Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
File:                     00_-5-di-aBv4vR-eh5S2eun-v0.mft (raw, json)
Hash identifier:          N87tvrkZb9uKSifqFftqp/hHRVJp+r5h4Fo/JiERCL4=
Subject key identifier:   88:3F:51:93:EB:51:6E:20:E0:D2:65:A1:BB:EB:F5:24:59:7C:95:19
Authority key identifier: D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
Certificate issuer:       /CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Certificate serial:       018F1F013696C074E47DF960F51BB737935A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
Manifest number:          0B8E
Signing time:             Sat 27 Apr 2024 10:02:04 +0000
Manifest this update:     Sat 27 Apr 2024 10:02:04 +0000
Manifest next update:     Sun 28 Apr 2024 10:02:04 +0000
Files and hashes:         1: 00_-5-di-aBv4vR-eh5S2eun-v0.crl (hash: YLvB/MJ0AOSW3lgykyCzT/sSrRaRL9Gkzbj3GwpM7k8=)
                          2: BvdnyliMYvBSFQVozirO5N8YP4g.roa (hash: Rh0h3BjP8F8O++UwsdBwa1G2LCT5uwKB2+uRrgXnVSo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 10:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:01:36:96:c0:74:e4:7d:f9:60:f5:1b:b7:37:93:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
        Validity
            Not Before: Apr 27 10:02:04 2024 GMT
            Not After : Apr 28 10:02:04 2024 GMT
        Subject: CN=883f5193eb516e20e0d265a1bbebf524597c9519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3c:21:13:e7:e6:7f:90:57:22:fd:83:ab:17:
                    a0:0e:b0:64:4d:bb:32:96:66:cd:41:52:46:59:46:
                    54:dd:e3:ce:21:7c:88:eb:5b:69:1c:4d:51:b6:95:
                    ff:1b:dd:f1:93:e3:e6:3c:cd:b9:bf:5f:45:6b:cd:
                    97:68:e1:94:b0:16:bf:f6:6d:75:54:a7:71:33:4f:
                    6b:35:5b:1a:1e:d7:cc:d4:a4:20:40:b5:eb:f2:9a:
                    93:f9:45:42:ff:62:ef:1a:12:57:b1:6a:97:6a:67:
                    07:64:71:00:a6:72:3b:83:73:2c:48:11:5d:7b:36:
                    e7:7e:e7:de:e0:8d:d3:60:ab:4d:6c:5a:14:40:7c:
                    c2:16:4f:98:04:d2:65:db:30:17:f8:48:7a:b1:2b:
                    14:3e:a3:bd:68:a9:f7:fb:34:17:7e:75:7e:27:ab:
                    09:01:8c:d3:09:5c:af:24:02:58:30:33:de:2d:33:
                    e5:3c:2b:a4:8d:88:d7:74:d6:8c:e5:bf:7e:41:21:
                    77:e3:ab:c0:99:b5:c5:b5:a6:f1:2c:e2:5e:f4:45:
                    03:5e:60:5a:14:cd:70:c7:86:8c:44:33:b3:34:f1:
                    74:3d:7a:5f:a9:2e:bf:20:0f:10:c5:0c:63:e0:7d:
                    8f:a9:98:72:41:87:b4:cd:b4:08:42:a9:6e:fe:eb:
                    3b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3F:51:93:EB:51:6E:20:E0:D2:65:A1:BB:EB:F5:24:59:7C:95:19
            X509v3 Authority Key Identifier:
                keyid:D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:17:e3:eb:19:d3:42:82:1e:b0:77:c1:2a:23:73:cc:f3:8e:
         e5:8d:76:e3:56:37:0d:a4:f8:93:9c:91:8e:95:10:5f:5d:b9:
         a0:4b:b6:8a:a2:18:22:31:a3:69:8e:c2:85:1b:45:7c:82:86:
         97:6d:6b:cb:ca:06:12:8c:d1:2a:23:04:fc:0f:2a:29:ea:f4:
         2b:43:f3:68:ca:e3:f5:b7:80:f2:96:3a:b4:4b:d9:45:18:c2:
         a3:ce:80:c8:70:b7:37:cc:6c:d4:cf:82:32:39:61:84:e3:d5:
         b6:3a:4e:23:1d:58:f2:24:3d:13:f3:34:3d:ea:55:04:64:66:
         3c:93:a8:3d:91:3a:89:db:c3:ac:05:0c:31:85:8e:56:8b:f6:
         ef:94:09:2c:26:6b:70:9f:7b:f3:b7:e6:d9:71:44:a4:bf:02:
         c8:48:17:16:11:7f:a3:8c:44:f7:c9:62:ec:94:f3:78:0f:d6:
         66:ef:10:ad:00:a1:ff:65:64:ca:98:12:66:f9:2e:71:65:7c:
         95:fb:4d:98:a4:b1:79:fa:9a:46:3b:c6:5e:59:e6:e4:c3:65:
         25:a8:28:09:a3:fd:ac:d3:06:47:c7:c9:57:b9:52:5b:4e:47:
         26:be:23:00:fb:86:4f:44:64:0e:2a:7d:28:5d:75:1f:d0:a6:
         c1:a5:13:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 16:26:23 2024 by rpki-client on console-ams.rpki-client.org