Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
File:                     1-LGChfQu1nwR2Pg99IixD8h_F78.mft (raw, json)
Hash identifier:          GZYBJQKx3ovPzTdWKsYnkpq+cfAzZhIUPf+1G1el9Z4=
Subject key identifier:   D5:F3:04:26:58:4D:54:1B:E0:83:E2:82:B0:97:FF:60:FD:34:0E:53
Authority key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
Certificate issuer:       /CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Certificate serial:       018F339993F06882845C6898EA5BD314C87F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
Manifest number:          0834
Signing time:             Wed 01 May 2024 10:00:53 +0000
Manifest this update:     Wed 01 May 2024 10:00:53 +0000
Manifest next update:     Thu 02 May 2024 10:00:53 +0000
Files and hashes:         1: 1-LGChfQu1nwR2Pg99IixD8h_F78.crl (hash: Xa5H2t3GIqRHtEV/0dQWNVQCsWNIqy90/JF4FuKI2bI=)
                          2: EDCkX_sx1CmjhvIZr3yyBblQdc0.roa (hash: AAWyObOWZwPq0eZxJ5F6v6n1qmCCAM0cKRUVqqIbvYY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:33:99:93:f0:68:82:84:5c:68:98:ea:5b:d3:14:c8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
        Validity
            Not Before: May  1 10:00:53 2024 GMT
            Not After : May  2 10:00:53 2024 GMT
        Subject: CN=d5f30426584d541be083e282b097ff60fd340e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:12:0a:30:8f:9d:84:80:48:9b:7b:37:42:13:
                    ff:62:60:27:f4:b5:a0:53:95:fb:c4:78:34:55:09:
                    50:3b:e1:9f:ad:d4:3d:45:0f:8b:8d:64:d3:2b:19:
                    d3:e3:24:2e:d5:6e:56:b5:8c:36:68:26:78:7f:84:
                    97:1d:c4:85:5c:61:5f:ac:65:7d:ad:76:03:4c:89:
                    cc:c6:a7:6d:7f:44:81:45:de:c8:07:04:b4:f6:09:
                    2e:6e:c4:a0:c1:af:2f:5b:03:ce:e2:e1:58:d5:25:
                    b5:e2:12:fc:e5:d0:f3:69:86:8f:94:15:10:cc:40:
                    a2:bb:ff:a4:b7:79:3c:bb:f4:25:99:30:ff:43:ed:
                    90:26:cb:56:64:ba:88:69:40:3a:89:36:ee:50:52:
                    38:b9:f5:34:d7:53:b1:2a:60:90:b7:93:52:a5:5d:
                    93:66:b5:b7:9c:ed:79:f9:6a:2b:91:1f:68:71:47:
                    92:99:a6:12:f9:b6:46:d1:f3:38:15:ee:3f:87:6b:
                    f2:1d:43:8c:c5:ca:79:df:fd:17:db:12:36:a5:27:
                    86:eb:fa:2c:2b:1f:1c:85:55:49:e8:9d:00:fb:2a:
                    30:05:3e:0d:2e:51:48:3d:60:e5:9c:68:25:07:55:
                    fa:c8:70:d2:8c:2f:a1:e9:f4:20:60:cb:e4:e1:2a:
                    cc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F3:04:26:58:4D:54:1B:E0:83:E2:82:B0:97:FF:60:FD:34:0E:53
            X509v3 Authority Key Identifier:
                keyid:F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e5:8f:a6:94:6e:1b:f8:24:e7:13:50:d8:52:22:51:74:a3:
         99:92:fb:ef:07:79:bc:8f:37:15:3e:29:2a:1b:67:92:1b:da:
         2e:d1:8d:9b:50:44:26:81:58:4b:b3:02:e6:31:ac:e2:67:89:
         0d:08:aa:a5:1f:ba:0f:f7:99:52:8a:f5:bb:ef:f6:05:07:f2:
         83:d0:a4:7e:5d:8b:89:ae:2e:71:36:79:00:f4:85:70:84:3e:
         46:2f:99:96:64:ac:39:e2:64:d9:52:1b:a3:09:65:2e:9f:e7:
         ff:b1:b0:ec:fe:8a:77:58:4c:a8:02:6e:49:6e:02:9a:3c:82:
         be:ef:8e:19:03:80:33:64:a8:36:8b:08:7f:16:28:30:05:bb:
         22:1e:5f:9b:6d:14:6c:fb:8f:80:90:76:ee:49:32:eb:04:a6:
         f2:b1:66:98:bc:c6:a6:35:6a:95:8a:77:d8:6f:4c:25:82:6a:
         0a:99:cd:71:52:e9:4c:b0:0a:e3:de:65:c9:06:b2:f0:05:9c:
         63:b6:83:71:c0:a0:fd:1d:6f:46:4f:fe:cc:b5:24:45:a4:5a:
         b4:21:b6:fa:72:7c:92:a6:52:a4:ff:df:55:f4:ff:0c:7c:8b:
         8f:c2:d1:98:4f:3c:ca:f8:ba:85:db:0a:6a:d5:06:2d:c8:a5:
         dd:33:44:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 14:44:57 2024 by rpki-client on console-fra.rpki-client.org