Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File:                     1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier:          S//Dl0+wVwPQT2oBOJhB3NO2UYRfXKzfUVLTtyoYcu0=
Subject key identifier:   5D:62:64:8C:04:AA:25:16:29:3D:02:EC:C5:1B:D5:2A:80:FA:33:D6
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer:       /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial:       018F551574DD054A75FB7EC39AFEA48D3A5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number:          08CF
Signing time:             Tue 07 May 2024 22:03:40 +0000
Manifest this update:     Tue 07 May 2024 22:03:40 +0000
Manifest next update:     Wed 08 May 2024 22:03:40 +0000
Files and hashes:         1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: 5QmQlauWVlLF0BGoh3P7VZNOXbzfmhS/b9fI7UkyCqw=)
                          2: 5qOipuwyxGss5xBRdHV9bVRKsWY.roa (hash: ALkbJ4sXf6hgsvM6OHHMpQAbyCOVSIsYGD2NpOc4+q8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:15:74:dd:05:4a:75:fb:7e:c3:9a:fe:a4:8d:3a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
        Validity
            Not Before: May  7 22:03:40 2024 GMT
            Not After : May  8 22:03:40 2024 GMT
        Subject: CN=5d62648c04aa2516293d02ecc51bd52a80fa33d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9c:8d:a8:c9:f9:e6:80:5c:7e:47:28:d1:06:
                    71:48:27:91:a3:22:4c:56:e3:f0:a7:d1:01:56:0b:
                    af:16:e8:fd:c6:3e:91:7d:13:2a:d1:6f:ff:c2:ca:
                    6b:34:21:d0:2b:9a:93:fc:2e:64:d2:ea:2e:13:5b:
                    5b:12:f6:56:ef:0e:30:11:4b:c3:66:a7:bc:5f:d1:
                    51:eb:7d:fd:89:34:1f:0b:92:54:29:4a:63:56:bd:
                    eb:6b:b5:3a:46:7b:79:86:95:85:c6:b8:f8:c2:b9:
                    90:3a:01:7d:bf:c7:a1:e2:f2:98:98:0f:d9:6d:17:
                    fb:f7:70:5e:28:b2:8e:a2:40:33:73:55:20:2c:99:
                    7f:3c:73:5e:16:1a:01:cf:30:df:07:2b:80:7d:4f:
                    1b:1b:c6:bd:20:21:30:2a:b3:8e:9f:fd:9c:a9:e4:
                    fc:e3:2e:76:46:33:75:9a:0a:f5:7b:d8:25:2c:2b:
                    51:0a:dd:53:f9:dd:10:df:b5:c6:48:22:49:12:79:
                    97:56:ca:47:6c:e3:57:d6:e8:4e:1d:76:38:68:86:
                    f6:32:c3:1c:29:af:d7:7d:a2:55:2b:a2:37:2d:05:
                    26:e0:41:ad:a5:95:7a:de:18:0f:b0:ef:2c:ae:97:
                    15:2c:e8:7a:eb:14:02:bc:b6:41:bd:6c:46:5d:77:
                    02:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:62:64:8C:04:AA:25:16:29:3D:02:EC:C5:1B:D5:2A:80:FA:33:D6
            X509v3 Authority Key Identifier:
                keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:e6:3e:54:be:99:07:fd:46:52:7c:d6:ac:df:b4:74:b4:34:
         78:53:14:02:d6:29:df:9e:3b:0d:a7:fb:fa:52:5c:27:d6:80:
         f4:e0:cb:e2:40:7b:52:3c:6d:0a:c3:f5:0f:62:50:9a:4c:0d:
         f6:40:65:fc:19:55:2e:f4:36:c0:46:98:5b:79:17:75:e2:45:
         9b:f0:b4:aa:af:28:b6:01:17:6c:eb:58:6e:76:0a:47:1e:ff:
         f3:7d:9c:fe:6b:d7:a7:82:e4:5d:8e:58:5f:65:42:55:5f:c6:
         2b:fb:f8:77:3d:a2:e6:94:92:a2:4a:f5:9c:2e:a7:a1:03:18:
         56:bf:09:8b:14:37:33:96:b6:1e:d6:18:8e:c2:ac:f7:cf:09:
         90:c2:f1:66:fb:f8:c7:3c:58:a8:cc:3b:41:96:38:dd:0c:e6:
         f5:8f:28:5f:85:ab:22:d8:ef:e8:ea:2d:31:d0:ac:33:9e:bf:
         79:61:3b:f1:bc:d6:e4:92:8e:b6:b9:7f:12:2f:ab:a7:68:43:
         47:f6:87:22:e0:3f:d5:33:37:82:42:71:e3:c8:e4:b6:50:01:
         d0:85:36:d1:0d:59:29:a8:73:7b:84:aa:db:12:a5:5e:d0:c0:
         5e:76:a8:11:1d:a2:da:d6:ca:f5:65:32:ba:1d:97:a9:47:80:
         7a:64:99:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 23:23:06 2024 by rpki-client on console-fra.rpki-client.org