    c7:78:78:e5:cf:f3:9a:15:d3:d5:32:d0:c6:88:62:
                    fc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:67:3A:2D:06:10:57:F3:50:C3:61:A1:5D:F2:95:60:8A:88:C4:37
            X509v3 Authority Key Identifier:
                keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:4f:d2:b8:a0:46:8c:24:9b:d8:7e:9a:49:94:ba:f8:a9:3c:
         ae:e4:1a:a2:09:5c:4c:86:00:9a:60:47:54:b5:f0:e6:af:2c:
         ea:62:ee:af:05:62:ea:ea:bc:79:8c:f8:6e:b2:3f:c9:21:c9:
         32:02:d9:3a:19:b3:60:3e:82:35:d0:8e:37:d2:ae:69:1f:7c:
         10:ab:b9:68:00:9c:06:b3:13:e2:8d:3b:ba:38:02:19:a1:64:
         fa:2b:97:73:3f:0a:f9:17:21:9e:03:b3:af:5f:c0:4c:96:f2:
         3d:c1:dc:ef:c6:51:03:3f:45:bb:3e:e7:99:b2:ba:23:a8:12:
         fb:a6:c9:99:f4:4d:32:88:0b:79:32:82:5f:1d:fe:fb:cd:0a:
         de:60:c0:b3:40:eb:e1:59:fa:05:11:06:d6:d7:7c:22:68:8e:
         e4:6d:9c:60:88:15:a1:27:90:30:a8:09:d4:94:2c:02:3d:71:
         4b:f9:72:c7:91:57:b6:32:3a:03:3a:8b:13:c3:ab:0f:4e:7f:
         9b:d9:d5:91:bb:5e:02:ba:34:e2:b9:cf:24:34:fc:85:80:88:
         1a:ca:65:d6:1a:8d:a4:7b:8a:96:4e:7b:2d:6f:30:93:44:de:
         04:a5:ee:29:ad:a1:1f:35:96:a6:83:bf:21:98:28:74:e9:94:
         7f:14:a1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:43:55 2024 by rpki-client on console-ams.rpki-client.org