Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8f2ef4-e161-4b10-a221-999f4f60f0af/1/ItfBGkSaQ3bDp4fH9hPFUaphH5E.mft
File:                     ItfBGkSaQ3bDp4fH9hPFUaphH5E.mft (raw, json)
Hash identifier:          fNFFI0el5ob4sP3WJyShaaOmEFRvOTCOiqO1C8OvJ5M=
Subject key identifier:   A6:96:07:9C:29:F7:4F:E0:3F:ED:79:A8:0A:A5:A5:22:06:91:6B:A9
Authority key identifier: 22:D7:C1:1A:44:9A:43:76:C3:A7:87:C7:F6:13:C5:51:AA:61:1F:91
Certificate issuer:       /CN=22d7c11a449a4376c3a787c7f613c551aa611f91
Certificate serial:       018F45A05CF938E99D3A1BD2E15F25515183
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItfBGkSaQ3bDp4fH9hPFUaphH5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/8f2ef4-e161-4b10-a221-999f4f60f0af/1/ItfBGkSaQ3bDp4fH9hPFUaphH5E.mft
Manifest number:          052D
Signing time:             Sat 04 May 2024 22:01:28 +0000
Manifest this update:     Sat 04 May 2024 22:01:28 +0000
Manifest next update:     Sun 05 May 2024 22:01:28 +0000
Files and hashes:         1: ItfBGkSaQ3bDp4fH9hPFUaphH5E.crl (hash: Yj5tKRGoR/dTBahg4IWtNsI1zeVDqaY0B8rFcXgj8cU=)
                          2: O-ObgbnKFLnlu0CRG9yyUqD6xGY.roa (hash: bF3QfNZf/Lpw5KTM4d/C9H7W81AgzTfcc6BjQf2ADQ4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/8f2ef4-e161-4b10-a221-999f4f60f0af/1/ItfBGkSaQ3bDp4fH9hPFUaphH5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/8f2ef4-e161-4b10-a221-999f4f60f0af/1/ItfBGkSaQ3bDp4fH9hPFUaphH5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ItfBGkSaQ3bDp4fH9hPFUaphH5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 22:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a0:5c:f9:38:e9:9d:3a:1b:d2:e1:5f:25:51:51:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d7c11a449a4376c3a787c7f613c551aa611f91
        Validity
            Not Before: May  4 22:01:28 2024 GMT
            Not After : May  5 22:01:28 2024 GMT
        Subject: CN=a696079c29f74fe03fed79a80aa5a52206916ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:85:da:1f:77:f1:72:5a:b6:5e:8f:85:9d:06:
                    cd:fd:94:58:a9:b8:1f:76:18:ca:cf:f9:bf:22:5c:
                    c7:08:9d:5d:81:4d:3f:98:64:ec:f6:97:b9:15:ca:
                    84:a8:e4:ca:d4:98:3a:d3:d1:f3:2b:f1:41:5f:c6:
                    43:07:ff:be:13:91:76:ee:65:f1:ef:31:d3:5e:b2:
                    c1:80:90:80:b1:b2:55:2a:33:8c:ce:9a:ef:5c:47:
                    22:4d:53:33:0e:9a:5d:54:49:ae:b1:58:16:af:1b:
                    aa:7f:a6:81:ce:33:b1:4d:62:a2:47:a5:aa:8c:6d:
                    2e:bd:eb:21:e2:64:ad:4c:06:e0:13:26:98:d3:19:
                    e1:4c:17:15:99:7d:f6:85:5c:5b:37:4e:8b:52:68:
                    3d:40:da:0d:78:78:e0:e8:a1:60:12:0a:95:99:47:
                    39:ac:b6:13:37:79:91:26:5f:fb:8a:15:35:0e:d5:
                    f9:ad:5a:99:53:35:62:6f:70:39:69:45:02:f2:92:
                    f4:42:bc:d7:54:6e:4a:67:c3:07:ba:11:71:95:d4:
                    4e:02:8e:42:2f:b1:52:99:21:12:67:0d:35:1c:6d:
                    32:ff:93:a3:2e:4b:ec:85:c4:2b:dc:2a:bc:33:4e:
                    37:f8:8f:2f:9a:0c:13:40:9b:31:f7:c4:f5:fe:1f:
                    7b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:96:07:9C:29:F7:4F:E0:3F:ED:79:A8:0A:A5:A5:22:06:91:6B:A9
            X509v3 Authority Key Identifier:
                keyid:22:D7:C1:1A:44:9A:43:76:C3:A7:87:C7:F6:13:C5:51:AA:61:1F:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItfBGkSaQ3bDp4fH9hPFUaphH5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f2ef4-e161-4b10-a221-999f4f60f0af/1/ItfBGkSaQ3bDp4fH9hPFUaphH5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f2ef4-e161-4b10-a221-999f4f60f0af/1/ItfBGkSaQ3bDp4fH9hPFUaphH5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:01:ab:75:16:a8:de:e3:97:ca:59:50:5b:5e:4d:27:66:74:
         85:83:45:a7:9c:7a:0c:06:e4:2f:2c:67:a9:3e:81:62:2c:80:
         f2:05:ec:14:34:39:8c:4c:ec:3e:ff:4c:a2:ce:dc:c0:46:c2:
         2e:94:57:8e:f2:df:fe:2f:75:87:e2:75:5e:5c:f4:9f:df:63:
         c8:95:04:14:c4:1f:d4:ab:84:e6:62:59:64:69:e4:91:1a:70:
         84:2f:f3:06:8f:c4:21:67:5a:f5:c2:9f:93:d4:a4:4c:eb:69:
         55:fe:30:e8:69:25:91:dd:87:21:ef:73:3f:1c:2f:71:19:fc:
         af:95:76:c4:75:32:ff:50:6f:b5:a9:fd:f5:e5:86:1b:77:27:
         67:a4:0d:99:f2:e6:87:4a:9c:aa:81:7e:17:5f:cb:d5:66:10:
         45:83:5e:18:57:9e:d3:6d:3b:bb:69:81:ac:1d:34:4d:98:8b:
         ed:66:ba:a1:ba:9b:47:64:d0:27:89:ed:61:7a:22:30:8b:04:
         00:a9:04:77:35:70:5f:6f:26:0d:24:3c:fc:8d:b0:1e:36:52:
         57:be:7d:f8:c2:7f:ee:ff:70:bb:45:a5:89:3a:bf:67:90:b3:
         55:c8:bf:2f:05:fc:28:9c:43:62:9d:62:34:97:7e:95:64:75:
         47:05:eb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 07:04:12 2024 by rpki-client on console-ams.rpki-client.org