Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
File:                     A5Wt2Guvay0G_0H1Um00f3HutBA.mft (raw, json)
Hash identifier:          XgsCF+Sgxu9d2zZizNzISMHnnxUTEWdsy/JvuM6MJ9w=
Subject key identifier:   19:6C:AB:9E:37:51:45:D0:FA:48:C9:D8:A5:FF:72:3E:0C:EA:32:8C
Authority key identifier: 03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
Certificate issuer:       /CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Certificate serial:       018F57DD879D2FF7B08969668DE6BEFE6024
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
Manifest number:          10F1
Signing time:             Wed 08 May 2024 11:01:27 +0000
Manifest this update:     Wed 08 May 2024 11:01:27 +0000
Manifest next update:     Thu 09 May 2024 11:01:27 +0000
Files and hashes:         1: A5Wt2Guvay0G_0H1Um00f3HutBA.crl (hash: nzgbE+4foUttE9majilC0fNz4bLZ8ppUk1o21wZxlpI=)
                          2: Y_jx5z12O7fWB2qp-TrEAR869VM.roa (hash: BGoLR8z/dA/fmzRkbaoYLagfkumnGJQTC4zxdCidp1Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 11:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:dd:87:9d:2f:f7:b0:89:69:66:8d:e6:be:fe:60:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0395add86baf6b2d06ff41f5526d347f71eeb410
        Validity
            Not Before: May  8 11:01:27 2024 GMT
            Not After : May  9 11:01:27 2024 GMT
        Subject: CN=196cab9e375145d0fa48c9d8a5ff723e0cea328c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:9d:ce:8d:8e:c6:8b:e9:fc:ab:e2:3d:33:
                    c0:eb:57:66:df:0d:26:f8:ff:8f:ec:c5:c7:82:2e:
                    56:b2:a8:2c:e0:07:24:41:15:07:4f:e1:95:82:77:
                    fe:53:21:6f:2f:f0:a5:cd:97:e1:55:22:a4:42:64:
                    00:58:81:a3:2f:11:d9:43:b0:8f:fa:95:1b:10:41:
                    e7:9a:4f:02:89:3d:52:00:10:9f:43:0b:31:62:e2:
                    8b:32:0c:4f:c1:3c:f1:b0:e2:1e:60:44:40:a4:af:
                    02:05:19:8f:27:2d:4a:ed:63:3f:00:d5:ac:98:7c:
                    08:24:1b:2e:e3:e2:a5:5b:d6:8c:c1:f3:a3:bd:aa:
                    9a:0c:c5:f5:8d:9e:6b:78:fc:3f:49:b7:44:c1:4f:
                    e8:1a:47:c9:2d:be:36:f9:34:73:a9:7d:c1:d3:da:
                    9f:aa:1f:4c:ff:36:40:ec:57:59:63:15:ba:2a:e6:
                    c4:59:a2:69:77:cd:e1:25:41:05:51:3d:f1:df:65:
                    61:c2:59:f2:96:9f:15:0a:86:3c:c3:6d:11:18:e9:
                    77:1e:3a:c9:55:d5:d9:bd:ad:a6:f3:21:8a:c7:28:
                    d9:93:03:8b:06:7b:09:3e:94:97:2e:ff:4d:76:a8:
                    93:b9:48:8a:9a:0b:a4:a8:36:d6:16:a9:d6:50:92:
                    07:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6C:AB:9E:37:51:45:D0:FA:48:C9:D8:A5:FF:72:3E:0C:EA:32:8C
            X509v3 Authority Key Identifier:
                keyid:03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f2:e7:3b:87:6d:69:9f:2d:60:be:9d:fc:88:d5:be:e6:2a:
         4b:a1:76:a2:01:11:d8:d4:bf:ef:fd:ad:95:ec:37:34:93:58:
         f2:35:60:e7:5c:5a:6f:94:4e:41:54:2d:b1:63:c6:70:3c:c3:
         0c:31:b0:bc:84:55:12:d8:6c:b5:a2:58:81:76:8e:43:42:46:
         e5:dd:53:e5:63:fc:83:02:6f:d3:93:3f:06:f7:ec:ef:28:92:
         57:cb:91:9e:fc:fd:50:59:05:0c:5e:fa:da:17:23:6d:3e:7a:
         ca:f0:70:32:bd:10:54:80:82:00:7e:b4:51:87:84:86:c1:a1:
         3d:35:05:6d:c8:ca:a2:cd:95:e7:e9:fa:fd:eb:f2:26:26:57:
         ab:66:83:08:ea:05:9f:ff:bf:53:5d:f4:f2:88:07:13:e5:b5:
         03:09:45:fb:44:72:8b:1f:63:35:9c:a4:9b:e1:ca:fe:0a:72:
         f2:1d:b3:ff:a3:34:de:e6:5d:57:36:48:90:e8:27:0b:7d:d4:
         6f:a5:3c:2b:82:7b:b5:32:3e:b3:7e:37:42:6d:77:a1:6a:87:
         ff:cb:37:bc:3c:9e:c2:fe:39:ba:f1:a8:91:d5:15:92:2e:a9:
         a4:13:16:94:73:a4:61:73:fe:09:90:dc:67:33:1c:1d:45:6c:
         5e:ec:0e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:51:23 2024 by rpki-client on console-ams.rpki-client.org