Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
File:                     K0lf5W80diAmqUA18yDwqQt6JWY.mft (raw, json)
Hash identifier:          S8qI/e/U1hWayTQBgYgI4UrJxEvE9CwHMqyIrpJM9yg=
Subject key identifier:   FB:80:AE:B6:54:C5:2E:A5:B5:6F:31:6B:22:B0:4F:2E:FC:15:2A:84
Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
Certificate issuer:       /CN=2b495fe56f34762026a94035f320f0a90b7a2566
Certificate serial:       018F874A6B5BE3DF5268A22673E118459BB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:02:32 +0000
Manifest this update:     Fri 17 May 2024 16:02:32 +0000
Manifest next update:     Sat 18 May 2024 16:02:32 +0000
Files and hashes:         1: K0lf5W80diAmqUA18yDwqQt6JWY.crl (hash: xDkg+VysFz3qbGZik+sxdfk5f8vWlMiYD4TyG//4h8k=)
                          2: leyMw49TIfUUka2v8YcUoAXEnt8.roa (hash: VjX2MgM0OJKQiLseBKuV/1N6jp5/kDPTbHnG3OfmeK8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:6b:5b:e3:df:52:68:a2:26:73:e1:18:45:9b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566
        Validity
            Not Before: May 17 16:02:32 2024 GMT
            Not After : May 18 16:02:32 2024 GMT
        Subject: CN=fb80aeb654c52ea5b56f316b22b04f2efc152a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:54:ac:28:b0:40:76:5a:61:c1:80:a1:80:
                    1f:92:92:9b:65:29:b4:d1:07:33:44:3f:ce:1a:3e:
                    1a:6a:bf:a1:ca:af:89:65:70:67:56:d7:c0:b4:9d:
                    ab:80:cf:68:12:d4:84:c1:4a:a6:69:5a:8d:cc:99:
                    36:1b:ac:f7:1f:82:61:e4:bf:fe:9a:08:de:a2:c9:
                    ab:af:c8:85:9a:00:21:f5:e4:36:bd:62:ec:1a:49:
                    11:93:91:47:d1:68:e9:02:0c:37:ad:f8:22:f6:a1:
                    0c:6a:89:55:c1:a9:78:65:4d:3e:aa:b9:4d:c2:1f:
                    74:67:95:c0:49:3f:c8:6f:2e:4d:10:82:cd:ed:c8:
                    76:18:8d:a6:a4:95:49:be:26:3a:81:b1:8d:d5:4e:
                    66:02:73:c7:d4:fc:d5:c2:4f:ee:72:3b:fd:eb:04:
                    fd:45:49:99:ab:11:99:b7:1a:9c:83:2d:ed:b8:0c:
                    0e:ed:f4:4c:38:11:18:93:6c:ec:5b:13:cf:79:49:
                    1b:1d:0a:37:e9:29:31:6a:67:52:13:69:b6:d8:0e:
                    6b:e7:44:86:d1:fd:32:f0:af:a0:2e:51:bc:6d:52:
                    85:85:bd:c9:10:e1:07:e2:99:4c:26:2d:22:9d:0d:
                    69:08:7a:1b:72:33:65:c8:f3:bb:b5:d4:50:a3:c6:
                    e7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:80:AE:B6:54:C5:2E:A5:B5:6F:31:6B:22:B0:4F:2E:FC:15:2A:84
            X509v3 Authority Key Identifier:
                keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:42:5e:36:be:85:9c:76:35:6c:34:93:39:21:ef:1e:e3:9f:
         ef:a3:94:e8:ea:fa:6e:cf:21:9e:93:c4:c2:63:0f:c8:3d:10:
         b5:46:c1:7d:ba:35:82:e6:54:22:8e:cd:c1:c5:91:ce:37:fd:
         45:fa:88:1f:16:62:28:9c:de:9b:2b:35:24:12:ea:2b:cd:b0:
         07:5a:b1:15:dd:79:41:2b:0c:5d:34:cd:61:0e:73:2b:1d:12:
         2e:54:21:e3:cc:8e:1f:3b:14:98:2f:52:40:87:b6:d6:a7:8c:
         83:7e:34:3b:aa:ad:f8:25:b0:35:0e:f6:17:ca:e8:ee:29:00:
         d5:0d:1b:5b:c2:d8:7d:78:fb:45:f5:9c:6c:3f:06:0f:5f:db:
         ad:ae:1f:ea:fe:d4:15:3f:7a:9d:72:5b:34:c3:0e:e8:8c:93:
         a3:23:2d:3f:1d:3b:e6:31:3b:f6:1b:ab:09:ee:76:88:a9:ea:
         67:15:a8:2e:93:b4:57:4e:93:e8:ec:94:c1:4b:ba:4c:5c:3f:
         ed:a1:81:03:42:3a:1d:42:32:6f:2d:99:bf:32:28:8c:94:6a:
         39:38:4c:c4:6a:1d:5a:06:b0:ee:79:b8:11:67:59:3c:60:ab:
         f8:93:0a:45:68:e8:7e:5b:ca:82:8e:4d:41:ce:55:01:25:98:
         53:fa:5a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:06:48 2024 by rpki-client on console-fra.rpki-client.org