Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
File:                     ATNUQlFNUkm1FDz9-CEha7XFKUA.mft (raw, json)
Hash identifier:          uJBVJHdw+6rNIIsMaQPwGebeOv6tfe7typx75r6C3ZU=
Subject key identifier:   81:EA:3B:53:DE:4B:16:63:F6:B4:6F:AA:C1:2C:A1:D3:82:3E:39:24
Authority key identifier: 01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
Certificate issuer:       /CN=01335442514d5249b5143cfdf821216bb5c52940
Certificate serial:       018F4AC642499A85443869CD8DB9FDE2DD8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
Manifest number:          0EB4
Signing time:             Sun 05 May 2024 22:00:58 +0000
Manifest this update:     Sun 05 May 2024 22:00:58 +0000
Manifest next update:     Mon 06 May 2024 22:00:58 +0000
Files and hashes:         1: ATNUQlFNUkm1FDz9-CEha7XFKUA.crl (hash: az1Hf3i226XlgZD3mzCnHKT1PS2UXhoSlJDb22yi8K0=)
                          2: NEVpuvZMKoIbcEzQYa6aMI9Lv6U.roa (hash: tgtExkr8q60F4Vp49siu2jyUn3MykgKry/9EVBV51Ec=)
                          3: YbqlzEQlQKg1R61mqp3gyiz3zN8.roa (hash: xz4eqYFL/lcuQ9ZNo/ob12wma4CeWMUesuzW769rtus=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:c6:42:49:9a:85:44:38:69:cd:8d:b9:fd:e2:dd:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01335442514d5249b5143cfdf821216bb5c52940
        Validity
            Not Before: May  5 22:00:58 2024 GMT
            Not After : May  6 22:00:58 2024 GMT
        Subject: CN=81ea3b53de4b1663f6b46faac12ca1d3823e3924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:c7:c1:9d:40:87:02:22:f9:7d:29:bb:4a:
                    f3:5b:d0:e2:43:2d:f7:55:7d:f5:61:50:9e:28:55:
                    e0:05:f6:c7:53:08:96:9b:3d:86:9f:77:89:b8:ac:
                    6b:70:30:91:8a:ba:ca:d8:b3:d7:e2:f4:30:57:fc:
                    ac:49:fd:6d:5a:18:04:1b:e2:99:bc:90:ae:3c:1e:
                    4d:ef:a8:bc:95:54:f1:e2:37:d7:59:d1:5f:b2:6e:
                    06:0d:b7:ac:2c:b6:81:32:3a:4e:8f:74:7c:0b:6a:
                    e8:97:56:91:68:22:e6:62:0c:94:78:16:82:77:02:
                    43:3b:29:be:22:63:da:c6:f0:ad:25:79:32:8d:8d:
                    9c:93:82:bc:83:4f:80:ca:ea:76:cc:3b:f2:d0:ec:
                    a1:a5:28:4a:9d:11:8d:a7:0f:53:9c:50:36:2f:db:
                    c5:f1:5b:52:37:53:54:6d:8f:20:ab:76:15:62:f0:
                    2e:c9:ca:6e:a7:48:1f:7d:b0:c1:42:94:da:c1:a6:
                    7e:79:fb:50:5c:49:09:2c:75:be:96:b9:64:d7:71:
                    d2:10:86:4a:2c:81:de:e1:64:17:93:00:16:30:13:
                    99:e1:df:c3:58:b9:67:80:65:82:85:f1:97:46:b5:
                    0c:74:74:6d:8c:ea:bf:85:48:8e:93:63:72:92:5e:
                    5b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EA:3B:53:DE:4B:16:63:F6:B4:6F:AA:C1:2C:A1:D3:82:3E:39:24
            X509v3 Authority Key Identifier:
                keyid:01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:6c:4d:b5:40:57:a2:60:63:c2:90:06:1e:35:7c:e1:85:b2:
         28:28:1d:ca:d4:35:da:e9:49:2e:a5:1c:bc:49:74:f6:a4:84:
         9e:5a:53:5e:24:5f:61:04:02:e9:8e:a7:c5:c2:6b:71:08:3f:
         4a:a7:0b:c8:a8:4e:60:b4:32:c4:e5:e9:ad:54:ef:1c:d4:f3:
         f9:4b:14:84:15:c9:66:69:cd:6c:bc:b1:1b:3f:50:a3:19:14:
         2d:f1:50:46:29:77:2c:89:01:14:c4:7e:0b:86:83:b2:c5:f5:
         4e:ae:10:c4:b8:54:56:c6:1b:07:cd:d3:7c:20:a8:ed:a5:e0:
         32:c1:64:44:bc:b2:d7:79:15:68:0c:ac:97:fc:5c:c2:1c:57:
         02:a9:4d:46:4a:c8:31:57:4a:b9:bd:63:de:ab:bf:91:74:c3:
         73:ea:f9:3c:73:f0:94:63:de:51:30:2f:f9:99:97:73:c3:ed:
         5a:50:9b:85:4e:8a:c2:ff:f1:49:66:9d:f9:6e:6f:b2:5a:0e:
         93:75:0b:dd:52:0d:36:96:0a:45:8f:49:16:63:d1:28:8c:57:
         5f:bd:9f:05:c6:ae:99:69:c2:98:7f:da:47:46:d2:60:7d:c1:
         9a:f9:e6:f5:f7:4f:46:2d:e4:ff:84:7c:93:0d:54:57:33:db:
         23:4d:15:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:55:07 2024 by rpki-client on console-fra.rpki-client.org