Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
File:                     1-TmwPxKU69NaOxXWldfpH4y0H6A.mft (raw, json)
Hash identifier:          EawpiAm+dtm/hqu6W37KScbTT2wvii//iVk9J+UAu6g=
Subject key identifier:   AD:ED:0E:D9:77:1A:2D:C7:58:20:1F:77:F8:DF:43:E6:4A:A6:25:5B
Authority key identifier: F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
Certificate issuer:       /CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Certificate serial:       018F509223DF4B5F91445131303372C5F249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
Manifest number:          0DA6
Signing time:             Tue 07 May 2024 01:01:45 +0000
Manifest this update:     Tue 07 May 2024 01:01:45 +0000
Manifest next update:     Wed 08 May 2024 01:01:45 +0000
Files and hashes:         1: 1-TmwPxKU69NaOxXWldfpH4y0H6A.crl (hash: ewGy+99EafuoVVBoFTQGAyx1dvwykchXCyEF4MVr8Hk=)
                          2: tv1KZWTw8P4U7Rq7jjCceTF-8iA.roa (hash: e0bFqRMmwIRVDnd8TlNIHASS2kNGI05UY02h5t+2Qgk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 01:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:92:23:df:4b:5f:91:44:51:31:30:33:72:c5:f2:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
        Validity
            Not Before: May  7 01:01:45 2024 GMT
            Not After : May  8 01:01:45 2024 GMT
        Subject: CN=aded0ed9771a2dc758201f77f8df43e64aa6255b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:61:3e:f2:d2:84:b1:86:9a:3a:ea:8d:8f:48:
                    42:14:26:89:a1:fa:db:65:19:57:c2:19:92:46:fb:
                    b1:80:d8:10:58:39:83:a3:4a:28:11:74:be:e2:bb:
                    01:3d:cc:8c:14:86:a1:da:6b:0a:61:cd:26:3c:a0:
                    a8:dc:a6:f6:e1:f8:84:ed:52:02:bc:2b:79:fe:bd:
                    35:31:0c:31:bb:47:14:32:70:0b:1e:7a:c1:b1:0b:
                    60:42:8e:4f:d8:cb:7e:90:95:33:18:45:83:f1:24:
                    9d:47:32:b2:a1:5b:3d:e5:db:78:b7:52:16:fd:be:
                    14:45:13:44:c0:01:57:f5:00:b8:79:32:fa:05:cb:
                    48:55:e4:25:a7:20:45:c5:29:07:f1:73:58:ba:ab:
                    89:7f:fc:a5:fd:2b:fe:ee:e8:0f:44:ac:b7:44:2d:
                    b2:f9:4f:f5:1a:3e:97:42:43:94:c9:5c:b6:a6:c0:
                    75:06:d8:cf:50:31:fc:c3:e2:b8:24:e3:f3:a1:8f:
                    e7:c1:d3:d2:4d:0c:37:7c:f2:fc:86:a3:47:d7:55:
                    11:88:4e:20:75:c2:ef:13:6f:3e:59:bf:d3:0a:75:
                    4d:7b:17:0f:82:a1:e7:b6:5f:bc:12:2b:cf:c7:9c:
                    ee:0f:67:7c:d1:90:79:d5:fe:7b:59:98:ed:08:6c:
                    72:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:ED:0E:D9:77:1A:2D:C7:58:20:1F:77:F8:DF:43:E6:4A:A6:25:5B
            X509v3 Authority Key Identifier:
                keyid:F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:8f:90:20:58:2e:05:21:dd:ef:78:fb:be:e9:f3:e0:39:3a:
         4d:b6:57:4a:57:50:ca:62:c7:d7:c1:a8:a2:fb:cb:c5:10:fb:
         c5:03:7b:51:a5:9b:da:13:1a:70:a8:f0:91:32:29:f4:33:5f:
         03:f9:39:a4:62:b2:0a:07:6b:95:8b:3e:83:5c:82:55:89:88:
         ee:e9:70:28:a8:9a:9f:cf:46:11:22:ce:e9:04:c4:ac:53:2c:
         a2:af:ef:b0:be:98:0d:08:35:e5:37:ec:c5:74:9c:b0:e0:80:
         c4:92:d6:75:c2:8b:ce:2a:84:98:37:07:2b:b4:07:54:45:88:
         a9:66:05:73:29:94:3f:44:99:00:df:c3:b8:25:d4:00:a1:ea:
         84:a4:1e:65:ee:f0:41:36:98:80:37:8e:54:b8:1a:61:fa:51:
         35:a9:9a:22:6d:d7:49:72:ea:3a:30:0d:eb:6d:42:53:22:58:
         8a:ae:cf:2e:0e:c2:ee:37:f8:d3:63:25:1d:a3:21:cb:9a:4e:
         51:38:61:5c:0f:75:5c:8a:8f:77:c8:ac:3d:72:8f:68:15:11:
         ec:96:08:39:8f:63:c9:b3:6b:cb:b5:8e:4a:0a:90:d6:6d:50:
         36:d6:c7:27:94:f8:1d:df:04:9e:ca:d5:3a:b9:e0:4f:4f:2a:
         6e:ad:70:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 08:18:35 2024 by rpki-client on console-fra.rpki-client.org